CVEs de icecat
Pacote Debian mapeado: iceweasel. A coluna Status na GNUcego indica a situação real na nossa distribuição (quando a GNUcego já corrigiu a CVE, mostra a versão em que entrou); a coluna Detalhe mostra o registro do security-tracker do Debian. Fonte: security-tracker do Debian.
| CVE | Descrição | Status na GNUcego | Detalhe (Debian) |
|---|---|---|---|
| CVE-2016-2820 | (The Firefox Health Reports (aka FHR or about:healthreport) feature in ...) | não afetado | <not-affected> (Only Firefox 46) |
| CVE-2016-2817 | (The WebExtension sandbox feature in browser/components/extensions/ext- ...) | não afetado | <not-affected> (Only Firefox 46) |
| CVE-2016-2816 | (Mozilla Firefox before 46.0 allows remote attackers to bypass the Cont ...) | não afetado | <not-affected> (Only Firefox 46) |
| CVE-2016-2814 | (Heap-based buffer overflow in the stagefright::SampleTable::parseSampl ...) | removido/último | <removed> |
| CVE-2016-2813 | (Mozilla Firefox before 46.0 on Android does not properly restrict Java ...) | não afetado | <not-affected> (Only Firefox on Android) |
| CVE-2016-2812 | (Race condition in the get implementation in the ServiceWorkerManager c ...) | não afetado | <not-affected> (Only Firefox 46) |
| CVE-2016-2811 | (Use-after-free vulnerability in the ServiceWorkerInfo class in the Ser ...) | não afetado | <not-affected> (Only Firefox 46) |
| CVE-2016-2810 | (Mozilla Firefox before 46.0 on Android before 5.0 allows attackers to ...) | não afetado | <not-affected> (Only Firefox on Android) |
| CVE-2016-2809 | (The Mozilla Maintenance Service updater in Mozilla Firefox before 46.0 ...) | não afetado | <not-affected> (Only Firefox on Windows) |
| CVE-2016-2808 | (The watch implementation in the JavaScript engine in Mozilla Firefox b ...) | removido/último | <removed> |
| CVE-2016-2807 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | removido/último | <removed> |
| CVE-2016-2806 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only Firefox 45.x) |
| CVE-2016-2805 | (Unspecified vulnerability in the browser engine in Mozilla Firefox ESR ...) | removido/último | <removed> |
| CVE-2016-2804 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only Firefox 46) |
| CVE-2016-2802 | (The graphite2::TtfUtil::CmapSubtable4NextCodepoint function in Graphit ...) | removido/último | <removed> |
| CVE-2016-2801 | (The graphite2::TtfUtil::CmapSubtable12Lookup function in TtfUtil.cpp i ...) | removido/último | <removed> |
| CVE-2016-2800 | (The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before ...) | removido/último | <removed> |
| CVE-2016-2799 | (Heap-based buffer overflow in the graphite2::Slot::setAttr function in ...) | removido/último | <removed> |
| CVE-2016-2798 | (The graphite2::GlyphCache::Loader::Loader function in Graphite 2 befor ...) | removido/último | <removed> |
| CVE-2016-2797 | (The graphite2::TtfUtil::CmapSubtable12Lookup function in Graphite 2 be ...) | removido/último | <removed> |
| CVE-2016-2796 | (Heap-based buffer overflow in the graphite2::vm::Machine::Code::Code f ...) | removido/último | <removed> |
| CVE-2016-2795 | (The graphite2::FileFace::get_table_fn function in Graphite 2 before 1. ...) | removido/último | <removed> |
| CVE-2016-2794 | (The graphite2::TtfUtil::CmapSubtable12NextCodepoint function in Graphi ...) | removido/último | <removed> |
| CVE-2016-2793 | (CachedCmap.cpp in Graphite 2 before 1.3.6, as used in Mozilla Firefox ...) | removido/último | <removed> |
| CVE-2016-2792 | (The graphite2::Slot::getAttr function in Slot.cpp in Graphite 2 before ...) | removido/último | <removed> |
| CVE-2016-2791 | (The graphite2::GlyphCache::glyph function in Graphite 2 before 1.3.6, ...) | removido/último | <removed> |
| CVE-2016-2790 | (The graphite2::TtfUtil::GetTableInfo function in Graphite 2 before 1.3 ...) | removido/último | <removed> |
| CVE-2016-1979 | (Use-after-free vulnerability in the PK11_ImportDERPrivateKeyInfoAndRet ...) | removido/último | <removed> |
| CVE-2016-1978 | (Use-after-free vulnerability in the ssl3_HandleECDHServerKeyExchange f ...) | corrigido | 44.0-1 |
| CVE-2016-1977 | (The Machine::Code::decoder::analysis::set_ref function in Graphite 2 b ...) | removido/último | <removed> |
| CVE-2016-1976 | (Use-after-free vulnerability in the DesktopDisplayDevice class in the ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2016-1975 | (Multiple race conditions in dom/media/systemservices/CamerasChild.cpp ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2016-1974 | (The nsScannerString::AppendUnicodeTo function in Mozilla Firefox befor ...) | removido/último | <removed> |
| CVE-2016-1973 | (Race condition in the GetStaticInstance function in the WebRTC impleme ...) | removido/último | <removed> |
| CVE-2016-1972 | (Race condition in libvpx in Mozilla Firefox before 45.0 on Windows mig ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2016-1971 | (The I420VideoFrame::CreateFrame function in the WebRTC implementation ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2016-1970 | (Integer underflow in the srtp_unprotect function in the WebRTC impleme ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2016-1969 | (The setAttr function in Graphite 2 before 1.3.6, as used in Mozilla Fi ...) | removido/último | <removed> |
| CVE-2016-1968 | (Integer underflow in Brotli, as used in Mozilla Firefox before 45.0, a ...) | removido/último | <removed> |
| CVE-2016-1967 | (Mozilla Firefox before 45.0 does not properly restrict the availabilit ...) | removido/último | <removed> |
| CVE-2016-1966 | (The nsNPObjWrapper::GetNewOrUsed function in dom/plugins/base/nsJSNPRu ...) | removido/último | <removed> |
| CVE-2016-1965 | (Mozilla Firefox before 45.0 and Firefox ESR 38.x before 38.7 mishandle ...) | removido/último | <removed> |
| CVE-2016-1964 | (Use-after-free vulnerability in the AtomicBaseIncDec function in Mozil ...) | removido/último | <removed> |
| CVE-2016-1963 | (The FileReader class in Mozilla Firefox before 45.0 allows local users ...) | removido/último | <removed> |
| CVE-2016-1962 | (Use-after-free vulnerability in the mozilla::DataChannelConnection::Cl ...) | removido/último | <removed> |
| CVE-2016-1961 | (Use-after-free vulnerability in the nsHTMLDocument::SetBody function i ...) | removido/último | <removed> |
| CVE-2016-1960 | (Integer underflow in the nsHtml5TreeBuilder class in the HTML5 string ...) | removido/último | <removed> |
| CVE-2016-1959 | (The ServiceWorkerManager class in Mozilla Firefox before 45.0 allows r ...) | removido/último | <removed> |
| CVE-2016-1958 | (browser/base/content/browser.js in Mozilla Firefox before 45.0 and Fir ...) | removido/último | <removed> |
| CVE-2016-1957 | (Memory leak in libstagefright in Mozilla Firefox before 45.0 and Firef ...) | removido/último | <removed> |
| CVE-2016-1956 | (Mozilla Firefox before 45.0 on Linux, when an Intel video driver is us ...) | removido/último | <removed> |
| CVE-2016-1955 | (Mozilla Firefox before 45.0 allows remote attackers to bypass the Same ...) | removido/último | <removed> |
| CVE-2016-1954 | (The nsCSPContext::SendReports function in dom/security/nsCSPContext.cp ...) | removido/último | <removed> |
| CVE-2016-1953 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | removido/último | <removed> |
| CVE-2016-1952 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | removido/último | <removed> |
| CVE-2016-1950 | (Heap-based buffer overflow in Mozilla Network Security Services (NSS) ...) | removido/último | <removed> |
| CVE-2016-1949 | (Mozilla Firefox before 44.0.2 does not properly restrict the interacti ...) | removido/último | <removed> |
| CVE-2016-1948 | (Mozilla Firefox before 44.0 on Android does not ensure that HTTPS is u ...) | não afetado | <not-affected> (Only affects Firefox for Android) |
| CVE-2016-1947 | (Mozilla Firefox 43.x mishandles attempts to connect to the Application ...) | corrigido | 44.0-1 |
| CVE-2016-1946 | (The MoofParser::Metadata function in binding/MoofParser.cpp in libstag ...) | corrigido | 44.0-1 |
| CVE-2016-1945 | (The nsZipArchive function in Mozilla Firefox before 44.0 might allow r ...) | corrigido | 44.0-1 |
| CVE-2016-1944 | (The Buffer11::NativeBuffer11::map function in ANGLE, as used in Mozill ...) | corrigido | 44.0-1 |
| CVE-2016-1943 | (Mozilla Firefox before 44.0 on Android allows remote attackers to spoo ...) | corrigido | 44.0-1 |
| CVE-2016-1942 | (Mozilla Firefox before 44.0 allows user-assisted remote attackers to s ...) | corrigido | 44.0-1 |
| CVE-2016-1941 | (The file-download dialog in Mozilla Firefox before 44.0 on OS X enable ...) | não afetado | <not-affected> (Affects only Firefox on OS X) |
| CVE-2016-1940 | (Mozilla Firefox before 44.0 on Android allows remote attackers to spoo ...) | não afetado | <not-affected> (Affects Firefox for Android only) |
| CVE-2016-1939 | (Mozilla Firefox before 44.0 stores cookies with names containing verti ...) | corrigido | 44.0-1 |
| CVE-2016-1938 | (The s_mp_div function in lib/freebl/mpi/mpi.c in Mozilla Network Secur ...) | corrigido | 44.0-1 |
| CVE-2016-1937 | (The protocol-handler dialog in Mozilla Firefox before 44.0 allows remo ...) | corrigido | 44.0-1 |
| CVE-2016-1935 | (Buffer overflow in the BufferSubData function in Mozilla Firefox befor ...) | corrigido | 44.0-1 |
| CVE-2016-1933 | (Integer overflow in the image-deinterlacing functionality in Mozilla F ...) | corrigido | 44.0-1 |
| CVE-2016-1931 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 44.0-1 |
| CVE-2016-1930 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 44.0-1 |
| CVE-2016-1526 | (The TtfUtil:LocaLookup function in TtfUtil.cpp in Libgraphite in Graph ...) | corrigido | 44.0-1 |
| CVE-2016-1523 | (The SillMap::readFace function in FeatureMap.cpp in Libgraphite in Gra ...) | corrigido | 44.0-1 |
| CVE-2015-7575 | (Mozilla Network Security Services (NSS) before 3.20.2, as used in Mozi ...) | corrigido | 43.0.2-1 |
| CVE-2015-7327 | (Mozilla Firefox before 41.0 does not properly restrict the availabilit ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2015-7223 | (The WebExtension APIs in Mozilla Firefox before 43.0 allow remote atta ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7222 | (Integer underflow in the Metadata::setData function in MetaData.cpp in ...) | corrigido | 38.5.0esr-1 |
| CVE-2015-7221 | (Buffer overflow in the nsDeque::GrowCapacity function in xpcom/glue/ns ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7220 | (Buffer overflow in the XDRBuffer::grow function in js/src/vm/Xdr.cpp i ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7219 | (The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7218 | (The HTTP/2 implementation in Mozilla Firefox before 43.0 allows remote ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7217 | (The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux G ...) | não afetado | <not-affected> (Iceweasel in Debian uses the system copy of gdk-pixbuf) |
| CVE-2015-7216 | (The gdk-pixbuf configuration in Mozilla Firefox before 43.0 on Linux G ...) | não afetado | <not-affected> (Iceweasel in Debian uses the system copy of gdk-pixbuf) |
| CVE-2015-7215 | (The importScripts function in the Web Workers API implementation in Mo ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7214 | (Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 allow rem ...) | corrigido | 38.5.0esr-1 |
| CVE-2015-7213 | (Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4 ...) | corrigido | 38.5.0esr-1 |
| CVE-2015-7212 | (Integer overflow in the mozilla::layers::BufferTextureClient::Allocate ...) | corrigido | 38.5.0esr-1 |
| CVE-2015-7211 | (Mozilla Firefox before 43.0 mishandles the # (number sign) character i ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7210 | (Use-after-free vulnerability in Mozilla Firefox before 43.0 and Firefo ...) | corrigido | 38.5.0esr-1 |
| CVE-2015-7208 | (Mozilla Firefox before 43.0 stores cookies containing vertical tab cha ...) | corrigido | 44.0-1 |
| CVE-2015-7207 | (Mozilla Firefox before 43.0 does not properly restrict the availabilit ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7205 | (Integer underflow in the RTPReceiverVideo::ParseRtpPacket function in ...) | corrigido | 38.5.0esr-1 |
| CVE-2015-7204 | (Mozilla Firefox before 43.0 does not properly store the properties of ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7203 | (Buffer overflow in the DirectWriteFontInfo::LoadFontFamilyData functio ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7202 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7201 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 38.5.0esr-1 |
| CVE-2015-7200 | (The CryptoKey interface implementation in Mozilla Firefox before 42.0 ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7199 | (The (1) AddWeightedPathSegLists and (2) SVGPathSegListSMILType::Interp ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7198 | (Buffer overflow in the rx::TextureStorage11 class in ANGLE, as used in ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7197 | (Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperl ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7196 | (Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4, when a J ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7195 | (The URL parsing implementation in Mozilla Firefox before 42.0 improper ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7194 | (Buffer underflow in libjar in Mozilla Firefox before 42.0 and Firefox ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7193 | (Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 improperl ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7192 | (The accessibility-tools feature in Mozilla Firefox before 42.0 on OS X ...) | não afetado | <not-affected> (Only affects Firefox on MacOS) |
