CVE-2010-0183

CVE-2010-0183 is a use-after-free in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5. The issue is in nsCycleCollector::MarkRoots and is triggered by crafting an HTML document via improper frame construction for menus, allowing remote code execution. Affected products include Firef...

CVE-2011-2997

CVE-2011-2997 affects Mozilla Firefox (browser engine) versions on Windows/Linux/macOS as Firefox 6, Thunderbird before 7.0, and SeaMonkey before 2.4. Root cause: memory corruption in the browser engine that can cause denial of service or potentially allow arbitrary code execution via unknown vec...

CVE-2013-0777

CVE-2013-0777 affects Mozilla Firefox, Thunderbird and SeaMonkey. The related openSUSE security update (openSUSE-SU-2013:0323-1) notes MFSA 2013-28 family fixes for Firefox/Thunderbird/SeaMonkey, including CVE-2013-0777, and lists fixed versions: Firefox 19.0, Thunderbird 17.0.3, SeaMonkey 2.16 (...

CVE-2006-0295

CVE-2006-0295 affects Mozilla Firefox 1.5, Thunderbird 1.5 (when JavaScript is enabled in mail), and SeaMonkey older than 1.0. The vulnerability is a memory corruption caused by the QueryInterface method on built-in Location and Navigator objects, enabling remote code execution. Public references...

CVE-2006-1726

Technical details (affected product/versions, root cause, impact, remediation) for CVE-2006-1726 are not publicly provided in the supplied documents. Monitor for updates from vendors/security advisories.

CVE-2012-1971

CVE-2012-1971 concerns Mozilla Firefox (pre-15.0), Thunderbird (pre-15.0), and SeaMonkey (pre-2.12). The description identifies memory corruption and potential remote code execution or crashes related to garbage collection after certain MethodJIT execution, plus other unspecified vectors. Impact ...

CVE-2008-6961

CVE-2008-6961 affects mailnews in Mozilla Thunderbird (before 2.0.0.18) and SeaMonkey (before 1.1.13). When JavaScript is enabled in mail, a malicious script can read DOM properties (documentURI, textContent) to disclose sensitive recipient information or comments in forwarded mail. This is a cli...

CVE-2009-2535

CVE-2009-2535 affects Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird, enabling remote attackers to trigger memory consumption and a crash (DoS) by supplying a large integer as the length property of a Select element. Root cause and exploit details are not expande...

CVE-2012-3105

Affected software: Mozilla Firefox (WebGL glBufferData path) and related Mozilla components (Firefox 4.x–12.0, ESR 10.x before 10.0.5, Thunderbird 5.0–12.0, SeaMonkey before 2.10). Vulnerability and root cause: The description states a flaw in an NVIDIA driver allows remote attackers to trigger m...

CVE-2013-0797

CVE-2013-0797 affects Mozilla Updater components in Mozilla Firefox (pre-20.0), Firefox ESR (<17.0.5), Thunderbird (<17.0.5, ESR), and SeaMonkey (

CVE-2014-1588

CVE-2014-1588 affects Mozilla Firefox (before 34.0) and SeaMonkey (before 2.31). The underlying issue is memory safety bugs in the browser engine that could be exploited remotely to cause memory corruption, a denial of service, or potentially arbitrary code execution via unspecified vectors. Publ...

CVE-2008-1238

CVE-2008-1238 affects Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9. The vulnerability arises when generating the HTTP Referer header: if the URL contains Basic Authentication credentials without a username, the Referer header may not include the full URL, potentially allowing remote...

CVE-2012-3983

CVE-2012-3983 affects Mozilla Firefox (pre-16.0), Thunderbird (pre-16.0), and SeaMonkey (pre-2.13). Reported memory safety vulnerabilities could cause memory corruption and crashes and potentially allow arbitrary code execution via unknown vectors. Remediation evidenced in connected documents inc...

CVE-2012-4212

Public technical details about CVE-2012-4212 are not disclosed in the provided documents. Monitoring for updates is advised.

CVE-2002-2436

CVE-2002-2436 affects Mozilla's CSS :visited handling in Firefox (pre-4.0), Thunderbird (pre-3.3), and SeaMonkey (pre-2.1). The flaw allows a crafted HTML document to trigger information disclosure about visited pages, constituting a partial confidentiality impact. The vulnerability is described ...

CVE-2008-5502

CVE-2008-5502 affects the layout engine in Mozilla Firefox 3.x up to 3.0.4/3.0.5? and Mozilla-derived apps (Thunderbird 2.x pre-2.0.0.19, SeaMonkey 1.x pre-1.1.14). The vulnerability causes a denial of service (crash) via vectors that trigger memory corruption, related to GetXMLEntity and FastApp...

