Browse CVEs

HIGH 9.3 CVE-2010-3778EPSS 8% Unspecified vulnerability in Mozilla Firefox 3.5.x before 3.5.16, Thunderbird before 3.0.11, and SeaMonkey before 2.0.11 allows remote attackers to c… Firefox after 3.0.10 Fix from $1,9502010-12-10 CRITICAL 9.8 CVE-2010-3765 KEVEPSS 83% Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunderbird 3.1.6 before 3.1.6 and 3.0.x before 3.0.10, and SeaMonkey 2.x before 2.0.1… Firefox Mitigation only Fix from $2,3002010-10-28 HIGH 9.3 CVE-2010-3179EPSS 10% Stack-based buffer overflow in the text-rendering functionality in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 an… Firefox after 3.5.13 Fix from $1,9502010-10-21 HIGH 9.3 CVE-2010-3183EPSS 6% The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3… Firefox after 3.5.13 Fix from $1,9502010-10-21 HIGH 9.3 CVE-2010-2770 Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 on Mac OS X allow r… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-3166EPSS 6% Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird befor… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-3167EPSS 7% The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonke… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-3168 Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly res… Firefox after 3.5.11 Fix from $1,9502010-09-09 HIGH 9.3 CVE-2010-1212 js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 allows remote attackers to cause a… Firefox Mitigation only Fix from $1,9502010-07-30 HIGH 10.0 CVE-2010-1122 Unspecified vulnerability in Mozilla Firefox 3.5.x through 3.5.8 allows remote attackers to cause a denial of service (memory corruption and applicat… Firefox Mitigation only Fix from $1,9502010-03-25 HIGH 9.3 CVE-2010-0165 The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 allows remote attacke… Firefox Mitigation only Fix from $1,9502010-03-25 HIGH 9.3 CVE-2010-0167EPSS 11% The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before… Firefox after 3.0.1 Fix from $1,9502010-03-25 MEDIUM 5.1 CVE-2010-0166EPSS 7% The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.cpp in the browser engine in Mozilla Firefox 3.6 before 3.6.2 on Mac OS X, when … Firefox Mitigation only Fix from $1,6002010-03-25 HIGH 10.0 CVE-2009-3373EPSS 16% Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote a… Firefox after 1.5.0.10 Fix from $1,9502009-10-29 HIGH 10.0 CVE-2009-2662 The browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a denial of service (memory corruption and application cras… Firefox after 3.0.12 Fix from $1,9502009-08-04 HIGH 9.3 CVE-2009-2404 Heap-based buffer overflow in a regular-expression parser in Mozilla Network Security Services (NSS) before 3.12.3, as used in Firefox, Thunderbird, … Network Security Services Patch available Fix from $1,9502009-08-03 HIGH 7.8 CVE-2009-2479EPSS 12% Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service (uncaught exception and application crash) via … Firefox No fix yet Fix from $1,9502009-07-16 MEDIUM 6.8 CVE-2009-0689EPSS 28% Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as … Firefox Patch available Fix from $1,6002009-07-01 HIGH 9.3 CVE-2008-0017EPSS 8% The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 d… Firefox 1.1.13 / 2.0.0.18+ Fix from $1,9502008-11-13 HIGH 10.0 CVE-2008-4070EPSS 7% Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to cause a denial of service (a… Seamonkey after 2.0.0.16 Fix from $1,9502008-09-27 HIGH 10.0 CVE-2008-0016EPSS 44% Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers … Firefox after 2.0.0.16 Fix from $1,9502008-09-24 HIGH 10.0 CVE-2008-2786 Buffer overflow in Firefox 3.0 and 2.0.x has unknown impact and attack vectors. NOTE: due to lack of details as of 20080619, it is not clear whether… Firefox No fix yet Fix from $1,9502008-06-19 HIGH 7.5 CVE-2008-0304EPSS 6% Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attackers to execute arbitrary code v… Seamonkey after 2.0.0.9 Fix from $1,9502008-02-29 HIGH 9.3 CVE-2007-2867 Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and… Firefox Patch available Fix from $1,9502007-06-01 MEDIUM 6.8 CVE-2007-1256 Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address bar, favicons, and document source, and perform updates in the context of arbitr… Firefox Mitigation only Fix from $1,6002007-03-03 MEDIUM 6.8 CVE-2007-0009EPSS 50% Stack-based buffer overflow in the SSLv2 support in Mozilla Network Security Services (NSS) before 3.11.5, as used by Firefox before 1.5.0.10 and 2.x… Firefox 1.0.8 / 1.5.0.10+ Fix from $1,6002007-02-26 HIGH 9.3 CVE-2007-0776EPSS 7% Heap-based buffer overflow in the _cairo_pen_init function in Mozilla Firefox 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1… Firefox after 2.0.0.1 Fix from $1,9502007-02-26 HIGH 9.3 CVE-2007-0777EPSS 8% The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remot… Firefox 1.0.8 / 1.5.0.10+ Fix from $1,9502007-02-26 MEDIUM 6.8 CVE-2006-6500EPSS 8% Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows… Firefox 1.0.7 / 1.5.0.9+ Fix from $1,6002006-12-20 HIGH 9.3 CVE-2006-4565EPSS 6% Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause… Firefox after 1.5.0.6 Fix from $1,9502006-09-15