| CVE-2015-7191 | (Mozilla Firefox before 42.0 on Android improperly restricts URL string ...) | não afetado | <not-affected> (Only affects Firefox on Android) |
| CVE-2015-7190 | (The Search feature in Mozilla Firefox before 42.0 on Android through 4 ...) | não afetado | <not-affected> (Only affects Firefox on Android) |
| CVE-2015-7189 | (Race condition in the JPEGEncoder function in Mozilla Firefox before 4 ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7188 | (Mozilla Firefox before 42.0 and Firefox ESR 38.x before 38.4 allow rem ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7187 | (The Add-on SDK in Mozilla Firefox before 42.0 misinterprets a "script: ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7186 | (Mozilla Firefox before 42.0 on Android allows user-assisted remote att ...) | não afetado | <not-affected> (Only affects Firefox on Android) |
| CVE-2015-7185 | (Mozilla Firefox before 42.0 on Android does not ensure that the addres ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-7184 | (The fetch API implementation in Mozilla Firefox before 41.0.2 does not ...) | não afetado | <not-affected> (Affects only Firefox later than 38) |
| CVE-2015-7183 | (Integer overflow in the PL_ARENA_ALLOCATE implementation in Netscape P ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7182 | (Heap-based buffer overflow in the ASN.1 decoder in Mozilla Network Sec ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7181 | (The sec_asn1d_parse_leaf function in Mozilla Network Security Services ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-7180 | (The ReadbackResultWriterD3D11::Run function in Mozilla Firefox before ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-7179 | (The VertexBufferInterface::reserveVertexSpace function in libGLES in A ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2015-7178 | (The ProgramBinary::linkAttributes function in libGLES in ANGLE, as use ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2015-7177 | (The InitTextures function in Mozilla Firefox before 41.0 and Firefox E ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-7176 | (The AnimationThread function in Mozilla Firefox before 41.0 and Firefo ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-7175 | (The XULContentSinkImpl::AddText function in Mozilla Firefox before 41. ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-7174 | (The nsAttrAndChildArray::GrowBy function in Mozilla Firefox before 41. ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4522 | (The nsUnicodeToUTF8::GetMaxLength function in Mozilla Firefox before 4 ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4521 | (The ConvertDialogOptions function in Mozilla Firefox before 41.0 and F ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4520 | (Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow rem ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4519 | (Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 allow use ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4518 | (The Reader View implementation in Mozilla Firefox before 42.0 has an i ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-4517 | (NetworkUtils.cpp in Mozilla Firefox before 41.0 and Firefox ESR 38.x b ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4516 | (Mozilla Firefox before 41.0 allows remote attackers to bypass certain ...) | não afetado | <not-affected> (Affects only 40.x) |
| CVE-2015-4515 | (Mozilla Firefox before 42.0, when NTLM v1 is enabled for HTTP authenti ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-4514 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (ESR38 series not affected) |
| CVE-2015-4513 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 38.4.0esr-1 |
| CVE-2015-4512 | (gfx/2d/DataSurfaceHelpers.cpp in Mozilla Firefox before 41.0 on Linux ...) | não afetado | <not-affected> (Affects only 40.x) |
| CVE-2015-4511 | (Heap-based buffer overflow in the nestegg_track_codec_data function in ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4510 | (Race condition in the WorkerPrivate::NotifyFeatures function in Mozill ...) | não afetado | <not-affected> (Affects only 40.x) |
| CVE-2015-4509 | (Use-after-free vulnerability in the HTMLVideoElement interface in Mozi ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4508 | (Mozilla Firefox before 41.0, when reader mode is enabled, allows remot ...) | não afetado | <not-affected> (Affects only 40.x) |
| CVE-2015-4507 | (The SavedStacks class in the JavaScript implementation in Mozilla Fire ...) | não afetado | <not-affected> (Affects only 40.x) |
| CVE-2015-4506 | (Buffer overflow in the vp9_init_context_buffers function in libvpx, as ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4505 | (updater.exe in Mozilla Firefox before 41.0 and Firefox ESR 38.x before ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2015-4504 | (The lut_inverse_interp16 function in the QCMS library in Mozilla Firef ...) | não afetado | <not-affected> (Affects only 40.x) |
| CVE-2015-4503 | (The TCP Socket API implementation in Mozilla Firefox before 41.0 misha ...) | não afetado | <not-affected> (Affects only 40.x) |
| CVE-2015-4502 | (js/src/proxy/Proxy.cpp in Mozilla Firefox before 41.0 mishandles certa ...) | não afetado | <not-affected> (Affects only 40.x) |
| CVE-2015-4501 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Affects only 40.x) |
| CVE-2015-4500 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 38.3.0esr-1 |
| CVE-2015-4498 | (The add-on installation feature in Mozilla Firefox before 40.0.3 and F ...) | corrigido | 38.2.1esr-1 |
| CVE-2015-4497 | (Use-after-free vulnerability in the CanvasRenderingContext2D implement ...) | corrigido | 38.2.1esr-1 |
| CVE-2015-4496 | (Multiple integer overflows in libstagefright in Mozilla Firefox before ...) | corrigido | 38.0-1 |
| CVE-2015-4495 | (The PDF reader in Mozilla Firefox before 39.0.3, Firefox ESR 38.x befo ...) | corrigido | 38.1.1esr-1 |
| CVE-2015-4493 | (Heap-based buffer overflow in the stagefright::ESDS::parseESDescriptor ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4492 | (Use-after-free vulnerability in the XMLHttpRequest::Open implementatio ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4490 | (The nsCSPHostSrc::permits function in dom/security/nsCSPUtils.cpp in M ...) | não afetado | <not-affected> (Only affects Firefox 39) |
| CVE-2015-4489 | (The nsTArray_Impl class in Mozilla Firefox before 40.0, Firefox ESR 38 ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4488 | (Use-after-free vulnerability in the StyleAnimationValue class in Mozil ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4487 | (The nsTSubstring::ReplacePrep function in Mozilla Firefox before 40.0, ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4484 | (The js::jit::AssemblerX86Shared::lock_addl function in the JavaScript ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4483 | (Mozilla Firefox before 40.0 allows man-in-the-middle attackers to bypa ...) | não afetado | <not-affected> (Only affects Firefox 39) |
| CVE-2015-4482 | (mar_read.c in the Updater in Mozilla Firefox before 40.0 and Firefox E ...) | não afetado | <not-affected> (Updater not used in Debian) |
| CVE-2015-4481 | (Race condition in the Mozilla Maintenance Service in Mozilla Firefox b ...) | não afetado | <not-affected> (Only affects Firefox on Windows) |
| CVE-2015-4480 | (Integer overflow in the stagefright::SampleTable::isValid function in ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4479 | (Multiple integer overflows in libstagefright in Mozilla Firefox before ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4478 | (Mozilla Firefox before 40.0 and Firefox ESR 38.x before 38.2 do not im ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4477 | (Use-after-free vulnerability in the MediaStream playback feature in Mo ...) | não afetado | <not-affected> (Only affects Firefox 39) |
| CVE-2015-4476 | (Mozilla Firefox before 41.0 on Android allows user-assisted remote att ...) | não afetado | <not-affected> (Affects only Firefox on Android) |
| CVE-2015-4475 | (The mozilla::AudioSink function in Mozilla Firefox before 40.0 and Fir ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-4474 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 39) |
| CVE-2015-4473 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 38.2.0esr-1 |
| CVE-2015-2743 | (PDF.js in Mozilla Firefox before 39.0 and Firefox ESR 31.x before 31.8 ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2742 | (Mozilla Firefox before 39.0 on OS X includes native key press informat ...) | não afetado | <not-affected> (OS X specific) |
| CVE-2015-2741 | (Mozilla Firefox before 39.0, Firefox ESR 38.x before 38.1, and Thunder ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2740 | (Buffer overflow in the nsXMLHttpRequest::AppendToResponseText function ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2739 | (The ArrayBufferBuilder::append function in Mozilla Firefox before 39.0 ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2738 | (The YCbCrImageDataDeserializer::ToDataSourceSurface function in the YC ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2737 | (The rx::d3d11::SetBufferData function in the Direct3D 11 implementatio ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2736 | (The nsZipArchive::BuildFileList function in Mozilla Firefox before 39. ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2735 | (nsZipArchive.cpp in Mozilla Firefox before 39.0, Firefox ESR 31.x befo ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2734 | (The CairoTextureClientD3D9::BorrowDrawTarget function in the Direct3D ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2733 | (Use-after-free vulnerability in the CanonicalizeXPCOMParticipant funct ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2731 | (Use-after-free vulnerability in the CSPService::ShouldLoad function in ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2730 | (Mozilla Network Security Services (NSS) before 3.19.1, as used in Mozi ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2729 | (The AudioParamTimeline::AudioNodeInputValue function in the Web Audio ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2728 | (The IndexedDatabaseManager class in the IndexedDB implementation in Mo ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2727 | (Mozilla Firefox 38.0 and Firefox ESR 38.0 allow user-assisted remote a ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2726 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2725 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2724 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2722 | (Use-after-free vulnerability in the CanonicalizeXPCOMParticipant funct ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2721 | (Mozilla Network Security Services (NSS) before 3.19, as used in Mozill ...) | corrigido | 38.1.0esr-1 |
| CVE-2015-2720 | (The update implementation in Mozilla Firefox before 38.0 on Windows do ...) | não afetado | <not-affected> (Only affects Windows) |
| CVE-2015-2718 | (The WebChannel.jsm module in Mozilla Firefox before 38.0 allows remote ...) | corrigido | 38.0-1 |
| CVE-2015-2717 | (Integer overflow in libstagefright in Mozilla Firefox before 38.0 allo ...) | corrigido | 38.0-1 |
| CVE-2015-2716 | (Buffer overflow in the XML parser in Mozilla Firefox before 38.0, Fire ...) | corrigido | 38.0-1 |
| CVE-2015-2715 | (Race condition in the nsThreadManager::RegisterCurrentThread function ...) | corrigido | 38.0-1 |
| CVE-2015-2714 | (Mozilla Firefox before 38.0 on Android does not properly restrict writ ...) | não afetado | <not-affected> (Only affects Firefox on Android) |
| CVE-2015-2713 | (Use-after-free vulnerability in the SetBreaks function in Mozilla Fire ...) | corrigido | 38.0-1 |
| CVE-2015-2712 | (The asm.js implementation in Mozilla Firefox before 38.0 does not prop ...) | corrigido | 38.0-1 |
| CVE-2015-2711 | (Mozilla Firefox before 38.0 does not recognize a referrer policy deliv ...) | corrigido | 38.0-1 |
| CVE-2015-2710 | (Heap-based buffer overflow in the SVGTextFrame class in Mozilla Firefo ...) | corrigido | 38.0-1 |
| CVE-2015-2709 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 38.0-1 |
| CVE-2015-2708 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 38.0-1 |
| CVE-2015-2706 | (Race condition in the AsyncPaintWaitEvent::AsyncPaintWaitEvent functio ...) | não afetado | <not-affected> (Only affects 37.x series) |
| CVE-2015-0973 | (Buffer overflow in the png_read_IDAT_data function in pngrutil.c in li ...) | não afetado | <not-affected> (squeeze used the system libpng, and later versions define their own limits) |
| CVE-2015-0836 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 31.5.0esr-1 |
| CVE-2015-0835 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0834 | (The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0833 | (Multiple untrusted search path vulnerabilities in updater.exe in Mozil ...) | não afetado | <not-affected> (Specific to Firefox on Windows) |
| CVE-2015-0832 | (Mozilla Firefox before 36.0 does not properly recognize the equivalenc ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0831 | (Use-after-free vulnerability in the mozilla::dom::IndexedDB::IDBObject ...) | corrigido | 31.5.0esr-1 |