CVE-2011-3866

CVE-2011-3866 affects Mozilla Firefox prior to 7.0 and SeaMonkey prior to 2.4, where motion data events were not properly restricted. The underlying issue is an improper restriction of motion data events, enabling a remote attacker to read keystrokes via JavaScript running in a background tab. Ex...

CVE-2014-8631

CVE-2014-8631 affects Firefox (before 34.0) and SeaMonkey (before 2.31) where the Chrome Object Wrapper (COW) allows native-interface passing, potentially bypassing DOM object restrictions via an unspecified method. This remote vulnerability could be exploited without user interaction; exploitati...

CVE-2009-3010

The CVE-2009-3010 issue is a cross-site scripting (XSS) vulnerability in Mozilla-based products where data: URIs in Refresh headers are not properly blocked in HTTP responses. Affected versions include Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozi...

CVE-2009-3014

This CVE (CVE-2009-3014) concerns multiple Mozilla products: Firefox up to 3.0.13 and earlier, plus versions in the 3.5, 3.6 a1 pre, and 3.7 a1 pre series; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier. The vulnerability arises from improper handling of javascript: URIs in HTML links inside 302...

CVE-2012-0454

CVE-2012-0454 describes a use-after-free in Mozilla Firefox (including Firefox 4.x–10.0 and ESR 10.x before 10.0.3), Thunderbird 5.0–10.0, and SeaMonkey before 2.8 on 32-bit Windows 7. The issue arises when using the file-open dialog in a child window, related to IUnknown_QueryService in shlwapi....

CVE-2007-5959

CVE-2007-5959 affects Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7, with memory corruption in the layout/jar handling that could crash the browser and potentially allow arbitrary code execution. Connected advisories note that SeaMonkey updates fixed these issues (and related CVEs li...

CVE-2009-3980

CVE-2009-3980 affects Mozilla Firefox 3.5.x prior to 3.5.6, SeaMonkey prior to 2.0.1, and Thunderbird; the issue is memory corruption in the browser engine that can lead to a denial of service or potentially arbitrary code execution via unknown vectors. Public records indicate fixes in Firefox 3....

CVE-2010-3400

CVE-2010-3400 affects Mozilla Firefox 3.5.x before 3.5.10, Firefox 3.6.x before 3.6.4, and SeaMonkey before 2.0.5. The JavaScript Math.random() RNG is seeded with the current time, enabling remote attackers to guess the seed via brute-force. The description does not specify exploits; it indicates...

CVE-2011-2987

The connected documents confirm CVE-2011-2987 is a heap overflow in the ANGLE library used by Mozilla’s WebGL implementation (Firefox/SeaMonkey/related) that could allow remote code execution. The issue is tied to the ANGLE heap overflow in WebGL code paths; exploitation would be via remote attac...

CVE-2007-2871

CVE-2007-2871 affects Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2. The flaw allows remote attackers to spoof or hide the browser chrome (notably the location bar) by placing XUL popups outside the browser’s content pane, which can be leveraged for p...

CVE-2007-6589

CVE-2007-6589 affects Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7. The jar protocol handler fails to update the origin when an inner URL parameter yields an HTTP redirect, enabling remote XSS via a jar: URI. No exploitation details are provided in the documents. Remediation: upgrad...

CVE-2009-4630

Mo zilla Necko (Firefox, SeaMonkey and related apps) exposes a DNS prefetching flaw where domain names in links in local HTML are resolved, enabling remote observers to log DNS requests and infer user network location. Root cause: prefetching by the Necko DNS resolver. Impact: information disclos...

CVE-2011-2992

CVE-2011-2992 affects the Ogg reader in the browser engine of Mozilla Firefox (4.x–5) and SeaMonkey (2.x up to 2.3) and possibly other products, causing memory corruption and potential denial of service or arbitrary code execution via unspecified vectors. The root cause is memory safety issues in...

CVE-2012-5354

CVE-2012-5354 is covered by details in connected advisories/plugins. The open-connected sources show that Mozilla Firefox before 16.0, Mozilla Thunderbird before 16.0, and SeaMonkey before 2.13 are vulnerable to a clickjacking-style issue when navigating away from a page that has an active set of...

CVE-2007-0779

CVE-2007-0779 concerns a GUI overlay spoofing flaw in SeaMonkey prior to 1.0.8 (and Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2) where a large, transparent cursor via CSS3 hotspot could spoof UI elements such as the hostname or security indicators. The vulnerability allows remote observe...

CVE-2008-2805

CVE-2008-2805 affects Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10. The flaw allows a remote attacker to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range. The vulnerability is described in the initial record as a lo...

CVE-2010-2770

CVE-2010-2770 affects Mozilla-based products on Mac OS X: Mozilla Firefox (before 3.5.12 and 3.6.x before 3.6.9), Thunderbird (before 3.0.7 and 3.1.x before 3.1.3), and SeaMonkey (before 2.0.7). The vulnerability arises from a crafted font in a data: URL that can trigger memory corruption, leadin...

