Firefox Security Vulnerabilities and Issues — Firefox CVE List

Lucene search

MozillaFirefox

4 matches found

CVE•added 2005/02/08 5:0 a.m.•76 views

CVE-2005-0233

The International Domain Name (IDN) support in Firefox 1.0, Camino .8.5, and Mozilla before 1.7.6 allows remote attackers to spoof domain names using punycode encoded domain names that are decoded in URLs and SSL certificates in a way that uses homograph characters from other character sets, which ...

7.5CVSS6.2AI score0.08584EPSS

CVE•added 2005/02/13 5:0 a.m.•66 views

CVE-2004-0866

Internet Explorer 6.0 allows web sites to set cookies for country-specific top-level domains, such as .ltd.uk, .plc.uk, and .sch.uk, which could allow remote attackers to perform a session fixation attack and hijack a user's HTTP session.

7.5CVSS6.9AI score0.03541EPSS

CVE•added 2005/02/08 5:0 a.m.•64 views

CVE-2005-0231

Firefox 1.0 does not invoke the Javascript Security Manager when a user drags a javascript: or data: URL to a tab, which allows remote attackers to bypass the security model, aka "firetabbing."

2.6CVSS6.3AI score0.02663EPSS

CVE•added 2005/02/26 5:0 a.m.•44 views

CVE-2004-1753

The Apple Java plugin, as used in Netscape 7.1 and 7.2, Mozilla 1.7.2, and Firefox 0.9.3 on MacOS X 10.3.5, when tabbed browsing is enabled, does not properly handle SetWindow(NULL) calls, which allows Java applets from one tab to draw to other tabs and facilitates phishing attacks that spoof tabs.

2.6CVSS6.5AI score0.00868EPSS