CVE-2006-1742

CVE-2006-1742 affects Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0. The issue stems from improper handling of temporary variables that are not garbage collected, which could allow remote attackers to access freed memo...

CVE-2005-2703

CVE-2005-2703 affects Firefox up to 1.0.7 and Mozilla Suite up to 1.7.12. The issue lets a remote attacker modify HTTP headers of XML HTTP requests made via XMLHttpRequest, potentially enabling attacks such as HTTP request smuggling or splitting. This is triggered by how XMLHttpRequests are handl...

CVE-2005-4134

CVE-2005-4134 affects Mozilla Firefox 1.5, Netscape 8.x (8.0.4 and 7.2) and K-Meleon prior to 0.9.12. A remote attacker can cause a denial of service (high CPU usage and delayed startup) by presenting a website with a large title, which is stored in history.dat but not efficiently processed durin...

CVE-2006-1738

CVE-2006-1738 affects Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0. The vulnerability allows a remote attacker to cause a crash (DoS) by altering the (1) -moz-grid and (2) -moz-grid-group display styles. Root cause is...

CVE-2005-2707

CVE-2005-2707 affects Mozilla Firefox (before 1.0.7) and Mozilla Suite (before 1.7.12). The issue allows remote attackers to spawn windows without typical UI components (address/status bars), enabling spoofing/phishing. The NVD entry assigns a base score of 5.0 (MEDIUM) with network attack vector...

CVE-2005-2704

CVE-2005-2704 affects Firefox up to 1.0.6 and Mozilla Suite up to 1.7.11/12, where an XBL control implementing an internal XPCOM interface can enable remote spoofing of DOM objects. The vulnerability enables a attacker-controlled DOM objects to impersonate or misrepresent elements, aiding phishin...