Search CVE reports
1 – 10 of 222 results
Some fixes available 9 of 12
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain...
6 affected packages
firefox, mozilla-thunderbird, seamonkey, thunderbird, xulrunner-1.9, xulrunner-1.9.1
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
Some fixes available 9 of 12
The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial...
6 affected packages
firefox, mozilla-thunderbird, seamonkey, thunderbird, xulrunner-1.9, xulrunner-1.9.1
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
Some fixes available 9 of 12
The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service (memory corruption and application crash)...
6 affected packages
firefox, mozilla-thunderbird, seamonkey, thunderbird, xulrunner-1.9, xulrunner-1.9.1
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
Some fixes available 9 of 12
Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy...
6 affected packages
firefox, mozilla-thunderbird, seamonkey, thunderbird, xulrunner-1.9, xulrunner-1.9.1
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
Some fixes available 4 of 11
Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service (memory consumption and application crash) via a large integer value for the length property of a...
7 affected packages
firefox, mozilla-thunderbird, seamonkey, thunderbird, xulrunner...
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
Some fixes available 5 of 8
The JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to (1)...
5 affected packages
firefox, mozilla-thunderbird, thunderbird, xulrunner-1.9, xulrunner-1.9.1
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
Some fixes available 5 of 8
Mozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service (memory corruption and application crash) or execute arbitrary code via vectors involving double frame construction, related to (1)...
5 affected packages
firefox, mozilla-thunderbird, thunderbird, xulrunner-1.9, xulrunner-1.9.1
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
Some fixes available 5 of 8
The nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12, SeaMonkey 2.0a1pre, and Thunderbird allows remote attackers to cause a denial of service (memory corruption and application crash) or...
6 affected packages
firefox, mozilla-thunderbird, thunderbird, xulrunner, xulrunner-1.9, xulrunner-1.9.1
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
Some fixes available 9 of 16
Multiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in nsprpub/lib/libc/src/base64.c in Mozilla Firefox before 3.0.12, Thunderbird before 2.0.0.24, and SeaMonkey before 1.1.19 allow remote...
6 affected packages
firefox, mozilla-thunderbird, thunderbird, xulrunner, xulrunner-1.9, xulrunner-1.9.1
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
firefox | — | — | — | — |
mozilla-thunderbird | — | — | — | — |
thunderbird | — | — | — | — |
xulrunner | — | — | — | — |
xulrunner-1.9 | — | — | — | — |
xulrunner-1.9.1 | — | — | — | — |
Some fixes available 7 of 9
Mozilla Thunderbird before 2.0.0.22 and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a multipart/alternative e-mail message containing a...
3 affected packages
mozilla-thunderbird, seamonkey, thunderbird
Package | 24.04 LTS | 22.04 LTS | 20.04 LTS | 18.04 LTS |
---|---|---|---|---|
mozilla-thunderbird | — | — | — | — |
seamonkey | — | — | — | — |
thunderbird | — | — | — | — |