| CVE-2015-0830 | (The WebGL implementation in Mozilla Firefox before 36.0 does not prope ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0829 | (Buffer overflow in libstagefright in Mozilla Firefox before 36.0 allow ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0828 | (Double free vulnerability in the nsXMLHttpRequest::GetResponse functio ...) | não afetado | <not-affected> (Doesn't affect the memory allocator used in the Debian builds) |
| CVE-2015-0827 | (Heap-based buffer overflow in the mozilla::gfx::CopyRect function in M ...) | corrigido | 31.5.0esr-1 |
| CVE-2015-0826 | (The nsTransformedTextRun::SetCapitalization function in Mozilla Firefo ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0825 | (Stack-based buffer underflow in the mozilla::MP3FrameParser::ParseBuff ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0824 | (The mozilla::layers::BufferTextureClient::AllocateForSurface function ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0823 | (Multiple use-after-free vulnerabilities in OpenType Sanitiser, as used ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0822 | (The Form Autocompletion feature in Mozilla Firefox before 36.0, Firefo ...) | corrigido | 31.5.0esr-1 |
| CVE-2015-0821 | (Mozilla Firefox before 36.0 allows user-assisted remote attackers to r ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0820 | (Mozilla Firefox before 36.0 does not properly restrict transitions of ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0819 | (The UITour::onPageEvent function in Mozilla Firefox before 36.0 does n ...) | não afetado | <not-affected> (Does not affect ESR version) |
| CVE-2015-0818 | (Mozilla Firefox before 36.0.4, Firefox ESR 31.x before 31.5.3, and Sea ...) | corrigido | 31.5.3esr-1 |
| CVE-2015-0817 | (The asm.js implementation in Mozilla Firefox before 36.0.3, Firefox ES ...) | corrigido | 31.5.3esr-1 |
| CVE-2015-0816 | (Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunder ...) | corrigido | 31.6.0esr-1 |
| CVE-2015-0815 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 31.6.0esr-1 |
| CVE-2015-0814 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (only affects Firefox 37.x) |
| CVE-2015-0813 | (Use-after-free vulnerability in the AppendElements function in Mozilla ...) | corrigido | 31.6.0esr-1 |
| CVE-2015-0812 | (Mozilla Firefox before 37.0 does not require an HTTPS session for ligh ...) | não afetado | <not-affected> (Only affects 37.x) |
| CVE-2015-0811 | (The QCMS implementation in Mozilla Firefox before 37.0 allows remote a ...) | não afetado | <not-affected> (Only affects 37.x) |
| CVE-2015-0810 | (Mozilla Firefox before 37.0 on OS X does not ensure that the cursor is ...) | não afetado | <not-affected> (Only affects 37.x; only affects OS X systems) |
| CVE-2015-0808 | (The webrtc::VPMContentAnalysis::Release function in the WebRTC impleme ...) | não afetado | <not-affected> (Only affects 37.x) |
| CVE-2015-0807 | (The navigator.sendBeacon implementation in Mozilla Firefox before 37.0 ...) | corrigido | 31.6.0esr-1 |
| CVE-2015-0806 | (The Off Main Thread Compositing (OMTC) implementation in Mozilla Firef ...) | não afetado | <not-affected> (Only affects 37.x) |
| CVE-2015-0805 | (The Off Main Thread Compositing (OMTC) implementation in Mozilla Firef ...) | não afetado | <not-affected> (Only affects 37.x) |
| CVE-2015-0804 | (The HTMLSourceElement::BindToTree function in Mozilla Firefox before 3 ...) | não afetado | <not-affected> (Only affects 37.x) |
| CVE-2015-0803 | (The HTMLSourceElement::AfterSetAttr function in Mozilla Firefox before ...) | não afetado | <not-affected> (Only affects 37.x) |
| CVE-2015-0802 | (Mozilla Firefox before 37.0 relies on docshell type information instea ...) | não afetado | <not-affected> (Only affects 37.x) |
| CVE-2015-0801 | (Mozilla Firefox before 37.0, Firefox ESR 31.x before 31.6, and Thunder ...) | corrigido | 31.6.0esr-1 |
| CVE-2015-0800 | (The PRNG implementation in the DNS resolver in Mozilla Firefox (aka Fe ...) | não afetado | <not-affected> (Only affects 37.x; only on Android) |
| CVE-2015-0799 | (The HTTP Alternative Services feature in Mozilla Firefox before 37.0.1 ...) | não afetado | <not-affected> (Only affects Firefox 37.x) |
| CVE-2015-0798 | (The Reader mode feature in Mozilla Firefox before 37.0.1 on Android, a ...) | não afetado | <not-affected> (Only affects Firefox on Android) |
| CVE-2015-0797 | (GStreamer before 1.4.5, as used in Mozilla Firefox before 38.0, Firefo ...) | corrigido | 38.0-1 |
| CVE-2014-9495 | (Heap-based buffer overflow in the png_combine_row function in libpng b ...) | não afetado | <not-affected> (squeeze used the system libpng, and later versions define their own limits) |
| CVE-2014-8643 | (Mozilla Firefox before 35.0 on Windows allows remote attackers to bypa ...) | não afetado | <not-affected> (Only affects Firefox on Windows) |
| CVE-2014-8642 | (Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider ...) | não afetado | <not-affected> (Only affects versions > 31.x) |
| CVE-2014-8641 | (Use-after-free vulnerability in the WebRTC implementation in Mozilla F ...) | corrigido | 31.4.0esr-1 |
| CVE-2014-8640 | (The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in ...) | não afetado | <not-affected> (Only affects versions > 31.x) |
| CVE-2014-8639 | (Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird ...) | corrigido | 31.4.0esr-1 |
| CVE-2014-8638 | (The navigator.sendBeacon implementation in Mozilla Firefox before 35.0 ...) | corrigido | 31.4.0esr-1 |
| CVE-2014-8637 | (Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly ...) | não afetado | <not-affected> (Only affects versions > 31.x) |
| CVE-2014-8636 | (The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaM ...) | não afetado | <not-affected> (Only affects versions > 31.x) |
| CVE-2014-8635 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects versions > 31.x) |
| CVE-2014-8634 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 31.4.0esr-1 |
| CVE-2014-8632 | (The structured-clone implementation in Mozilla Firefox before 34.0 and ...) | não afetado | <not-affected> (Only affects Firefox 33) |
| CVE-2014-8631 | (The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...) | não afetado | <not-affected> (Only affects Firefox 33) |
| CVE-2014-3566 | (The SSL protocol 3.0, as used in OpenSSL through 1.0.1i and other prod ...) | corrigido | 31.2.0esr-2 |
| CVE-2014-1595 | (Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, and Thunder ...) | não afetado | <not-affected> (Specific to MacOS X) |
| CVE-2014-1594 | (Mozilla Firefox before 34.0, Firefox ESR 31.x before 31.3, Thunderbird ...) | corrigido | 31.3.0esr-1 |
| CVE-2014-1593 | (Stack-based buffer overflow in the mozilla::FileBlockCache::Read funct ...) | corrigido | 31.3.0esr-1 |
| CVE-2014-1592 | (Use-after-free vulnerability in the nsHtml5TreeOperation function in x ...) | corrigido | 31.3.0esr-1 |
| CVE-2014-1591 | (Mozilla Firefox 33.0 and SeaMonkey before 2.31 include path strings in ...) | não afetado | <not-affected> (Only affects Firefox 33) |
| CVE-2014-1590 | (The XMLHttpRequest.prototype.send method in Mozilla Firefox before 34. ...) | corrigido | 31.3.0esr-1 |
| CVE-2014-1589 | (Mozilla Firefox before 34.0 and SeaMonkey before 2.31 provide styleshe ...) | não afetado | <not-affected> (Only affects Firefox 33) |
| CVE-2014-1588 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 33) |
| CVE-2014-1587 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 31.3.0esr-1 |
| CVE-2014-1586 | (content/base/src/nsDocument.cpp in Mozilla Firefox before 33.0, Firefo ...) | corrigido | 31.2.0esr-1 |
| CVE-2014-1585 | (The WebRTC video-sharing feature in dom/media/MediaManager.cpp in Mozi ...) | corrigido | 31.2.0esr-1 |
| CVE-2014-1584 | (The Public Key Pinning (PKP) implementation in Mozilla Firefox before ...) | não afetado | <not-affected> (Only affects Firefox 32 and later) |
| CVE-2014-1583 | (The Alarm API in Mozilla Firefox before 33.0 and Firefox ESR 31.x befo ...) | corrigido | 31.2.0esr-1 |
| CVE-2014-1582 | (The Public Key Pinning (PKP) implementation in Mozilla Firefox before ...) | não afetado | <not-affected> (Only affects Firefox 32 and later) |
| CVE-2014-1581 | (Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Fir ...) | corrigido | 31.2.0esr-1 |
| CVE-2014-1580 | (Mozilla Firefox before 33.0 does not properly initialize memory for GI ...) | não afetado | <not-affected> (Only affects Firefox 32 and later) |
| CVE-2014-1578 | (The get_tile function in Mozilla Firefox before 33.0, Firefox ESR 31.x ...) | corrigido | 31.2.0esr-1 |
| CVE-2014-1577 | (The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the ...) | corrigido | 31.2.0esr-1 |
| CVE-2014-1576 | (Heap-based buffer overflow in the nsTransformedTextRun function in Moz ...) | corrigido | 31.2.0esr-1 |
| CVE-2014-1575 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 32 and later) |
| CVE-2014-1574 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 31.2.0esr-1 |
| CVE-2014-1568 | (Mozilla Network Security Services (NSS) before 3.16.2.1, 3.16.x before ...) | não afetado | <not-affected> (uses system nss) |
| CVE-2014-1567 | (Use-after-free vulnerability in DirectionalityUtils.cpp in Mozilla Fir ...) | corrigido | 31.1.0esr-1 |
| CVE-2014-1566 | (Mozilla Firefox before 31.1 on Android does not properly restrict copy ...) | não afetado | <not-affected> (Specific to Android) |
| CVE-2014-1565 | (The mozilla::dom::AudioEventTimeline function in the Web Audio API imp ...) | corrigido | 31.1.0esr-1 |
| CVE-2014-1564 | (Mozilla Firefox before 32.0, Firefox ESR 31.x before 31.1, and Thunder ...) | corrigido | 31.1.0esr-1 |
| CVE-2014-1563 | (Use-after-free vulnerability in the mozilla::DOMSVGLength::GetTearOff ...) | corrigido | 31.1.0esr-1 |
| CVE-2014-1562 | (Unspecified vulnerability in the browser engine in Mozilla Firefox bef ...) | corrigido | 31.1.0esr-1 |
| CVE-2014-1561 | (Mozilla Firefox before 31.0 does not properly restrict use of drag-and ...) | corrigido | 31.0-1 |
| CVE-2014-1560 | (Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote a ...) | corrigido | 31.0-1 |
| CVE-2014-1559 | (Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote a ...) | corrigido | 31.0-1 |
| CVE-2014-1558 | (Mozilla Firefox before 31.0 and Thunderbird before 31.0 allow remote a ...) | corrigido | 31.0-1 |
| CVE-2014-1557 | (The ConvolveHorizontally function in Skia, as used in Mozilla Firefox ...) | corrigido | 31.0-1 |
| CVE-2014-1556 | (Mozilla Firefox before 31.0, Firefox ESR 24.x before 24.7, and Thunder ...) | corrigido | 31.0-1 |
| CVE-2014-1555 | (Use-after-free vulnerability in the nsDocLoader::OnProgress function i ...) | corrigido | 31.0-1 |
| CVE-2014-1554 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 31.1.0esr-1 |
| CVE-2014-1553 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 31.1.0esr-1 |
| CVE-2014-1552 | (Mozilla Firefox before 31.0 and Thunderbird before 31.0 do not properl ...) | corrigido | 31.0-1 |
| CVE-2014-1551 | (Use-after-free vulnerability in the FontTableRec destructor in Mozilla ...) | não afetado | <not-affected> (Affects only Windows platform) |
| CVE-2014-1550 | (Use-after-free vulnerability in the MediaInputPort class in Mozilla Fi ...) | corrigido | 31.0-1 |
| CVE-2014-1549 | (The mozilla::dom::AudioBufferSourceNodeEngine::CopyFromInputBuffer fun ...) | corrigido | 31.0-1 |
| CVE-2014-1548 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 31.0-1 |
| CVE-2014-1547 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 31.0-1 |
| CVE-2014-1545 | (Mozilla Netscape Portable Runtime (NSPR) before 4.10.6 allows remote a ...) | corrigido | 30.0-1 |
| CVE-2014-1544 | (Use-after-free vulnerability in the CERT_DestroyCertificate function i ...) | corrigido | 31.0-1 |
| CVE-2014-1543 | (Multiple heap-based buffer overflows in the navigator.getGamepads func ...) | não afetado | <not-affected> (Only affects Windows 8) |
| CVE-2014-1542 | (Buffer overflow in the Speex resampler in the Web Audio subsystem in M ...) | corrigido | 30.0-1 |
| CVE-2014-1541 | (Use-after-free vulnerability in the RefreshDriverTimer::TickDriver fun ...) | corrigido | 30.0-1 |
| CVE-2014-1540 | (Use-after-free vulnerability in the nsEventListenerManager::CompileEve ...) | corrigido | 30.0-1 |
| CVE-2014-1539 | (Mozilla Firefox before 30.0 and Thunderbird through 24.6 on OS X do no ...) | não afetado | <not-affected> (Only affects Mac OS X) |
| CVE-2014-1538 | (Use-after-free vulnerability in the nsTextEditRules::CreateMozBR funct ...) | corrigido | 30.0-1 |
| CVE-2014-1537 | (Use-after-free vulnerability in the mozilla::dom::workers::WorkerPriva ...) | corrigido | 30.0-1 |
| CVE-2014-1536 | (The PropertyProvider::FindJustificationRange function in Mozilla Firef ...) | corrigido | 30.0-1 |
| CVE-2014-1534 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 30.0-1 |
| CVE-2014-1533 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 30.0-1 |
| CVE-2014-1532 | (Use-after-free vulnerability in the nsHostResolver::ConditionallyRefre ...) | corrigido | 24.5.0esr-1 |
| CVE-2014-1531 | (Use-after-free vulnerability in the nsGenericHTMLElement::GetWidthHeig ...) | corrigido | 24.5.0esr-1 |
| CVE-2014-1530 | (The docshell implementation in Mozilla Firefox before 29.0, Firefox ES ...) | corrigido | 24.5.0esr-1 |
| CVE-2014-1529 | (The Web Notification API in Mozilla Firefox before 29.0, Firefox ESR 2 ...) | corrigido | 24.5.0esr-1 |
| CVE-2014-1528 | (The sse2_composite_src_x888_8888 function in Pixman, as used in Cairo ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2014-1527 | (Mozilla Firefox before 29.0 on Android allows remote attackers to spoo ...) | não afetado | <not-affected> (Only affects Firefox on Android) |
