Browse CVEs

MEDIUM 5.0 CVE-2010-0220 The nsObserverList::FillObserverArray function in xpcom/ds/nsObserverList.cpp in Mozilla Firefox before 3.5.7 allows remote attackers to cause a deni… Firefox after 3.5.6 Fix from $1,6002010-01-07 HIGH 9.3 CVE-2009-3388 liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before 2.0.1 might allow context-dependent attackers to cause a denial of service (app… Firefox after 2.0 Fix from $1,9502009-12-17 HIGH 9.3 CVE-2009-3980 Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.6, SeaMonkey before 2.0.1, and Thunderbird allow remot… Firefox after 2.0 Fix from $1,9502009-12-17 HIGH 10.0 CVE-2009-3371EPSS 7% Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.4 allows remote attackers to cause a denial of service (application crash) or possib… Firefox Patch available Fix from $1,9502009-10-29 MEDIUM 5.0 CVE-2008-7244 Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop,… Firefox after 3.0.1 Fix from $1,6002009-09-18 MEDIUM 5.0 CVE-2009-2953 Mozilla Firefox 3.0.6 through 3.0.13, and 3.5.x, allows remote attackers to cause a denial of service (CPU consumption) via JavaScript code with a lo… Firefox Mitigation only Fix from $1,6002009-08-24 HIGH 9.3 CVE-2009-2663 libvorbis before r16182, as used in Mozilla Firefox 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of se… Firefox after 3.5.1 Fix from $1,9502009-08-04 MEDIUM 5.0 CVE-2009-2664 The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.12 allows remote attackers to cause a denial … Firefox after 3.5.1 Fix from $1,6002009-08-04 HIGH 10.0 CVE-2009-2462EPSS 5% The browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and appli… Firefox Patch available Fix from $1,9502009-07-22 HIGH 10.0 CVE-2009-2464EPSS 13% The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote att… Firefox after 3.0.11 Fix from $1,9502009-07-22 HIGH 10.0 CVE-2009-2465EPSS 5% Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execut… Firefox after 3.0.11 Fix from $1,9502009-07-22 HIGH 10.0 CVE-2009-2469EPSS 6% Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an __defineSetter__ function, whi… Firefox after 3.0.11 Fix from $1,9502009-07-22 MEDIUM 5.0 CVE-2009-1827 The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service (application hang) via a large value in the r (aka Ra… Firefox No fix yet Fix from $1,6002009-05-29 MEDIUM 5.0 CVE-2009-1828EPSS 9% Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop, application hang, and memory consumption) via a KEYGEN el… Firefox No fix yet Fix from $1,6002009-05-29 HIGH 9.3 CVE-2009-1313EPSS 8% The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of … Firefox Mitigation only Fix from $1,9502009-04-30 MEDIUM 5.0 CVE-2009-1302 The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a d… Firefox after 2.0.0.19 Fix from $1,6002009-04-22 MEDIUM 5.0 CVE-2009-1304 The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause … Firefox after 2.0.0.19 Fix from $1,6002009-04-22 MEDIUM 5.0 CVE-2009-1305 The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a de… Firefox after 2.0.0.19 Fix from $1,6002009-04-22 HIGH 9.3 CVE-2009-1169EPSS 10% The txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey before 1.1.16 allows remote attackers to cause a de… Firefox after 3.0.7 Fix from $1,9502009-03-27 HIGH 9.3 CVE-2009-1044EPSS 6% Mozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown vectors related to the _moveToEdgeShift XUL tree met… Firefox Patch available Fix from $1,9502009-03-23 HIGH 10.0 CVE-2009-0771 The layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of ser… Firefox after 3.0.6 Fix from $1,9502009-03-05 HIGH 10.0 CVE-2009-0773EPSS 6% The JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of… Firefox after 3.0.6 Fix from $1,9502009-03-05 HIGH 10.0 CVE-2009-0775 Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execut… Firefox after 3.0.6 Fix from $1,9502009-03-05 HIGH 9.3 CVE-2009-0772 The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denia… Firefox after 3.0.6 Fix from $1,9502009-03-05 HIGH 9.3 CVE-2009-0774 The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denia… Firefox after 3.0.6 Fix from $1,9502009-03-05 MEDIUM 5.0 CVE-2009-0821EPSS 5% Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service (application crash) via nested calls to the window.print fu… Firefox after 2.0.0.20 Fix from $1,6002009-03-05 HIGH 10.0 CVE-2009-0352 Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attac… Firefox after 2.0.0.19 Fix from $1,9502009-02-04 HIGH 10.0 CVE-2009-0353 Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to ca… Firefox after 2.0.0.19 Fix from $1,9502009-02-04 MEDIUM 5.0 CVE-2008-5822 Memory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote attackers to cause a denial of service (memory consumption … Libxul No fix yet Fix from $1,6002009-01-02 HIGH 10.0 CVE-2008-5500 The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow… Firefox 1.1.14 / 2.0.0.19+ Fix from $1,9502008-12-17