Firefox Security Vulnerabilities and Issues — Firefox CVE List

Lucene search

MozillaFirefox

4 matches found

CVE•added 2007/04/26 8:19 p.m.•72 views

CVE-2007-2292

CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the username attribute.

4.3CVSS6.6AI score0.01538EPSS

CVE•added 2007/04/24 4:19 p.m.•52 views

CVE-2007-2176

Unspecified vulnerability in Mozilla Firefox allows remote attackers to execute arbitrary code via unspecified vectors involving Javascript errors. NOTE: this might be the same issue as CVE-2007-2175.

10CVSS7.5AI score0.84873EPSS

CVE•added 2007/04/22 7:19 p.m.•51 views

CVE-2007-2162

(1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote attackers to cause a denial of service (browser crash or system hang) via JavaScript that matches a regular expression against a long string, as demonstrated using /(.)*/.

7.8CVSS6.6AI score0.0062EPSS

CVE•added 2007/04/11 10:19 a.m.•49 views

CVE-2007-1970

Mozilla Firefox does not warn the user about HTTP elements on an HTTPS page when the HTTP elements are dynamically created by a delayed document.write, which allows remote attackers to supply unauthenticated content and conduct phishing attacks.

5CVSS6.7AI score0.00273EPSS