| CVE-2014-1526 | (The XrayWrapper implementation in Mozilla Firefox before 29.0 and SeaM ...) | não afetado | <not-affected> (Only affects Firefox 28) |
| CVE-2014-1525 | (The mozilla::dom::TextTrack::AddCue function in Mozilla Firefox before ...) | não afetado | <not-affected> (Only affects Firefox 28) |
| CVE-2014-1524 | (The nsXBLProtoImpl::InstallImplementation function in Mozilla Firefox ...) | corrigido | 24.5.0esr-1 |
| CVE-2014-1523 | (Heap-based buffer overflow in the read_u32 function in Mozilla Firefox ...) | corrigido | 24.5.0esr-1 |
| CVE-2014-1522 | (The mozilla::dom::OscillatorNodeEngine::ComputeCustom function in the ...) | não afetado | <not-affected> (Only affects Firefox 28) |
| CVE-2014-1520 | (maintenservice_installer.exe in the Maintenance Service Installer in M ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2014-1519 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 28) |
| CVE-2014-1518 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 24.5.0esr-1 |
| CVE-2014-1516 | (The saltProfileName function in base/GeckoProfileDirectories.java in M ...) | não afetado | <not-affected> (Android-specific) |
| CVE-2014-1515 | (Mozilla Firefox before 28.0.1 on Android processes a file: URL by copy ...) | não afetado | <not-affected> (Android-specific) |
| CVE-2014-1514 | (vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24. ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1513 | (TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1512 | (Use-after-free vulnerability in the TypeObject class in the JavaScript ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1511 | (Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1510 | (The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1509 | (Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1508 | (The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 2 ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1506 | (Directory traversal vulnerability in Android Crash Reporter in Mozilla ...) | não afetado | <not-affected> (Android-specific) |
| CVE-2014-1505 | (The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1504 | (The session-restore feature in Mozilla Firefox before 28.0 and SeaMonk ...) | não afetado | <not-affected> (Only affects Firefox 27) |
| CVE-2014-1502 | (The (1) WebGL.compressedTexImage2D and (2) WebGL.compressedTexSubImage ...) | não afetado | <not-affected> (Only affects Firefox 27) |
| CVE-2014-1501 | (Mozilla Firefox before 28.0 on Android allows remote attackers to bypa ...) | não afetado | <not-affected> (Android-specific) |
| CVE-2014-1500 | (Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote att ...) | não afetado | <not-affected> (Only affects Firefox 27) |
| CVE-2014-1499 | (Mozilla Firefox before 28.0 and SeaMonkey before 2.25 allow remote att ...) | não afetado | <not-affected> (Only affects Firefox 27) |
| CVE-2014-1498 | (The crypto.generateCRMFRequest method in Mozilla Firefox before 28.0 a ...) | não afetado | <not-affected> (Only affects Firefox 27) |
| CVE-2014-1497 | (The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox b ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1496 | (Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird ...) | não afetado | <not-affected> (Online update not used in Debian) |
| CVE-2014-1494 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 27) |
| CVE-2014-1493 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 24.4.0esr-1 |
| CVE-2014-1492 | (The cert_TestHostName function in lib/certdb/certdb.c in the certifica ...) | não afetado | <not-affected> (Only affects Firefox 28) |
| CVE-2014-1491 | (Mozilla Network Security Services (NSS) before 3.15.4, as used in Mozi ...) | corrigido | 24.3.0esr-1 |
| CVE-2014-1490 | (Race condition in libssl in Mozilla Network Security Services (NSS) be ...) | corrigido | 24.3.0esr-1 |
| CVE-2014-1489 | (Mozilla Firefox before 27.0 does not properly restrict access to about ...) | não afetado | <not-affected> (Only affects Firefox 26) |
| CVE-2014-1488 | (The Web workers implementation in Mozilla Firefox before 27.0 and SeaM ...) | não afetado | <not-affected> (Only affects Firefox 26) |
| CVE-2014-1487 | (The Web workers implementation in Mozilla Firefox before 27.0, Firefox ...) | corrigido | 24.3.0esr-1 |
| CVE-2014-1486 | (Use-after-free vulnerability in the imgRequestProxy function in Mozill ...) | corrigido | 24.3.0esr-1 |
| CVE-2014-1485 | (The Content Security Policy (CSP) implementation in Mozilla Firefox be ...) | não afetado | <not-affected> (Only affects Firefox 26) |
| CVE-2014-1484 | (Mozilla Firefox before 27.0 on Android 4.2 and earlier creates system- ...) | não afetado | <not-affected> (Only affects Firefox for Android) |
| CVE-2014-1483 | (Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote att ...) | não afetado | <not-affected> (Only affects Firefox 26) |
| CVE-2014-1482 | (RasterImage.cpp in Mozilla Firefox before 27.0, Firefox ESR 24.x befor ...) | corrigido | 24.3.0esr-1 |
| CVE-2014-1481 | (Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird ...) | corrigido | 24.3.0esr-1 |
| CVE-2014-1480 | (The file-download implementation in Mozilla Firefox before 27.0 and Se ...) | não afetado | <not-affected> (Only affects Firefox 26) |
| CVE-2014-1479 | (The System Only Wrapper (SOW) implementation in Mozilla Firefox before ...) | corrigido | 24.3.0esr-1 |
| CVE-2014-1478 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 26) |
| CVE-2014-1477 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 24.3.0esr-1 |
| CVE-2013-6673 | (Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird ...) | corrigido | 24.2.0esr-1 |
| CVE-2013-6672 | (Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow u ...) | não afetado | <not-affected> (Only affects Firefox 25) |
| CVE-2013-6671 | (The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 26 ...) | corrigido | 24.2.0esr-1 |
| CVE-2013-6630 | (The get_dht function in jdmarker.c in libjpeg-turbo through 1.3.0, as ...) | corrigido | 24.2.0esr-1 |
| CVE-2013-6629 | (The get_sos function in jdmarker.c in (1) libjpeg 6b and (2) libjpeg-t ...) | corrigido | 24.2.0esr-1 |
| CVE-2013-6167 | (Mozilla Firefox through 27 sends HTTP Cookie headers without first val ...) | removido/último | <removed> (unimportant) |
| CVE-2013-5619 | (Multiple integer overflows in the binary-search implementation in Spid ...) | não afetado | <not-affected> (Only affects Firefox 25) |
| CVE-2013-5618 | (Use-after-free vulnerability in the nsNodeUtils::LastRelease function ...) | corrigido | 24.2.0esr-1 |
| CVE-2013-5616 | (Use-after-free vulnerability in the nsEventListenerManager::HandleEven ...) | corrigido | 24.2.0esr-1 |
| CVE-2013-5615 | (The JavaScript implementation in Mozilla Firefox before 26.0, Firefox ...) | corrigido | 24.2.0esr-1 |
| CVE-2013-5614 | (Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly ...) | não afetado | <not-affected> (Only affects Firefox 25) |
| CVE-2013-5613 | (Use-after-free vulnerability in the PresShell::DispatchSynthMouseMove ...) | corrigido | 24.2.0esr-1 |
| CVE-2013-5612 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 26. ...) | não afetado | <not-affected> (Only affects Firefox 25) |
| CVE-2013-5611 | (Mozilla Firefox before 26.0 does not properly remove the Application I ...) | não afetado | <not-affected> (Only affects Firefox 25) |
| CVE-2013-5610 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 25) |
| CVE-2013-5609 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 24.2.0esr-1 |
| CVE-2013-5604 | (The txXPathNodeUtils::getBaseURI function in the XSLT processor in Moz ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5603 | (Use-after-free vulnerability in the nsContentUtils::ContentIsHostInclu ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5602 | (The Worker::SetEventListener function in the Web workers implementatio ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5601 | (Use-after-free vulnerability in the nsEventListenerManager::SetEventHa ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5600 | (Use-after-free vulnerability in the nsIOService::NewChannelFromURIWith ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5599 | (Use-after-free vulnerability in the nsIPresShell::GetPresContext funct ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5598 | (PDF.js in Mozilla Firefox before 25.0 and Firefox ESR 24.x before 24.1 ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5597 | (Use-after-free vulnerability in the nsDocLoader::doStopDocumentLoad fu ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5596 | (The cycle collection (CC) implementation in Mozilla Firefox before 25. ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5595 | (The JavaScript engine in Mozilla Firefox before 25.0, Firefox ESR 17.x ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5593 | (The SELECT element implementation in Mozilla Firefox before 25.0, Fire ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5592 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5591 | (Unspecified vulnerability in the browser engine in Mozilla Firefox bef ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-5590 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 24.1.0esr-1 |
| CVE-2013-1738 | (Use-after-free vulnerability in the JS_GetGlobalForScopeChain function ...) | corrigido | 24.0-1 |
| CVE-2013-1737 | (Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbi ...) | corrigido | 24.0-1 |
| CVE-2013-1736 | (The nsGfxScrollFrameInner::IsLTR function in Mozilla Firefox before 24 ...) | corrigido | 24.0-1 |
| CVE-2013-1735 | (Use-after-free vulnerability in the mozilla::layout::ScrollbarActivity ...) | corrigido | 24.0-1 |
| CVE-2013-1732 | (Buffer overflow in the nsFloatManager::GetFlowArea function in Mozilla ...) | corrigido | 24.0-1 |
| CVE-2013-1731 | (Untrusted search path vulnerability in the GL tracing functionality in ...) | não afetado | <not-affected> (Android-specific) |
| CVE-2013-1730 | (Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbi ...) | corrigido | 24.0-1 |
| CVE-2013-1729 | (The WebGL implementation in Mozilla Firefox before 24.0, when NVIDIA g ...) | não afetado | <not-affected> (MacOS-specific) |
| CVE-2013-1728 | (The IonMonkey JavaScript engine in Mozilla Firefox before 24.0, Thunde ...) | corrigido | 24.0-1 |
| CVE-2013-1727 | (Mozilla Firefox before 24.0 on Android allows attackers to bypass the ...) | não afetado | <not-affected> (Android-specific) |
| CVE-2013-1726 | (Mozilla Updater in Mozilla Firefox before 24.0, Firefox ESR 17.x befor ...) | não afetado | <not-affected> (Updater not used in Debian) |
| CVE-2013-1725 | (Mozilla Firefox before 24.0, Firefox ESR 17.x before 17.0.9, Thunderbi ...) | corrigido | 24.0-1 |
| CVE-2013-1724 | (Use-after-free vulnerability in the mozilla::dom::HTMLFormElement::IsD ...) | corrigido | 24.0-1 |
| CVE-2013-1723 | (The NativeKey widget in Mozilla Firefox before 24.0, Thunderbird befor ...) | corrigido | 24.0-1 |
| CVE-2013-1722 | (Use-after-free vulnerability in the nsAnimationManager::BuildAnimation ...) | corrigido | 24.0-1 |
| CVE-2013-1721 | (Integer overflow in the drawLineLoop function in the libGLESv2 library ...) | corrigido | 24.0-1 |
| CVE-2013-1720 | (The nsHtml5TreeBuilder::resetTheInsertionMode function in the HTML5 Tr ...) | corrigido | 24.0-1 |
| CVE-2013-1719 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 24.0-1 |
| CVE-2013-1718 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 24.0-1 |
| CVE-2013-1717 | (Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbi ...) | corrigido | 17.0.8esr-1 |
| CVE-2013-1715 | (Multiple untrusted search path vulnerabilities in the (1) full install ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2013-1714 | (The Web Workers implementation in Mozilla Firefox before 23.0, Firefox ...) | corrigido | 17.0.8esr-1 |
| CVE-2013-1713 | (Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbi ...) | corrigido | 17.0.8esr-1 |
| CVE-2013-1712 | (Multiple untrusted search path vulnerabilities in updater.exe in Mozil ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2013-1711 | (The XrayWrapper implementation in Mozilla Firefox before 23.0 and SeaM ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1710 | (The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0 ...) | corrigido | 17.0.8esr-1 |
| CVE-2013-1709 | (Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbi ...) | corrigido | 17.0.8esr-1 |
| CVE-2013-1708 | (Mozilla Firefox before 23.0 and SeaMonkey before 2.20 allow remote att ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1707 | (Stack-based buffer overflow in Mozilla Updater in Mozilla Firefox befo ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2013-1706 | (Stack-based buffer overflow in maintenanceservice.exe in the Mozilla M ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2013-1705 | (Heap-based buffer underflow in the cryptojs_interpret_key_gen_type fun ...) | corrigido | 23.0-1 |
| CVE-2013-1704 | (Use-after-free vulnerability in the nsINode::GetParentNode function in ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1702 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1701 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 17.0.8esr-1 |
