CVE-2008-2806

CVE-2008-2806 affects Mozilla Firefox <= 2.0.0.15 and SeaMonkey

CVE-2013-0777

CVE-2013-0777 affects Mozilla Firefox, Thunderbird and SeaMonkey. The related openSUSE security update (openSUSE-SU-2013:0323-1) notes MFSA 2013-28 family fixes for Firefox/Thunderbird/SeaMonkey, including CVE-2013-0777, and lists fixed versions: Firefox 19.0, Thunderbird 17.0.3, SeaMonkey 2.16 (...

CVE-2014-1588

CVE-2014-1588 affects Mozilla Firefox (before 34.0) and SeaMonkey (before 2.31). The underlying issue is memory safety bugs in the browser engine that could be exploited remotely to cause memory corruption, a denial of service, or potentially arbitrary code execution via unspecified vectors. Publ...

CVE-2006-0295

CVE-2006-0295 affects Mozilla Firefox 1.5, Thunderbird 1.5 (when JavaScript is enabled in mail), and SeaMonkey older than 1.0. The vulnerability is a memory corruption caused by the QueryInterface method on built-in Location and Navigator objects, enabling remote code execution. Public references...

CVE-2006-1726

Technical details (affected product/versions, root cause, impact, remediation) for CVE-2006-1726 are not publicly provided in the supplied documents. Monitor for updates from vendors/security advisories.

CVE-2008-5052

Mozilla Firefox 2.x (pre-2.0.0.18), Thunderbird 2.x (pre-2.0.0.18), and SeaMonkey 1.x (pre-1.1.13) are affected by CVE-2008-5052. The vulnerability arises in AppendAttributeValue in the JavaScript engine and is described as memory corruption that can cause a remote crash (Denial of Service) via u...

CVE-2008-1238

CVE-2008-1238 affects Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9. The vulnerability arises when generating the HTTP Referer header: if the URL contains Basic Authentication credentials without a username, the Referer header may not include the full URL, potentially allowing remote...

CVE-2002-2436

CVE-2002-2436 affects Mozilla's CSS :visited handling in Firefox (pre-4.0), Thunderbird (pre-3.3), and SeaMonkey (pre-2.1). The flaw allows a crafted HTML document to trigger information disclosure about visited pages, constituting a partial confidentiality impact. The vulnerability is described ...

CVE-2008-2805

CVE-2008-2805 affects Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10. The flaw allows a remote attacker to force the upload of arbitrary local files from a client computer via vectors involving originalTarget and DOM Range. The vulnerability is described in the initial record as a lo...

CVE-2008-5502

CVE-2008-5502 affects the layout engine in Mozilla Firefox 3.x up to 3.0.4/3.0.5? and Mozilla-derived apps (Thunderbird 2.x pre-2.0.0.19, SeaMonkey 1.x pre-1.1.14). The vulnerability causes a denial of service (crash) via vectors that trigger memory corruption, related to GetXMLEntity and FastApp...

CVE-2008-6961

CVE-2008-6961 affects mailnews in Mozilla Thunderbird (before 2.0.0.18) and SeaMonkey (before 1.1.13). When JavaScript is enabled in mail, a malicious script can read DOM properties (documentURI, textContent) to disclose sensitive recipient information or comments in forwarded mail. This is a cli...

CVE-2009-3014

This CVE (CVE-2009-3014) concerns multiple Mozilla products: Firefox up to 3.0.13 and earlier, plus versions in the 3.5, 3.6 a1 pre, and 3.7 a1 pre series; SeaMonkey 1.1.17; and Mozilla 1.7.x and earlier. The vulnerability arises from improper handling of javascript: URIs in HTML links inside 302...

CVE-2009-3980

CVE-2009-3980 affects Mozilla Firefox 3.5.x prior to 3.5.6, SeaMonkey prior to 2.0.1, and Thunderbird; the issue is memory corruption in the browser engine that can lead to a denial of service or potentially arbitrary code execution via unknown vectors. Public records indicate fixes in Firefox 3....

CVE-2010-2770

CVE-2010-2770 affects Mozilla-based products on Mac OS X: Mozilla Firefox (before 3.5.12 and 3.6.x before 3.6.9), Thunderbird (before 3.0.7 and 3.1.x before 3.1.3), and SeaMonkey (before 2.0.7). The vulnerability arises from a crafted font in a data: URL that can trigger memory corruption, leadin...

CVE-2010-3400

CVE-2010-3400 affects Mozilla Firefox 3.5.x before 3.5.10, Firefox 3.6.x before 3.6.4, and SeaMonkey before 2.0.5. The JavaScript Math.random() RNG is seeded with the current time, enabling remote attackers to guess the seed via brute-force. The description does not specify exploits; it indicates...

CVE-2011-3866

CVE-2011-3866 affects Mozilla Firefox prior to 7.0 and SeaMonkey prior to 2.4, where motion data events were not properly restricted. The underlying issue is an improper restriction of motion data events, enabling a remote attacker to read keystrokes via JavaScript running in a background tab. Ex...

