Lucene search
K

4 matches found

CNVD
CNVD
added 2016/04/28 12:0 a.m.1 views

Mozilla Firefox and Firefox ESR Arbitrary Code Execution Vulnerability (CNVD-2016-02761)

Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open source web browser; Firefox ESR is an extended support version of Firefox. An arbitrary code execution vulnerability exists in the 'JavaScript .watch' function in Mozilla...

7.5CVSS9.3AI score0.02064EPSS
Exploits0References1
RedHat Linux
RedHat Linux
added 2009/07/22 12:27 a.m.2 views

Mozilla remote code execution using watch and __defineSetter__ on SVG element

Mozilla Firefox before 3.0.12 does not properly handle an SVG element that has a property with a watch function and an defineSetter function, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a crafted documen...

10CVSS6.3AI score0.05557EPSS
Exploits1References4
CERT
CERT
added 2007/01/18 12:0 a.m.39 views

Mozilla products vulnerable to privilege escalation via a JavaScript watch() function

Overview A vulnerability exists in Mozilla products that may allow a remote attacker to gain elevated privileges. Description Mozilla products contain a vulnerability in the way the JavaScript watch function is handled that may result in privilege escalation. According to the Mozilla Foundation...

6.8CVSS6.2AI score0.0283EPSS
Exploits0References13
OSV
OSV
added 2006/12/20 1:28 a.m.2 views

DEBIAN-CVE-2006-6501

Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird before 1.5.0.9, and SeaMonkey before 1.0.7 allows remote attackers to gain privileges and install malicious code via the watch Javascript function...

6.8CVSS8.9AI score0.0283EPSS
Exploits0References1
Rows per page
Query Builder