| CVE-2013-1700 | (The Mozilla Maintenance Service in Mozilla Firefox before 22.0 on Wind ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1699 | (The Internationalized Domain Name (IDN) display algorithm in Mozilla F ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1698 | (The getUserMedia permission implementation in Mozilla Firefox before 2 ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1697 | (The XrayWrapper implementation in Mozilla Firefox before 22.0, Firefox ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1696 | (Mozilla Firefox before 22.0 does not properly enforce the X-Frame-Opti ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1695 | (Mozilla Firefox before 22.0 does not properly implement certain DocShe ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1694 | (The PreserveWrapper implementation in Mozilla Firefox before 22.0, Fir ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1693 | (The SVG filter implementation in Mozilla Firefox before 22.0, Firefox ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1692 | (Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbi ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1690 | (Mozilla Firefox before 22.0, Firefox ESR 17.x before 17.0.7, Thunderbi ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1688 | (The Profiler implementation in Mozilla Firefox before 22.0 parses untr ...) | não afetado | <not-affected> (Only affects Firefox > 17) |
| CVE-2013-1687 | (The System Only Wrapper (SOW) and Chrome Object Wrapper (COW) implemen ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1686 | (Use-after-free vulnerability in the mozilla::ResetDir function in Mozi ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1685 | (Use-after-free vulnerability in the nsIDocument::GetRootElement functi ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1684 | (Use-after-free vulnerability in the mozilla::dom::HTMLMediaElement::Lo ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1683 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 21) |
| CVE-2013-1682 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 17.0.7esr-1 |
| CVE-2013-1681 | (Use-after-free vulnerability in the nsContentUtils::RemoveScriptBlocke ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-1680 | (Use-after-free vulnerability in the nsFrameList::FirstChild function i ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-1679 | (Use-after-free vulnerability in the mozilla::plugins::child::_geturlno ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-1678 | (The _cairo_xlib_surface_add_glyph function in Mozilla Firefox before 2 ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-1677 | (The gfxSkipCharsIterator::SetOffsets function in Mozilla Firefox befor ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-1676 | (The SelectionIterator::GetNextSegment function in Mozilla Firefox befo ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-1675 | (Mozilla Firefox before 21.0, Firefox ESR 17.x before 17.0.6, Thunderbi ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-1674 | (Use-after-free vulnerability in Mozilla Firefox before 21.0, Firefox E ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-1673 | (The Mozilla Updater in Mozilla Firefox before 21.0 on Windows does not ...) | não afetado | <not-affected> (Windows build only) |
| CVE-2013-1672 | (The Mozilla Maintenance Service in Mozilla Firefox before 21.0, Firefo ...) | não afetado | <not-affected> (Windows build only) |
| CVE-2013-1671 | (Mozilla Firefox before 21.0 does not properly implement the INPUT elem ...) | não afetado | <not-affected> (Doesn't affect ESR 17 series, only later versions in experimental) |
| CVE-2013-1670 | (The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-1669 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 20) |
| CVE-2013-0801 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 17.0.6esr-1 |
| CVE-2013-0800 | (Integer signedness error in the pixman_fill_sse2 function in pixman-ss ...) | corrigido | 17.0.5esr-1 |
| CVE-2013-0799 | (Buffer overflow in the Mozilla Maintenance Service in Mozilla Firefox ...) | não afetado | <not-affected> (Only affects Firefox on Windows) |
| CVE-2013-0798 | (Mozilla Firefox before 20.0 on Android uses world-writable and world-r ...) | não afetado | <not-affected> (Only affects Firefox on Android) |
| CVE-2013-0797 | (Untrusted search path vulnerability in the Mozilla Updater in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox on Windows) |
| CVE-2013-0796 | (The WebGL subsystem in Mozilla Firefox before 20.0, Firefox ESR 17.x b ...) | corrigido | 17.0.5esr-1 |
| CVE-2013-0795 | (The System Only Wrapper (SOW) implementation in Mozilla Firefox before ...) | corrigido | 17.0.5esr-1 |
| CVE-2013-0794 | (Mozilla Firefox before 20.0 and SeaMonkey before 2.17 do not prevent o ...) | corrigido | 17.0.5esr-1 (low) |
| CVE-2013-0793 | (Mozilla Firefox before 20.0, Firefox ESR 17.x before 17.0.5, Thunderbi ...) | corrigido | 17.0.5esr-1 |
| CVE-2013-0792 | (Mozilla Firefox before 20.0 and SeaMonkey before 2.17, when gfx.color_ ...) | corrigido | 17.0.5esr-1 (low) |
| CVE-2013-0790 | (Unspecified vulnerability in the browser engine in Mozilla Firefox bef ...) | não afetado | <not-affected> (Only affects Firefox on Android) |
| CVE-2013-0789 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 19) |
| CVE-2013-0788 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 17.0.5esr-1 |
| CVE-2013-0787 | (Use-after-free vulnerability in the nsEditor::IsPreformatted function ...) | corrigido | 17.0.5esr-1 |
| CVE-2013-0784 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0783 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 17.0.5esr-1 (bug #703071) |
| CVE-2013-0782 | (Heap-based buffer overflow in the nsSaveAsCharset::DoCharsetConversion ...) | corrigido | 17.0.5esr-1 (bug #703071) |
| CVE-2013-0781 | (Use-after-free vulnerability in the nsPrintEngine::CommonPrint functio ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0780 | (Use-after-free vulnerability in the nsOverflowContinuationTracker::Fin ...) | corrigido | 17.0.5esr-1 (bug #703071) |
| CVE-2013-0779 | (The nsCodingStateMachine::NextState function in Mozilla Firefox before ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0778 | (The ClusterIterator::NextCluster function in Mozilla Firefox before 19 ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0777 | (Use-after-free vulnerability in the nsDisplayBoxShadowOuter::Paint fun ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0776 | (Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbi ...) | corrigido | 17.0.5esr-1 (bug #703071) |
| CVE-2013-0775 | (Use-after-free vulnerability in the nsImageLoadingContent::OnStopConta ...) | corrigido | 17.0.5esr-1 (bug #703071) |
| CVE-2013-0774 | (Mozilla Firefox before 19.0, Firefox ESR 17.x before 17.0.3, Thunderbi ...) | não afetado | <not-affected> (Introduced in Firefox 15) |
| CVE-2013-0773 | (The Chrome Object Wrapper (COW) and System Only Wrapper (SOW) implemen ...) | corrigido | 17.0.5esr-1 (bug #703071) |
| CVE-2013-0772 | (The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0771 | (Heap-based buffer overflow in the gfxTextRun::ShrinkToLigatureBoundari ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0770 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0769 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0768 | (Stack-based buffer overflow in the Canvas implementation in Mozilla Fi ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0767 | (The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox b ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0766 | (Use-after-free vulnerability in the ~nsHTMLEditRules implementation in ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0765 | (Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0764 | (The nsSOCKSSocketInfo::ConnectToProxy function in Mozilla Firefox befo ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0763 | (Use-after-free vulnerability in Mozilla Firefox before 18.0, Firefox E ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0762 | (Use-after-free vulnerability in the imgRequest::OnStopFrame function i ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0761 | (Use-after-free vulnerability in the mozilla::TrackUnionStream::EndTrac ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0760 | (Buffer overflow in the CharDistributionAnalysis::HandleOneChar functio ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0759 | (Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0758 | (Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0757 | (The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0756 | (Use-after-free vulnerability in the obj_toSource function in Mozilla F ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0755 | (Use-after-free vulnerability in the mozVibrate implementation in the V ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0754 | (Use-after-free vulnerability in the ListenerManager implementation in ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0753 | (Use-after-free vulnerability in the serializeToStream implementation i ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0752 | (Mozilla Firefox before 18.0, Firefox ESR 17.x before 17.0.2, Thunderbi ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0751 | (Mozilla Firefox before 18.0 on Android and SeaMonkey before 2.15 do no ...) | não afetado | <not-affected> (Android-specific) |
| CVE-2013-0750 | (Integer overflow in the JavaScript implementation in Mozilla Firefox b ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0749 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0748 | (The XBL.__proto__.toString implementation in Mozilla Firefox before 18 ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0747 | (The gPluginHandler.handleEvent function in the plugin handler in Mozil ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0746 | (Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x ...) | corrigido | 10.0.12esr-1 |
| CVE-2013-0745 | (The AutoWrapperChanger class in Mozilla Firefox before 18.0, Firefox E ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2013-0744 | (Use-after-free vulnerability in the TableBackgroundPainter::TableBackg ...) | corrigido | 10.0.12esr-1 |
| CVE-2012-5843 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-5842 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-5841 | (Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderb ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-5840 | (Use-after-free vulnerability in the nsTextEditorState::PrepareEditor f ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-5839 | (Heap-based buffer overflow in the gfxShapedWord::CompressedGlyph::IsCl ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-5838 | (The copyTexImage2D implementation in the WebGL subsystem in Mozilla Fi ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-5837 | (The Web Developer Toolbar in Mozilla Firefox before 17.0 executes scri ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-5836 | (Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey be ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-5835 | (Integer overflow in the WebGL subsystem in Mozilla Firefox before 17.0 ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-5833 | (The texImage2D implementation in the WebGL subsystem in Mozilla Firefo ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-5830 | (Use-after-free vulnerability in Mozilla Firefox before 17.0, Firefox E ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-5829 | (Heap-based buffer overflow in the nsWindow::OnExposeEvent function in ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-5354 | (Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey be ...) | não afetado | <not-affected> (Only affects 16.x release from experimental) |
| CVE-2012-4930 | (The SPDY protocol 3 and earlier, as used in Mozilla Firefox, Google Ch ...) | não afetado | <not-affected> (Firefox ESV not support SDPY) |
| CVE-2012-4929 | (The TLS protocol 1.2 and earlier, as used in Mozilla Firefox, Google C ...) | não afetado | <not-affected> (Firefox ESV not use TLS/SSL compression) |
| CVE-2012-4218 | (Use-after-free vulnerability in the BuildTextRunsScanner::BreakSink::S ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-4217 | (Use-after-free vulnerability in the nsViewManager::ProcessPendingUpdat ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-4216 | (Use-after-free vulnerability in the gfxFont::GetFontEntry function in ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-4215 | (Use-after-free vulnerability in the nsPlaintextEditor::FireClipboardEv ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-4214 | (Use-after-free vulnerability in the nsTextEditorState::PrepareEditor f ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-4213 | (Use-after-free vulnerability in the nsEditor::FindNextLeafNode functio ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-4212 | (Use-after-free vulnerability in the XPCWrappedNative::Mark function in ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-4210 | (The Style Inspector in Mozilla Firefox before 17.0 and Firefox ESR 10. ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-4209 | (Mozilla Firefox before 17.0, Firefox ESR 10.x before 10.0.11, Thunderb ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-4208 | (The XrayWrapper implementation in Mozilla Firefox before 17.0, Thunder ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-4207 | (The HZ-GB-2312 character-set implementation in Mozilla Firefox before ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-4206 | (Untrusted search path vulnerability in the installer in Mozilla Firefo ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2012-4205 | (Mozilla Firefox before 17.0, Thunderbird before 17.0, and SeaMonkey be ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-4204 | (The str_unescape function in the JavaScript engine in Mozilla Firefox ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-4203 | (The New Tab page in Mozilla Firefox before 17.0 uses a privileged cont ...) | não afetado | <not-affected> (Doesn't affect the ESR series, only releases from experimental) |
