xulrunner vulnerabilities (Debian)
254 vulnerabilities.
xulrunnerDebianMozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3...4.4 MediumxulrunnerDebianVisual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows...5.0 MediumxulrunnerDebianMozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the...9.3 HighxulrunnerDebianMozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1)...9.3 HighxulrunnerDebianMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14...10.0 HighxulrunnerDebianUnspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote...10.0 HighxulrunnerDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3...10.0 HighxulrunnerDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and...10.0 HighxulrunnerDebianMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow...10.0 HighxulrunnerDebianMozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to...4.3 MediumxulrunnerDebianThe js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox...5.0 MediumxulrunnerDebianThe browser engine in Mozilla Firefox 3.5.x before 3.5.2 allows remote attackers to cause a...10.0 HighxulrunnerDebianMozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the...5.8 MediumxulrunnerDebianMozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to...5.0 MediumxulrunnerDebianMozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during...4.3 MediumxulrunnerDebianThe setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object...10.0 HighxulrunnerDebianMozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a...10.0 HighxulrunnerDebianMozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of...10.0 HighxulrunnerDebianThe JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to...10.0 HighxulrunnerDebianMozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service...10.0 HighxulrunnerDebianThe nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12,...10.0 HighxulrunnerDebianThe browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to...10.0 HighxulrunnerDebianMozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL...9.3 HighxulrunnerDebianjs/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2...9.3 HighxulrunnerDebianMozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before...9.3 HighxulrunnerDebianMozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through...5.4 MediumxulrunnerDebianThe garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0...9.3 HighxulrunnerDebianRace condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime...7.5 HighxulrunnerDebianMozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the...6.8 MediumxulrunnerDebianMozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external...4.3 MediumxulrunnerDebianVisual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0...4.3 MediumxulrunnerDebianThe JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and...9.3 HighxulrunnerDebianMozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow...9.3 HighxulrunnerDebianThe browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey...9.3 HighxulrunnerDebianMozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh...4.3 MediumxulrunnerDebianMozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to...4.3 MediumxulrunnerDebianMozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same...4.3 MediumxulrunnerDebianCross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and...4.3 MediumxulrunnerDebianThe view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey...6.8 MediumxulrunnerDebianThe jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not...4.3 MediumxulrunnerDebianThe JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...5.0 MediumxulrunnerDebianThe JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...5.0 MediumxulrunnerDebianThe browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...5.0 MediumxulrunnerDebianThe browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...5.0 MediumxulrunnerDebianThe txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey...9.3 HighxulrunnerDebianMozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown...9.3 HighxulrunnerDebiannsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before...7.1 HighxulrunnerDebianDouble free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and...10.0 HighxulrunnerDebianThe layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and...9.3 HighxulrunnerDebianThe JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey...10.0 High- Show moreLoading…