CVE-2013-5591

CVE-2013-5591 affects Mozilla Firefox before 25.0 (and ESR 24.x before 24.1), Thunderbird before 24.1, and SeaMonkey before 2.22, due to an unspecified browser‑engine vulnerability that could allow a remote attacker to cause memory corruption and an application crash, or possibly execute arbitrar...

CVE-2008-1241

CVE-2008-1241 describes a GUI overlay vulnerability in Mozilla Firefox up to 2.0.0.13 and SeaMonkey up to 1.1.9. A borderless XUL pop-up window opened from a background tab could spoof form elements and redirect user inputs, exposing users to UI manipulation. The issue is tied to how the browser ...

CVE-2012-0454

CVE-2012-0454 describes a use-after-free in Mozilla Firefox (including Firefox 4.x–10.0 and ESR 10.x before 10.0.3), Thunderbird 5.0–10.0, and SeaMonkey before 2.8 on 32-bit Windows 7. The issue arises when using the file-open dialog in a child window, related to IUnknown_QueryService in shlwapi....

CVE-2012-4212

Public technical details about CVE-2012-4212 are not disclosed in the provided documents. Monitoring for updates is advised.

CVE-2007-0779

CVE-2007-0779 concerns a GUI overlay spoofing flaw in SeaMonkey prior to 1.0.8 (and Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0.0.2) where a large, transparent cursor via CSS3 hotspot could spoof UI elements such as the hostname or security indicators. The vulnerability allows remote observe...

CVE-2012-1971

CVE-2012-1971 concerns Mozilla Firefox (pre-15.0), Thunderbird (pre-15.0), and SeaMonkey (pre-2.12). The description identifies memory corruption and potential remote code execution or crashes related to garbage collection after certain MethodJIT execution, plus other unspecified vectors. Impact ...

CVE-2012-3983

CVE-2012-3983 affects Mozilla Firefox (pre-16.0), Thunderbird (pre-16.0), and SeaMonkey (pre-2.13). Reported memory safety vulnerabilities could cause memory corruption and crashes and potentially allow arbitrary code execution via unknown vectors. Remediation evidenced in connected documents inc...

CVE-2012-5354

CVE-2012-5354 is covered by details in connected advisories/plugins. The open-connected sources show that Mozilla Firefox before 16.0, Mozilla Thunderbird before 16.0, and SeaMonkey before 2.13 are vulnerable to a clickjacking-style issue when navigating away from a page that has an active set of...

CVE-2011-2992

CVE-2011-2992 affects the Ogg reader in the browser engine of Mozilla Firefox (4.x–5) and SeaMonkey (2.x up to 2.3) and possibly other products, causing memory corruption and potential denial of service or arbitrary code execution via unspecified vectors. The root cause is memory safety issues in...

CVE-2012-4218

CVE-2012-4218 involves a use-after-free in Mozilla Firefox’s BuildTextRunsScanner::BreakSink::SetBreaks, affecting Firefox < 17.0, Thunderbird < 17.0, and SeaMonkey

CVE-2014-8631

CVE-2014-8631 affects Firefox (before 34.0) and SeaMonkey (before 2.31) where the Chrome Object Wrapper (COW) allows native-interface passing, potentially bypassing DOM object restrictions via an unspecified method. This remote vulnerability could be exploited without user interaction; exploitati...

CVE-2007-5959

CVE-2007-5959 affects Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7, with memory corruption in the layout/jar handling that could crash the browser and potentially allow arbitrary code execution. Connected advisories note that SeaMonkey updates fixed these issues (and related CVEs li...

CVE-2009-3010

The CVE-2009-3010 issue is a cross-site scripting (XSS) vulnerability in Mozilla-based products where data: URIs in Refresh headers are not properly blocked in HTTP responses. Affected versions include Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; SeaMonkey 1.1.17; and Mozi...

CVE-2009-4630

Mo zilla Necko (Firefox, SeaMonkey and related apps) exposes a DNS prefetching flaw where domain names in links in local HTML are resolved, enabling remote observers to log DNS requests and infer user network location. Root cause: prefetching by the Necko DNS resolver. Impact: information disclos...

CVE-2011-3671

The CVE-2011-3671 entry describes a use-after-free vulnerability in Mozilla’s nsHTMLSelectElement.cpp (nsHTMLSelectElement) affecting Firefox 4.x–8.0, Thunderbird 5.0–8.0, and SeaMonkey

CVE-2006-0298

CVE-2006-0298 affects Mozilla Firefox < 1.5.0.1 and SeaMonkey

CVE-2007-2871

CVE-2007-2871 affects Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2. The flaw allows remote attackers to spoof or hide the browser chrome (notably the location bar) by placing XUL popups outside the browser’s content pane, which can be leveraged for p...