| CVE-2012-4202 | (Heap-based buffer overflow in the image::RasterImage::DrawFrameTo func ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-4201 | (The evalInSandbox implementation in Mozilla Firefox before 17.0, Firef ...) | corrigido | 10.0.11esr-1 |
| CVE-2012-4196 | (Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunde ...) | corrigido | 10.0.10esr-1 |
| CVE-2012-4195 | (The nsLocation::CheckURL function in Mozilla Firefox before 16.0.2, Fi ...) | não afetado | <not-affected> (Only affects 16.x release from experimental) |
| CVE-2012-4194 | (Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunde ...) | corrigido | 10.0.10esr-1 |
| CVE-2012-4193 | (Mozilla Firefox before 16.0.1, Firefox ESR 10.x before 10.0.9, Thunder ...) | corrigido | 10.0.9esr-1 |
| CVE-2012-4192 | (Mozilla Firefox 16.0, Thunderbird 16.0, and SeaMonkey 2.13 allow remot ...) | corrigido | 10.0.9esr-1 |
| CVE-2012-4191 | (The mozilla::net::FailDelayManager::Lookup function in the WebSockets ...) | não afetado | <not-affected> (Doesn't affect ESR series) |
| CVE-2012-4190 | (The FT2FontEntry::CreateFontEntry function in FreeType, as used in the ...) | não afetado | <not-affected> (Only affects Firefox Mobile) |
| CVE-2012-4188 | (Heap-based buffer overflow in the Convolve3x3 function in Mozilla Fire ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-4187 | (Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-4186 | (Heap-based buffer overflow in the nsWaveReader::DecodeAudioData functi ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-4185 | (Buffer overflow in the nsCharTraits::length function in Mozilla Firefo ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-4184 | (The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-4183 | (Use-after-free vulnerability in the DOMSVGTests::GetRequiredFeatures f ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-4182 | (Use-after-free vulnerability in the nsTextEditRules::WillInsert functi ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-4181 | (Use-after-free vulnerability in the nsSMILAnimationController::DoSampl ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-4180 | (Heap-based buffer overflow in the nsHTMLEditor::IsPrevCharInNodeWhites ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-4179 | (Use-after-free vulnerability in the nsHTMLCSSUtils::CreateCSSPropertyT ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3995 | (The IsCSSWordSpacingSpace function in Mozilla Firefox before 16.0, Fir ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3994 | (Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3993 | (The Chrome Object Wrapper (COW) implementation in Mozilla Firefox befo ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3992 | (Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3991 | (Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3990 | (Use-after-free vulnerability in the IME State Manager implementation i ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3989 | (Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey be ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-3988 | (Use-after-free vulnerability in Mozilla Firefox before 16.0, Firefox E ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3987 | (Mozilla Firefox before 16.0 on Android assigns chrome privileges to Re ...) | não afetado | <not-affected> (Android-specific) |
| CVE-2012-3986 | (Mozilla Firefox before 16.0, Firefox ESR 10.x before 10.0.8, Thunderbi ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3985 | (Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey be ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-3984 | (Mozilla Firefox before 16.0, Thunderbird before 16.0, and SeaMonkey be ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-3983 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-3982 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0.8esr-1 |
| CVE-2012-3980 | (The web console in Mozilla Firefox before 15.0, Firefox ESR 10.x befor ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3979 | (Mozilla Firefox before 15.0 on Android does not properly implement uns ...) | não afetado | <not-affected> (Only affects Firefox for Android) |
| CVE-2012-3978 | (The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Fire ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3976 | (Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, and SeaMo ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3975 | (The DOMParser component in Mozilla Firefox before 15.0, Thunderbird be ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-3974 | (Untrusted search path vulnerability in the installer in Mozilla Firefo ...) | não afetado | <not-affected> (Only affects Firefox for Windows) |
| CVE-2012-3973 | (The debugger in the developer-tools subsystem in Mozilla Firefox befor ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-3972 | (The format-number functionality in the XSLT implementation in Mozilla ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3971 | (Summer Institute of Linguistics (SIL) Graphite 2, as used in Mozilla F ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-3970 | (Use-after-free vulnerability in the nsTArray_base::Length function in ...) | não afetado | <not-affected> (Vulnerable code not present in Firefox 10.x codebase) |
| CVE-2012-3969 | (Integer overflow in the nsSVGFEMorphologyElement::Filter function in M ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3968 | (Use-after-free vulnerability in the WebGL implementation in Mozilla Fi ...) | não afetado | <not-affected> (Vulnerable code not present in Firefox 10.x codebase) |
| CVE-2012-3967 | (The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 1 ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3966 | (Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbi ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3965 | (Mozilla Firefox before 15.0 does not properly restrict navigation to t ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-3964 | (Use-after-free vulnerability in the gfxTextRun::GetUserData function i ...) | não afetado | <not-affected> (Vulnerable code not present in Firefox 10.x codebase) |
| CVE-2012-3963 | (Use-after-free vulnerability in the js::gc::MapAllocToTraceKind functi ...) | não afetado | <not-affected> (Vulnerable code not present in Firefox 10.x codebase) |
| CVE-2012-3962 | (Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbi ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3961 | (Use-after-free vulnerability in the RangeData implementation in Mozill ...) | não afetado | <not-affected> (Vulnerable code not present in Firefox 10.x codebase) |
| CVE-2012-3960 | (Use-after-free vulnerability in the mozSpellChecker::SetCurrentDiction ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3959 | (Use-after-free vulnerability in the nsRangeUpdater::SelAdjDeleteNode f ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3958 | (Use-after-free vulnerability in the nsHTMLEditRules::DeleteNonTableEle ...) | não afetado | <not-affected> (Vulnerable code not present in Firefox 10.x codebase) |
| CVE-2012-3957 | (Heap-based buffer overflow in the nsBlockFrame::MarkLineDirty function ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-3956 | (Use-after-free vulnerability in the MediaStreamGraphThreadRunnable::Ru ...) | não afetado | <not-affected> (Vulnerable code not present in Firefox 10.x codebase) |
| CVE-2012-3105 | (The glBufferData function in the WebGL implementation in Mozilla Firef ...) | corrigido | 10.0.5esr-1 |
| CVE-2012-2808 | (The PRNG implementation in the DNS resolver in Bionic in Android befor ...) | não afetado | <not-affected> (Only affects 37.x; only on Android) |
| CVE-2012-1976 | (Use-after-free vulnerability in the nsHTMLSelectElement::SubmitNamesVa ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-1975 | (Use-after-free vulnerability in the PresShell::CompleteMove function i ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-1974 | (Use-after-free vulnerability in the gfxTextRun::CanBreakLineBefore fun ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-1973 | (Use-after-free vulnerability in the nsObjectLoadingContent::LoadObject ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-1972 | (Use-after-free vulnerability in the nsHTMLEditor::CollapseAdjacentText ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-1971 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-1970 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0.7esr-1 |
| CVE-2012-1967 | (Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thun ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1966 | (Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1965 | (Mozilla Firefox 4.x through 13.0 and Firefox ESR 10.x before 10.0.6 do ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1964 | (The certificate-warning functionality in browser/components/certerror/ ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1963 | (The Content Security Policy (CSP) functionality in Mozilla Firefox 4.x ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1962 | (Use-after-free vulnerability in the JSDependentString::undepend functi ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1961 | (Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thun ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1960 | (The qcms_transform_data_rgb_out_lut_sse2 function in the QCMS implemen ...) | não afetado | <not-affected> (Only affects Firefox > 10) |
| CVE-2012-1959 | (Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thun ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1958 | (Use-after-free vulnerability in the nsGlobalWindow::PageHidden functio ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1957 | (An unspecified parser-utility class in Mozilla Firefox 4.x through 13. ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1956 | (Mozilla Firefox before 15.0, Thunderbird before 15.0, and SeaMonkey be ...) | não afetado | <not-affected> (Only affects Firefox >= 10) |
| CVE-2012-1955 | (Mozilla Firefox 4.x through 13.0, Firefox ESR 10.x before 10.0.6, Thun ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1954 | (Use-after-free vulnerability in the nsDocument::AdoptNode function in ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1953 | (The ElementAnimations::EnsureStyleRuleFor function in Mozilla Firefox ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1952 | (The nsTableFrame::InsertFrames function in Mozilla Firefox 4.x through ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1951 | (Use-after-free vulnerability in the nsSMILTimeValueSpec::IsEventBased ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1950 | (The drag-and-drop implementation in Mozilla Firefox 4.x through 13.0 a ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1949 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 13) |
| CVE-2012-1948 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0.6esr-1 |
| CVE-2012-1947 | (Heap-based buffer overflow in the utf16_to_isolatin1 function in Mozil ...) | corrigido | 10.0.5esr-1 |
| CVE-2012-1946 | (Use-after-free vulnerability in the nsINode::ReplaceOrInsertBefore fun ...) | corrigido | 10.0.5esr-1 |
| CVE-2012-1945 | (Mozilla Firefox 4.x through 12.0, Firefox ESR 10.x before 10.0.5, Thun ...) | corrigido | 10.0.5esr-1 |
| CVE-2012-1944 | (The Content Security Policy (CSP) implementation in Mozilla Firefox 4. ...) | corrigido | 10.0.5esr-1 |
| CVE-2012-1943 | (Untrusted search path vulnerability in Updater.exe in the Windows Upda ...) | não afetado | <not-affected> (windows-specific) |
| CVE-2012-1942 | (The Mozilla Updater and Windows Updater Service in Mozilla Firefox 12. ...) | não afetado | <not-affected> (windows-specific) |
| CVE-2012-1941 | (Heap-based buffer overflow in the nsHTMLReflowState::CalculateHypothet ...) | corrigido | 10.0.5esr-1 |
| CVE-2012-1940 | (Use-after-free vulnerability in the nsFrameList::FirstChild function i ...) | corrigido | 10.0.5esr-1 |
| CVE-2012-1939 | (jsinfer.cpp in Mozilla Firefox ESR 10.x before 10.0.5 and Thunderbird ...) | corrigido | 10.0.5esr-1 |
| CVE-2012-1938 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects iceweasel from experimental) |
| CVE-2012-1937 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0.5esr-1 |
| CVE-2012-0479 | (Mozilla Firefox 4.x through 11.0, Firefox ESR 10.x before 10.0.4, Thun ...) | corrigido | 10.0.4esr-1 |
| CVE-2012-0478 | (The texImage2D implementation in the WebGL subsystem in Mozilla Firefo ...) | corrigido | 10.0.4esr-1 |
| CVE-2012-0477 | (Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox ...) | corrigido | 10.0.4esr-1 |
| CVE-2012-0475 | (Mozilla Firefox 4.x through 11.0, Thunderbird 5.0 through 11.0, and Se ...) | corrigido | 12.0-1 (low; bug #703071) |
| CVE-2012-0474 | (Cross-site scripting (XSS) vulnerability in the docshell implementatio ...) | corrigido | 10.0.4esr-1 |
| CVE-2012-0473 | (The WebGLBuffer::FindMaxUshortElement function in Mozilla Firefox 4.x ...) | corrigido | 10.0.4esr-1 |
| CVE-2012-0472 | (The cairo-dwrite implementation in Mozilla Firefox 4.x through 11.0, F ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2012-0471 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x throug ...) | corrigido | 10.0.4esr-1 |
