Search CVE reports
91 – 100 of 227 results
Some fixes available 24 of 29
Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset,...
7 affected packages
firefox, firefox-3.0, firefox-3.5, seamonkey, thunderbird...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
firefox-3.5 | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |
Some fixes available 24 of 29
The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle destruction of the DOM plugin...
7 affected packages
firefox, firefox-3.0, firefox-3.5, seamonkey, thunderbird...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
firefox-3.5 | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |
Some fixes available 24 of 29
The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during...
7 affected packages
firefox, firefox-3.0, firefox-3.5, seamonkey, thunderbird...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
firefox-3.5 | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |
Some fixes available 24 of 29
Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute...
7 affected packages
firefox, firefox-3.0, firefox-3.5, seamonkey, thunderbird...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
firefox-3.5 | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |
Some fixes available 24 of 29
Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which...
7 affected packages
firefox, firefox-3.0, firefox-3.5, seamonkey, thunderbird...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
firefox-3.5 | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |
Some fixes available 9 of 11
The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, which...
5 affected packages
firefox, firefox-3.0, firefox-3.5, thunderbird, xulrunner-1.9.2
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
firefox-3.5 | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |
Some fixes available 24 of 29
Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to...
7 affected packages
firefox, firefox-3.0, firefox-3.5, seamonkey, thunderbird...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
firefox-3.5 | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |
Some fixes available 8 of 11
layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not properly free memory in the parameter array of a plugin instance, which allows remote attackers to cause a denial of service (memory corruption) or possibly...
4 affected packages
firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.2
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
firefox-3.5 | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |
Some fixes available 8 of 11
dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in certain...
4 affected packages
firefox-3.0, firefox, firefox-3.5, xulrunner-1.9.2
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox-3.0 | — | — | — | — |
firefox | — | — | — | — |
firefox-3.5 | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |
Some fixes available 15 of 21
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a...
5 affected packages
firefox, firefox-3.0, firefox-3.5, thunderbird, xulrunner-1.9.2
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
firefox-3.0 | — | — | — | — |
firefox-3.5 | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9.2 | — | — | — | — |