CVE-2007-6589

CVE-2007-6589 affects Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7. The jar protocol handler fails to update the origin when an inner URL parameter yields an HTTP redirect, enabling remote XSS via a jar: URI. No exploitation details are provided in the documents. Remediation: upgrad...

CVE-2011-3003

CVE-2011-3003 affects Mozilla Firefox < 7.0 and SeaMonkey

CVE-2006-0299

CVE-2006-0299 affects Mozilla Firefox up to 1.5.0.1, Thunderbird 1.5 (when JavaScript runs in mail), and SeaMonkey before 1.0. The issue arises from the E4X implementation exposing the internal AnyName object to external interfaces, allowing multiple cooperating domains to exchange information an...

CVE-2006-1725

The vulnerability affects Mozilla Firefox 1.5 before 1.5.0.2 and SeaMonkey before 1.0.1. It stems from an interaction between XUL content windows and the history mechanism that can cause certain windows to become translucent, potentially enabling user-assisted remote attackers to trick users into...

CVE-2010-5074

CVE-2010-5074 affects Mozilla Firefox (before 4.0), Thunderbird (before 3.3), and SeaMonkey (before 2.1). The vulnerability stems from the layout engine comparing visited vs. unvisited links while processing CSS token sequences, causing a timing-based information disclosure. An attacker could rem...

CVE-2011-3665

CVE-2011-3665 affects Mozilla Firefox (4.x–8.0), Thunderbird (5.0–8.0), and SeaMonkey before 2.6. The issue is an improper handling of an Ogg VIDEO element after scaling, which can cause a crash or potentially other impact. Connected advisories corroborate MFSA2011-58 and related fixes across ope...

CVE-2014-2018

CVE-2014-2018 is an XSS issue in Mozilla Thunderbird 17.x–17.0.8, Thunderbird ESR 17.x–17.0.10, and SeaMonkey

CVE-2014-8635

CVE-2014-8635 is tied to memory-safety hazards in the Mozilla Firefox/SeaMonkey browser engine prior to versions addressing Firefox 35.0 and SeaMonkey 2.32. The public records indicate remote attacker could cause memory corruption or an application crash and potentially execute arbitrary code via...

CVE-2002-2437

The CVE-2002-2437 entry describes an information-disclosure flaw in the JavaScript implementation of Mozilla Firefox (before 4.0), Thunderbird (before 3.3), and SeaMonkey (before 2.1). The vulnerability arises from improper restrictions on the values returned by getComputedStyle, enabling remote ...

CVE-2007-3954

Technical details for CVE-2007-3954 are not publicly available in the provided connected documents. The materials do not specify affected products, versions, impact, exploit status, or remediation. Monitor for updates and rely on official advisories for precise information.

CVE-2009-3007

CVE-2009-3007 affects Mozilla Firefox 3.5.1, SeaMonkey 1.1.17, and Flock 2.5.1, enabling context-dependent attackers to spoof the address bar via window.open with a relative URI to reveal an arbitrary file: URL after the user navigates to a file: URL. The connected documents corroborate a family ...

CVE-2010-0161

CVE-2010-0161 affects Thunderbird (before 2.0.0.24) and SeaMonkey (before 1.1.19) on Windows, where the nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp can be triggered by data from a remote SMTP/IMAP/POP server using SSPI. This may cause heap memory corruption and application crash...

CVE-2011-2987

The connected documents confirm CVE-2011-2987 is a heap overflow in the ANGLE library used by Mozilla’s WebGL implementation (Firefox/SeaMonkey/related) that could allow remote code execution. The issue is tied to the ANGLE heap overflow in WebGL code paths; exploitation would be via remote attac...

CVE-2011-2991

CVE-2011-2991 affects the Mozilla browser engine in Firefox 4.x–5, SeaMonkey 2.x prior to 2.3, and Thunderbird prior to 6. The issue arises from improper JavaScript handling, enabling remote attackers to trigger memory corruption and cause a crash, with potential arbitrary code execution via unsp...

CVE-2006-5633

Summary: CVE-2006-5633 affects Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b. The issue is a denial of service caused by a null dereference when constructing a range, calling selectNode on a DOCUMENT_TYPE_NODE, and then invoking createContextualFragment on that range. This chain triggers a crash. T...

CVE-2011-1712

CVE-2011-1712 affects Mozilla Firefox (pre-3.5.19, pre-3.6.17, pre-4.0.1) and SeaMonkey (pre-2.0.14); the vulnerability is triggered by a crafted XML document calling the XSLT generate-id function in txMozillaXPathTreeWalker.cpp and txStandaloneXPathTreeWalker.cpp, which can allow remote attacker...

CVE-2014-8632

CVE-2014-8632 affects Mozilla Firefox (before 34.0) and SeaMonkey (before 2.31). The issue is in the structured-clone implementation where interactions with XrayWrapper property filtering do not properly enforce restrictions, allowing a remote attacker to bypass intended DOM object restrictions b...