CVE-2011-3003

CVE-2011-3003 affects Mozilla Firefox < 7.0 and SeaMonkey

CVE-2011-3671

The CVE-2011-3671 entry describes a use-after-free vulnerability in Mozilla’s nsHTMLSelectElement.cpp (nsHTMLSelectElement) affecting Firefox 4.x–8.0, Thunderbird 5.0–8.0, and SeaMonkey

CVE-2012-4218

CVE-2012-4218 involves a use-after-free in Mozilla Firefox’s BuildTextRunsScanner::BreakSink::SetBreaks, affecting Firefox < 17.0, Thunderbird < 17.0, and SeaMonkey

CVE-2014-8635

CVE-2014-8635 is tied to memory-safety hazards in the Mozilla Firefox/SeaMonkey browser engine prior to versions addressing Firefox 35.0 and SeaMonkey 2.32. The public records indicate remote attacker could cause memory corruption or an application crash and potentially execute arbitrary code via...

CVE-2006-0298

CVE-2006-0298 affects Mozilla Firefox < 1.5.0.1 and SeaMonkey

CVE-2006-0299

CVE-2006-0299 affects Mozilla Firefox up to 1.5.0.1, Thunderbird 1.5 (when JavaScript runs in mail), and SeaMonkey before 1.0. The issue arises from the E4X implementation exposing the internal AnyName object to external interfaces, allowing multiple cooperating domains to exchange information an...

CVE-2006-1725

The vulnerability affects Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1. It stems from an interaction between XUL content windows and the history mechanism that can cause certain windows to become translucent, potentially enabling user-assisted remote attackers to trick users into...

CVE-2002-2437

The CVE-2002-2437 entry describes an information-disclosure flaw in the JavaScript implementation of Mozilla Firefox (before 4.0), Thunderbird (before 3.3), and SeaMonkey (before 2.1). The vulnerability arises from improper restrictions on the values returned by getComputedStyle, enabling remote ...

CVE-2006-5633

Summary: CVE-2006-5633 affects Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b. The issue is a denial of service caused by a null dereference when constructing a range, calling selectNode on a DOCUMENT_TYPE_NODE, and then invoking createContextualFragment on that range. This chain triggers a crash. T...

CVE-2011-3665

CVE-2011-3665 affects Mozilla Firefox (4.x–8.0), Thunderbird (5.0–8.0), and SeaMonkey before 2.6. The issue is an improper handling of an Ogg VIDEO element after scaling, which can cause a crash or potentially other impact. Connected advisories corroborate MFSA2011-58 and related fixes across ope...

CVE-2014-2018

CVE-2014-2018 is an XSS issue in Mozilla Thunderbird 17.x–17.0.8, Thunderbird ESR 17.x–17.0.10, and SeaMonkey

CVE-2007-3954

Technical details for CVE-2007-3954 are not publicly available in the provided connected documents. The materials do not specify affected products, versions, impact, exploit status, or remediation. Monitor for updates and rely on official advisories for precise information.

CVE-2010-5074

CVE-2010-5074 affects Mozilla Firefox (before 4.0), Thunderbird (before 3.3), and SeaMonkey (before 2.1). The vulnerability stems from the layout engine comparing visited vs. unvisited links while processing CSS token sequences, causing a timing-based information disclosure. An attacker could rem...

CVE-2014-8632

CVE-2014-8632 affects Mozilla Firefox (before 34.0) and SeaMonkey (before 2.31). The issue is in the structured-clone implementation where interactions with XrayWrapper property filtering do not properly enforce restrictions, allowing a remote attacker to bypass intended DOM object restrictions b...

CVE-2009-3007

CVE-2009-3007 affects Mozilla Firefox 3.5.1, SeaMonkey 1.1.17, and Flock 2.5.1, enabling context-dependent attackers to spoof the address bar via window.open with a relative URI to reveal an arbitrary file: URL after the user navigates to a file: URL. The connected documents corroborate a family ...

CVE-2009-4629

Mozilla Necko DNS Information Disclosure (CVE-2009-4629) affects Thunderbird 3.0.1, SeaMonkey, and related apps. The issue is DNS prefetching triggered even for APP_TYPE_MAIL/APP_TYPE_EDITOR, enabling an attacker to infer a user’s network location by logging DNS requests (e.g., when reading text/...

CVE-2010-1990

CVE-2010-1990 affects Mozilla Firefox 3.6.x, 3.5.x, 3.0.19 and earlier, and SeaMonkey. The issue arises when an HTML document contains many IFRAME elements with a src of mailto:, causing the mail application to be launched repeatedly and leading to a denial of service via excessive application la...