firefox vulnerabilities (Red Hat)
2,057 vulnerabilities.
firefoxRed HatArray index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...6.8 MediumfirefoxRed Hatjs/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2...9.3 HighfirefoxRed HatMozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before...9.3 HighfirefoxRed HatMozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through...5.4 MediumfirefoxRed HatThe garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0...9.3 HighfirefoxRed HatRace condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime...7.5 HighfirefoxRed HatMozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the...6.8 MediumfirefoxRed HatMozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external...4.3 MediumfirefoxRed HatVisual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0...4.3 MediumfirefoxRed HatThe JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and...9.3 HighfirefoxRed HatMozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow...9.3 HighfirefoxRed HatThe browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey...9.3 HighfirefoxRed HatThe nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox...9.3 HighfirefoxRed HatMozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh...4.3 MediumfirefoxRed HatMozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to...4.3 MediumfirefoxRed HatCross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla...4.3 MediumfirefoxRed HatMozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same...4.3 MediumfirefoxRed HatCross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and...4.3 MediumfirefoxRed HatThe view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey...6.8 MediumfirefoxRed HatThe jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not...4.3 MediumfirefoxRed HatThe JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...5.0 MediumfirefoxRed HatThe JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...5.0 MediumfirefoxRed HatThe browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...5.0 MediumfirefoxRed HatThe browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...5.0 MediumfirefoxRed HatThe txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey...9.3 HighfirefoxRed HatMozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown...9.3 HighfirefoxRed HatMozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 decode...5.8 MediumfirefoxRed HatnsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before...7.1 HighfirefoxRed HatDouble free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and...10.0 HighfirefoxRed HatThe layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and...9.3 HighfirefoxRed HatThe JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey...10.0 HighfirefoxRed HatThe layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and...9.3 HighfirefoxRed HatThe layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1...10.0 HighfirefoxRed HatThe PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in...6.8 MediumfirefoxRed HatThe Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions...5.8 MediumfirefoxRed HatMozilla Firefox 3.x before 3.0.6 does not properly implement the (1) no-store and (2) no-cache...3.3 LowfirefoxRed HatMozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web...5.0 MediumfirefoxRed HatMozilla Firefox before 3.0.6 and SeaMonkey do not block links to the (1) about:plugins and (2)...5.1 MediumfirefoxRed Hatcomponents/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block...5.4 MediumfirefoxRed HatCross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x before 3.0.6 allows remote...2.6 LowfirefoxRed HatUnspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and...10.0 HighfirefoxRed HatMultiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0...10.0 HighfirefoxRed HatThe Math.random function in the JavaScript implementation in Mozilla Firefox 3.5.x before 3.5.10...4.9 MediumfirefoxRed HatUnspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and...4.3 MediumfirefoxRed HatMultiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19,...6.8 MediumfirefoxRed HatMozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and...4.3 MediumfirefoxRed HatThe CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x...5.0 MediumfirefoxRed HatMozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and...4.3 MediumfirefoxRed HatMozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and...6.0 MediumfirefoxRed HatMozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and...6.8 Medium- Show moreLoading…