| CVE-2012-0470 | (Heap-based buffer overflow in the nsSVGFEDiffuseLightingElement::Light ...) | corrigido | 10.0.4esr-1 |
| CVE-2012-0469 | (Use-after-free vulnerability in the mozilla::dom::indexedDB::IDBKeyRan ...) | corrigido | 10.0.4esr-1 |
| CVE-2012-0468 | (The browser engine in Mozilla Firefox 4.x through 11.0, Thunderbird 5. ...) | não afetado | <not-affected> (Only affects Firefox 11 and above) |
| CVE-2012-0467 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0.4esr-1 |
| CVE-2012-0464 | (Use-after-free vulnerability in the browser engine in Mozilla Firefox ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0463 | (The nsWindow implementation in the browser engine in Mozilla Firefox b ...) | não afetado | <not-affected> (Only affects Firefox Mobile on Android) |
| CVE-2012-0462 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0461 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0460 | (Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thun ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0459 | (The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0458 | (Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x b ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0457 | (Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetwee ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0456 | (The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4. ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0455 | (Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x b ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0454 | (Use-after-free vulnerability in Mozilla Firefox 4.x through 10.0, Fire ...) | não afetado | <not-affected> (Only affects Firefox on Windows) |
| CVE-2012-0452 | (Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1, Th ...) | corrigido | 10.0.1-1 |
| CVE-2012-0451 | (CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Fire ...) | corrigido | 10.0.3esr-1 |
| CVE-2012-0450 | (Mozilla Firefox 4.x through 9.0 and SeaMonkey before 2.7 on Linux and ...) | corrigido | 10.0-1 |
| CVE-2012-0449 | (Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before ...) | corrigido | 10.0-1 |
| CVE-2012-0447 | (Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaM ...) | corrigido | 10.0-1 |
| CVE-2012-0446 | (Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox ...) | corrigido | 10.0-1 |
| CVE-2012-0445 | (Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaM ...) | corrigido | 10.0-1 |
| CVE-2012-0444 | (Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before ...) | corrigido | 10.0-1 |
| CVE-2012-0443 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0-1 |
| CVE-2012-0442 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 10.0-1 |
| CVE-2011-4688 | (Mozilla Firefox 8.0.1 and earlier does not prevent capture of data abo ...) | removido/último | <removed> (unimportant) |
| CVE-2011-3866 | (Mozilla Firefox before 7.0 and SeaMonkey before 2.4 do not properly re ...) | corrigido | 7.0-1 |
| CVE-2011-3671 | (Use-after-free vulnerability in the nsHTMLSelectElement function in ns ...) | corrigido | 9.0-1 |
| CVE-2011-3670 | (Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before ...) | corrigido | 7.0-1 |
| CVE-2011-3666 | (Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS ...) | não afetado | <not-affected> (MacOS specific) |
| CVE-2011-3665 | (Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaM ...) | corrigido | 9.0-1 |
| CVE-2011-3664 | (Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey befo ...) | não afetado | <not-affected> (MacOS specific) |
| CVE-2011-3663 | (Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 through 8.0, and SeaM ...) | corrigido | 9.0-1 |
| CVE-2011-3661 | (YARR, as used in Mozilla Firefox 4.x through 8.0, Thunderbird 5.0 thro ...) | corrigido | 9.0-1 |
| CVE-2011-3660 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 9.0-1 |
| CVE-2011-3659 | (Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x ...) | corrigido | 10.0-1 |
| CVE-2011-3658 | (The SVG implementation in Mozilla Firefox 8.0, Thunderbird 8.0, and Se ...) | corrigido | 9.0-1 |
| CVE-2011-3656 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6 ...) | corrigido | 4.0-1 |
| CVE-2011-3655 | (Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perfor ...) | corrigido | 8.0-1 |
| CVE-2011-3654 | (The browser engine in Mozilla Firefox before 8.0 and Thunderbird befor ...) | corrigido | 8.0-1 |
| CVE-2011-3653 | (Mozilla Firefox before 8.0 and Thunderbird before 8.0 on Mac OS X do n ...) | não afetado | <not-affected> (MacOS X-specific) |
| CVE-2011-3652 | (The browser engine in Mozilla Firefox before 8.0 and Thunderbird befor ...) | corrigido | 8.0-1 |
| CVE-2011-3651 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 8.0-1 |
| CVE-2011-3650 | (Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird befo ...) | corrigido | 8.0-1 |
| CVE-2011-3649 | (Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) A ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2011-3648 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6 ...) | corrigido | 8.0-1 |
| CVE-2011-3647 | (The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird ...) | corrigido | 7.0-1 |
| CVE-2011-3389 | (The SSL protocol, as used in certain configurations in Microsoft Windo ...) | não afetado | <not-affected> (Vulnerable code not present) |
| CVE-2011-3232 | (YARR, as used in Mozilla Firefox before 7.0, Thunderbird before 7.0, a ...) | corrigido | 7.0-1 |
| CVE-2011-3079 | (The Inter-process Communication (IPC) implementation in Google Chrome ...) | não afetado | <not-affected> (Only affects Firefox on Windows) |
| CVE-2011-3062 | (Off-by-one error in the OpenType Sanitizer in Google Chrome before 18. ...) | corrigido | 10.0.4esr-1 |
| CVE-2011-3005 | (Use-after-free vulnerability in Mozilla Firefox 4.x through 6, Thunder ...) | corrigido | 7.0-1 |
| CVE-2011-3004 | (The JSSubScriptLoader in Mozilla Firefox 4.x through 6 and SeaMonkey b ...) | corrigido | 7.0-1 |
| CVE-2011-3003 | (Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attac ...) | corrigido | 7.0-1 |
| CVE-2011-3002 | (Almost Native Graphics Layer Engine (ANGLE), as used in Mozilla Firefo ...) | corrigido | 7.0-1 |
| CVE-2011-3001 | (Mozilla Firefox 4.x through 6, Thunderbird before 7.0, and SeaMonkey b ...) | corrigido | 7.0-1 |
| CVE-2011-3000 | (Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7. ...) | corrigido | 7.0-1 |
| CVE-2011-2999 | (Mozilla Firefox before 3.6.23 and 4.x through 5, Thunderbird before 6. ...) | corrigido | 7.0-1 |
| CVE-2011-2998 | (Integer underflow in Mozilla Firefox 3.6.x before 3.6.23 allows remote ...) | corrigido | 7.0-1 |
| CVE-2011-2997 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 7.0-1 |
| CVE-2011-2996 | (Unspecified vulnerability in the plugin API in Mozilla Firefox 3.6.x b ...) | não afetado | <not-affected> (Only affects MacOS) |
| CVE-2011-2995 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 7.0-1 |
| CVE-2011-2993 | (The implementation of digital signatures for JAR files in Mozilla Fire ...) | corrigido | 6.0-1 |
| CVE-2011-2992 | (The Ogg reader in the browser engine in Mozilla Firefox 4.x through 5, ...) | corrigido | 6.0-1 |
| CVE-2011-2991 | (The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x bef ...) | corrigido | 6.0-1 |
| CVE-2011-2990 | (The implementation of Content Security Policy (CSP) violation reports ...) | corrigido | 6.0-1 |
| CVE-2011-2989 | (The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x bef ...) | corrigido | 6.0-1 |
| CVE-2011-2988 | (Buffer overflow in an unspecified string class in the WebGL shader imp ...) | corrigido | 6.0-1 |
| CVE-2011-2987 | (Heap-based buffer overflow in Almost Native Graphics Layer Engine (ANG ...) | corrigido | 6.0-1 |
| CVE-2011-2986 | (Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x bef ...) | não afetado | <not-affected> (Only affects Windows) |
| CVE-2011-2985 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 6.0-1 |
| CVE-2011-2984 | (Mozilla Firefox before 3.6.20, SeaMonkey 2.x, Thunderbird 3.x before 3 ...) | corrigido | 6.0-1 |
| CVE-2011-2983 | (Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, ...) | corrigido | 6.0-1 |
| CVE-2011-2982 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 6.0-1 |
| CVE-2011-2981 | (The event-management implementation in Mozilla Firefox before 3.6.20, ...) | corrigido | 6.0-1 |
| CVE-2011-2980 | (Untrusted search path vulnerability in the ThinkPadSensor::Startup fun ...) | não afetado | <not-affected> (Only affects Windows) |
| CVE-2011-2605 | (CRLF injection vulnerability in the nsCookieService::SetCookieStringIn ...) | corrigido | 3.5.19-3 |
| CVE-2011-2598 | (The WebGL implementation in Mozilla Firefox 4.x allows remote attacker ...) | não afetado | <not-affected> (Only affects Firefox 4.0, not yet in unstable) |
| CVE-2011-2378 | (The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird ...) | corrigido | 6.0-1 |
| CVE-2011-2377 | (Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird befor ...) | não afetado | <not-affected> (Was already fixed as CVE-2010-1201 for Firefox < 3.6) |
| CVE-2011-2376 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.19-3 |
| CVE-2011-2375 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 5.0, not yet in unstable) |
| CVE-2011-2374 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.19-3 |
| CVE-2011-2373 | (Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x ...) | corrigido | 3.5.19-3 |
| CVE-2011-2372 | (Mozilla Firefox before 3.6.23 and 4.x through 6, Thunderbird before 7. ...) | corrigido | 7.0-1 |
| CVE-2011-2371 | (Integer overflow in the Array.reduceRight method in Mozilla Firefox be ...) | corrigido | 3.5.19-3 |
| CVE-2011-2370 | (Mozilla Firefox before 5.0 does not properly enforce the whitelist for ...) | corrigido | 5.0-1 |
| CVE-2011-2369 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox 4.x throug ...) | não afetado | <not-affected> (Only affects Firefox >= 4.0, not yet in unstable) |
| CVE-2011-2368 | (The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not ...) | não afetado | <not-affected> (Only affects Firefox >= 4.0, not yet in unstable) |
| CVE-2011-2367 | (The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not ...) | não afetado | <not-affected> (Only affects Firefox >= 4.0, not yet in unstable) |
| CVE-2011-2366 | (Mozilla Gecko before 5.0, as used in Firefox before 5.0 and Thunderbir ...) | não afetado | <not-affected> (Only affects Firefox >= 4.0, not yet in unstable) |
| CVE-2011-2365 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6 ...) | corrigido | 3.5.19-3 |
| CVE-2011-2364 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6 ...) | não afetado | <not-affected> (Only affects Firefox >= 3.6) |
| CVE-2011-2363 | (Use-after-free vulnerability in the nsSVGPointList::AppendElement func ...) | corrigido | 3.5.19-3 |
| CVE-2011-2362 | (Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonke ...) | corrigido | 3.5.19-3 |
| CVE-2011-1712 | (The txXPathNodeUtils::getXSLTId function in txMozillaXPathTreeWalker.c ...) | corrigido | 4.0.1-1 (unimportant) |
| CVE-2011-1202 | (The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 a ...) | corrigido | 3.5.19-1 |
| CVE-2011-1187 | (Google Chrome before 10.0.648.127 allows remote attackers to bypass th ...) | corrigido | 12.0-1 (bug #703071) |
| CVE-2011-0085 | (Use-after-free vulnerability in the nsXULCommandDispatcher function in ...) | corrigido | 3.5.19-3 |
| CVE-2011-0084 | (The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox be ...) | corrigido | 6.0-1 |
| CVE-2011-0083 | (Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem func ...) | corrigido | 3.5.19-3 |
| CVE-2011-0082 | (The X.509 certificate validation functionality in Mozilla Firefox 4.0. ...) | removido/último | <removed> (unimportant; bug #627552) |
| CVE-2011-0081 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6 ...) | não afetado | <not-affected> (Only affects Firefox 4.0/3.6, not yet in unstable) |
| CVE-2011-0080 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.19-1 |
| CVE-2011-0079 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 4.0, not yet in unstable) |
| CVE-2011-0078 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | corrigido | 3.5.19-1 |
| CVE-2011-0077 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | corrigido | 3.5.19-1 |
| CVE-2011-0076 | (Unspecified vulnerability in the Java Embedding Plugin (JEP) in Mozill ...) | não afetado | <not-affected> (Only affects MacOS X) |
| CVE-2011-0075 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | corrigido | 3.5.19-1 |
| CVE-2011-0074 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | corrigido | 3.5.19-1 |
| CVE-2011-0073 | (Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey b ...) | corrigido | 3.5.19-1 |
| CVE-2011-0072 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | corrigido | 3.5.19-1 |
| CVE-2011-0071 | (Directory traversal vulnerability in Mozilla Firefox before 3.5.19 and ...) | corrigido | 3.5.19-1 |
| CVE-2011-0070 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | corrigido | 3.5.19-1 |
| CVE-2011-0069 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | corrigido | 3.5.19-1 |
| CVE-2011-0069 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | não afetado | <not-affected> (Only affects Firefox 4.0, not yet in unstable) |
| CVE-2011-0067 | (Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey b ...) | corrigido | 3.5.19-1 |
| CVE-2011-0066 | (Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6. ...) | corrigido | 3.5.19-1 |
| CVE-2011-0065 | (Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6. ...) | corrigido | 3.5.19-1 |
