xulrunner vulnerabilities (Red Hat)
471 vulnerabilities.
xulrunnerRed Hatlayout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0...10.0 HighxulrunnerRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15...10.0 HighxulrunnerRed HatMozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly...9.3 HighxulrunnerRed Hatcontent/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x...4.3 MediumxulrunnerRed HatThe XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x...7.5 HighxulrunnerRed HatHeap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x...10.0 HighxulrunnerRed HatMozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote...9.3 HighxulrunnerRed HatMozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form...5.0 MediumxulrunnerRed HatMozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3...4.4 MediumxulrunnerRed HatUnspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows remote...10.0 HighxulrunnerRed HatVisual truncation vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, allows...5.0 MediumxulrunnerRed HatMozilla Firefox before 3.0.14, and 3.5.x before 3.5.3, does not properly manage pointers for the...9.3 HighxulrunnerRed HatMozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the (1)...9.3 HighxulrunnerRed HatMultiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 3.0.14...10.0 HighxulrunnerRed HatUnspecified vulnerability in the JavaScript engine in Mozilla Firefox before 3.0.14 allows remote...10.0 HighxulrunnerRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 and 3...10.0 HighxulrunnerRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14, and...10.0 HighxulrunnerRed HatMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow...10.0 HighxulrunnerRed HatThe js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox...5.0 MediumxulrunnerRed HatMozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to spoof the...5.8 MediumxulrunnerRed HatMozilla Firefox before 3.0.12, and 3.5.x before 3.5.2, allows remote SOCKS5 proxy servers to...5.0 MediumxulrunnerRed HatMozilla Firefox before 3.0.12 does not always use XPCCrossOriginWrapper when required during...4.3 MediumxulrunnerRed HatThe setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object...10.0 HighxulrunnerRed HatMozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a...10.0 HighxulrunnerRed HatMozilla Firefox before 3.0.12 and 3.5 before 3.5.1 allows remote attackers to cause a denial of...10.0 HighxulrunnerRed HatThe JavaScript engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to...10.0 HighxulrunnerRed HatMozilla Firefox before 3.0.12 and Thunderbird allow remote attackers to cause a denial of service...10.0 HighxulrunnerRed HatThe nsXULTemplateQueryProcessorRDF::CheckIsSeparator function in Mozilla Firefox before 3.0.12,...10.0 HighxulrunnerRed HatMultiple integer overflows in the (1) PL_Base64Decode and (2) PL_Base64Encode functions in...10.0 HighxulrunnerRed HatThe browser engine in Mozilla Firefox before 3.0.12 and Thunderbird allows remote attackers to...10.0 HighxulrunnerRed HatArray index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka...6.8 MediumxulrunnerRed Hatjs/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2...9.3 HighxulrunnerRed HatMozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before...9.3 HighxulrunnerRed HatMozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through...5.4 MediumxulrunnerRed HatThe garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0...9.3 HighxulrunnerRed HatRace condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime...7.5 HighxulrunnerRed HatMozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the...6.8 MediumxulrunnerRed HatMozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external...4.3 MediumxulrunnerRed HatVisual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0...4.3 MediumxulrunnerRed HatThe JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and...9.3 HighxulrunnerRed HatMozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow...9.3 HighxulrunnerRed HatThe browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey...9.3 HighxulrunnerRed HatThe nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox...9.3 HighxulrunnerRed HatMozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh...4.3 MediumxulrunnerRed HatMozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to...4.3 MediumxulrunnerRed HatCross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla...4.3 MediumxulrunnerRed HatMozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same...4.3 MediumxulrunnerRed HatCross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and...4.3 MediumxulrunnerRed HatThe view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey...6.8 MediumxulrunnerRed HatThe jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not...4.3 Medium- Show moreLoading…