Search CVE reports
211 – 220 of 227 results
Some fixes available 33 of 39
Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an incorrect integer data type as a CSS object reference counter in the CSSValue array (aka nsCSSValue:Array) data...
9 affected packages
iceape, firefox, firefox-3.0, iceweasel, mozilla-thunderbird...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
iceape | — | — | — | — |
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceweasel | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
Mozilla Firefox 2.0.0.14 allows remote attackers to cause a denial of service (heap corruption and application crash) or possibly execute arbitrary code by triggering an error condition during certain Iframe operations between a...
6 affected packages
iceape, firefox, firefox-3.0, iceweasel, seamonkey, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
iceape | — | — | — | — |
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceweasel | — | — | — | — |
seamonkey | — | — | — | — |
xulrunner | — | — | — | — |
Mozilla Firefox 3.0 beta 5 allows remote attackers to cause a denial of service (application crash) via JavaScript code that calls document.write in an infinite loop.
6 affected packages
firefox, firefox-3.0, iceape, iceweasel, seamonkey, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceape | — | — | — | — |
iceweasel | — | — | — | — |
seamonkey | — | — | — | — |
xulrunner | — | — | — | — |
Some fixes available 22 of 27
The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 does not check for an allocation failure, which allows remote attackers to cause a...
7 affected packages
firefox, firefox-3.0, iceape, iceweasel, seamonkey...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceape | — | — | — | — |
iceweasel | — | — | — | — |
seamonkey | — | — | — | — |
xulrunner | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
Some fixes available 23 of 29
Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to execute arbitrary code via a crafted UTF-8 URL in a link.
6 affected packages
firefox, firefox-3.0, iceape, seamonkey, xulrunner, xulrunner-1.9
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceape | — | — | — | — |
seamonkey | — | — | — | — |
xulrunner | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
Some fixes available 9 of 10
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to execute arbitrary code by appending an SVG comment DOM node to another type of document, which triggers memory corruption.
6 affected packages
firefox, firefox-3.0, iceape, lightning-sunbird, midbrowser, xulrunner
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceape | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
xulrunner | — | — | — | — |
Some fixes available 12 of 13
Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to bypass cross-site scripting (XSS) protection by changing the src attribute of an IMG...
7 affected packages
firefox, firefox-3.0, iceape, lightning-sunbird, midbrowser...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceape | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Some fixes available 12 of 13
Use-after-free vulnerability in the LiveConnect bridge code for Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to cause a denial of service...
7 affected packages
firefox, firefox-3.0, iceape, lightning-sunbird, midbrowser...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceape | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Some fixes available 12 of 13
Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch...
7 affected packages
firefox, firefox-3.0, iceape, lightning-sunbird, midbrowser...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceape | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
Some fixes available 12 of 13
The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 overwrites memory instead of exiting when the floating point precision is reduced, which...
7 affected packages
firefox, firefox-3.0, iceape, lightning-sunbird, midbrowser...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
iceape | — | — | — | — |
lightning-sunbird | — | — | — | — |
midbrowser | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
xulrunner | — | — | — | — |