| CVE-2011-0062 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 3.6, not yet in unstable) |
| CVE-2011-0061 | (Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird be ...) | não afetado | <not-affected> (Only affects Firefox 3.6, not yet in unstable) |
| CVE-2011-0059 | (Cross-site request forgery (CSRF) vulnerability in Mozilla Firefox bef ...) | corrigido | 3.5.17-1 |
| CVE-2011-0058 | (Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6. ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2011-0057 | (Use-after-free vulnerability in the Web Workers implementation in Mozi ...) | corrigido | 3.5.17-1 |
| CVE-2011-0056 | (Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5 ...) | corrigido | 3.5.17-1 |
| CVE-2011-0055 | (Use-after-free vulnerability in the JSON.stringify method in js3250.dl ...) | corrigido | 3.5.17-1 |
| CVE-2011-0054 | (Buffer overflow in the JavaScript engine in Mozilla Firefox before 3.5 ...) | corrigido | 3.5.17-1 |
| CVE-2011-0053 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.17-1 |
| CVE-2011-0051 | (Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey b ...) | corrigido | 3.5.17-1 |
| CVE-2010-5074 | (The layout engine in Mozilla Firefox before 4.0, Thunderbird before 3. ...) | corrigido | 4.0-1 (unimportant) |
| CVE-2010-3778 | (Unspecified vulnerability in Mozilla Firefox 3.5.x before 3.5.16, Thun ...) | corrigido | 3.5.16-1 |
| CVE-2010-3777 | (Unspecified vulnerability in Mozilla Firefox 3.6.x before 3.6.13 and T ...) | não afetado | <not-affected> (Only affects Firefox 3.6, which is only in experimental) |
| CVE-2010-3776 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.16-1 |
| CVE-2010-3775 | (Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey b ...) | corrigido | 3.5.16-1 |
| CVE-2010-3774 | (The NS_SecurityCompareURIs function in netwerk/base/public/nsNetUtil.h ...) | corrigido | 3.5.16-1 |
| CVE-2010-3773 | (Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey b ...) | corrigido | 3.5.16-1 |
| CVE-2010-3772 | (Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey b ...) | corrigido | 3.5.16-1 |
| CVE-2010-3771 | (Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey b ...) | corrigido | 3.5.16-1 |
| CVE-2010-3770 | (Multiple cross-site scripting (XSS) vulnerabilities in the rendering e ...) | corrigido | 3.5.16-1 |
| CVE-2010-3769 | (The line-breaking implementation in Mozilla Firefox before 3.5.16 and ...) | corrigido | 3.5.16-1 |
| CVE-2010-3768 | (Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, Thunderbird bef ...) | corrigido | 3.5.16-1 |
| CVE-2010-3767 | (Integer overflow in the NewIdArray function in Mozilla Firefox before ...) | corrigido | 3.5.16-1 |
| CVE-2010-3766 | (Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6. ...) | corrigido | 3.5.16-1 |
| CVE-2010-3765 | (Mozilla Firefox 3.5.x through 3.5.14 and 3.6.x through 3.6.11, Thunder ...) | corrigido | 3.5.15-1 |
| CVE-2010-3183 | (The LookupGetterOrSetter function in js3250.dll in Mozilla Firefox bef ...) | corrigido | 3.5.14-1 |
| CVE-2010-3182 | (A certain application-launch script in Mozilla Firefox before 3.5.14 a ...) | não afetado | <not-affected> (run-mozilla.sh not used) |
| CVE-2010-3181 | (Untrusted search path vulnerability in Mozilla Firefox before 3.5.14 a ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2010-3180 | (Use-after-free vulnerability in the nsBarProp function in Mozilla Fire ...) | corrigido | 3.5.14-1 |
| CVE-2010-3179 | (Stack-based buffer overflow in the text-rendering functionality in Moz ...) | corrigido | 3.5.14-1 |
| CVE-2010-3178 | (Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird bef ...) | corrigido | 3.5.14-1 |
| CVE-2010-3177 | (Multiple cross-site scripting (XSS) vulnerabilities in the Gopher pars ...) | corrigido | 3.5.14-1 |
| CVE-2010-3176 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.14-1 |
| CVE-2010-3175 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | não afetado | <not-affected> (Only affects Firefox 3.6, which is only in experimental) |
| CVE-2010-3174 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | corrigido | 3.5.14-1 |
| CVE-2010-3169 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.12-1 |
| CVE-2010-3168 | (Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird befo ...) | corrigido | 3.5.12-1 |
| CVE-2010-3167 | (The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3. ...) | corrigido | 3.5.12-1 |
| CVE-2010-3166 | (Heap-based buffer overflow in the nsTextFrameUtils::TransformText func ...) | corrigido | 3.5.12-1 |
| CVE-2010-3131 | (Untrusted search path vulnerability in Mozilla Firefox before 3.5.12 a ...) | não afetado | <not-affected> (Only affects Windows port) |
| CVE-2010-2770 | (Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird befo ...) | não afetado | <not-affected> (The vulnerability is MacOS-specific) |
| CVE-2010-2769 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5 ...) | corrigido | 3.5.12-1 |
| CVE-2010-2768 | (Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird befo ...) | corrigido | 3.5.12-1 |
| CVE-2010-2767 | (The navigator.plugins implementation in Mozilla Firefox before 3.5.12 ...) | corrigido | 3.5.12-1 |
| CVE-2010-2766 | (The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3. ...) | corrigido | 3.5.12-1 |
| CVE-2010-2765 | (Integer overflow in the FRAMESET element implementation in Mozilla Fir ...) | corrigido | 3.5.12-1 |
| CVE-2010-2764 | (Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird befo ...) | corrigido | 3.5.12-1 |
| CVE-2010-2763 | (The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) ...) | corrigido | 3.5.12-1 |
| CVE-2010-2762 | (The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) ...) | não afetado | <not-affected> (Only affects 3.6, only in experimental) |
| CVE-2010-2760 | (Use-after-free vulnerability in the nsTreeSelection function in Mozill ...) | corrigido | 3.5.12-1 |
| CVE-2010-2755 | (layout/generic/nsObjectFrame.cpp in Mozilla Firefox 3.6.7 does not pro ...) | não afetado | <not-affected> (Only exploitable in Firefox 3.6.x and above) |
| CVE-2010-2754 | (dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 an ...) | corrigido | 3.5.11-2 |
| CVE-2010-2753 | (Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x befo ...) | corrigido | 3.5.11-2 |
| CVE-2010-2752 | (Integer overflow in an array class in Mozilla Firefox 3.5.x before 3.5 ...) | corrigido | 3.5.11-2 |
| CVE-2010-2751 | (The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocS ...) | corrigido | 3.5.11-2 |
| CVE-2010-1585 | (The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFrag ...) | corrigido | 3.5.17-1 |
| CVE-2010-1215 | (Mozilla Firefox 3.6.x before 3.6.7 and Thunderbird 3.1.x before 3.1.1 ...) | não afetado | <not-affected> (Only affects Firefox 3.6.x and above) |
| CVE-2010-1214 | (Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x befo ...) | corrigido | 3.5.11-2 |
| CVE-2010-1213 | (The importScripts Web Worker method in Mozilla Firefox 3.5.x before 3. ...) | corrigido | 3.5.11-2 |
| CVE-2010-1212 | (js/src/jstracer.cpp in the browser engine in Mozilla Firefox 3.6.x bef ...) | não afetado | <not-affected> (Only affects Firefox 3.6.x and above) |
| CVE-2010-1211 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.11-2 |
| CVE-2010-1210 | (intl/uconv/util/nsUnicodeDecodeHelper.cpp in Mozilla Firefox before 3. ...) | não afetado | <not-affected> (Only affects 1.9.2 and above) |
| CVE-2010-1209 | (Use-after-free vulnerability in the NodeIterator implementation in Moz ...) | corrigido | 3.5.11-2 |
| CVE-2010-1207 | (Mozilla Firefox before 3.6.7 and Thunderbird before 3.1.1 do not prope ...) | não afetado | <not-affected> (Only affects 1.9.2 and above) |
| CVE-2010-1206 | (The startDocumentLoad function in browser/base/content/browser.js in M ...) | corrigido | 3.5.11-1 |
| CVE-2010-1203 | (The JavaScript engine in Mozilla Firefox 3.6.x before 3.6.4 allow remo ...) | não afetado | <not-affected> (Only affects Firefox 3.6, i.e xulrunner 1.9.2) |
| CVE-2010-1202 | (Multiple unspecified vulnerabilities in the JavaScript engine in Mozil ...) | corrigido | 3.5.11-2 |
| CVE-2010-1201 | (Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5 ...) | corrigido | 3.5.11-2 |
| CVE-2010-1200 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.11-2 |
| CVE-2010-1199 | (Integer overflow in the XSLT node sorting implementation in Mozilla Fi ...) | corrigido | 3.5.11-2 |
| CVE-2010-1198 | (Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 an ...) | corrigido | 3.5.11-2 |
| CVE-2010-1197 | (Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMon ...) | corrigido | 3.5.11-2 |
| CVE-2010-1196 | (Integer overflow in the nsGenericDOMDataNode::SetTextInternal function ...) | corrigido | 3.5.11-2 |
| CVE-2010-0654 | (Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbir ...) | corrigido | 3.5.11-2 |
| CVE-2010-0183 | (Use-after-free vulnerability in the nsCycleCollector::MarkRoots functi ...) | corrigido | 3.5.11-2 |
| CVE-2010-0182 | (The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6 ...) | corrigido | 3.5.11-2 |
| CVE-2010-0181 | (Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey bef ...) | corrigido | 3.5.11-2 |
| CVE-2010-0179 | (Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey be ...) | corrigido | 3.5.11-2 |
| CVE-2010-0178 | (Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3. ...) | corrigido | 3.5.11-2 |
| CVE-2010-0177 | (Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3. ...) | corrigido | 3.5.11-2 |
| CVE-2010-0176 | (Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3. ...) | corrigido | 3.5.11-2 |
| CVE-2010-0175 | (Use-after-free vulnerability in the nsTreeSelection implementation in ...) | corrigido | 3.5.11-2 |
| CVE-2010-0174 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.11-2 |
| CVE-2010-0173 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.11-2 |
| CVE-2010-0172 | (toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the as ...) | não afetado | <not-affected> (vulnerable code introduced in firefox 3.6) |
| CVE-2010-0171 | (Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x bef ...) | corrigido | 3.5.11-2 |
| CVE-2010-0170 | (Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected w ...) | não afetado | <not-affected> (vulnerable code introduced in firefox 3.6) |
| CVE-2010-0169 | (The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoade ...) | corrigido | 3.5.11-2 |
| CVE-2010-0168 | (The nsDocument::MaybePreLoadImage function in content/base/src/nsDocum ...) | não afetado | <not-affected> (vulnerable code introduced in firefox 3.6) |
| CVE-2010-0167 | (The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x befor ...) | corrigido | 3.5.11-2 |
| CVE-2010-0166 | (The gfxTextRun::SanitizeGlyphRuns function in gfx/thebes/src/gfxFont.c ...) | não afetado | <not-affected> (vulnerable code introduced in firefox 3.6) |
| CVE-2010-0165 | (The TraceRecorder::traverseScopeChain function in js/src/jstracer.cpp ...) | não afetado | <not-affected> (vulnerable code introduced in firefox 3.6) |
| CVE-2010-0164 | (Use-after-free vulnerability in the imgContainer::InternalAddFrameHelp ...) | não afetado | <not-affected> (vulnerable code introduced in firefox 3.6) |
| CVE-2010-0162 | (Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMon ...) | corrigido | 3.5.11-2 |
| CVE-2010-0161 | (The nsAuthSSPI::Unwrap function in extensions/auth/nsAuthSSPI.cpp in M ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2010-0160 | (The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 an ...) | corrigido | 3.5.11-2 |
| CVE-2010-0159 | (The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x be ...) | corrigido | 3.5.11-2 |
| CVE-2009-4630 | (Mozilla Necko, as used in Firefox, SeaMonkey, and other applications, ...) | corrigido | 3.5.11-2 |
| CVE-2009-4629 | (Mozilla Necko, as used in Thunderbird 3.0.1, SeaMonkey, and other appl ...) | corrigido | 3.5.11-2 |
| CVE-2009-3988 | (Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMon ...) | corrigido | 3.5.11-2 |
| CVE-2009-3986 | (Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey be ...) | corrigido | 3.5.11-2 |
| CVE-2009-3985 | (Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey be ...) | corrigido | 3.5.11-2 |
| CVE-2009-3984 | (Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey be ...) | corrigido | 3.5.11-2 |
| CVE-2009-3983 | (Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey be ...) | corrigido | 3.5.11-2 |
| CVE-2009-3981 | (Unspecified vulnerability in the browser engine in Mozilla Firefox bef ...) | corrigido | 3.5.11-2 |
| CVE-2009-3980 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.11-2 |
| CVE-2009-3979 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 3.5.11-2 |
| CVE-2009-3720 | (The updatePosition function in lib/xmltok_impl.c in libexpat in Expat ...) | não afetado | <not-affected> (uses xulrunner; bug #560943) |
| CVE-2009-3560 | (The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, a ...) | não afetado | <not-affected> (uses xulrunner; bug #560943) |
| CVE-2009-3389 | (Integer overflow in libtheora in Xiph.Org Theora before 1.1, as used i ...) | corrigido | 3.5.11-2 |
| CVE-2009-3388 | (liboggplay in Mozilla Firefox 3.5.x before 3.5.6 and SeaMonkey before ...) | corrigido | 3.5.11-2 |
| CVE-2009-3385 | (The mail component in Mozilla SeaMonkey before 1.1.19 does not properl ...) | corrigido | 3.5.11-2 |
| CVE-2009-3079 | (Unspecified vulnerability in Mozilla Firefox before 3.0.14, and 3.5.x ...) | corrigido | 3.0.14-1 |
| CVE-2009-3014 | (Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; S ...) | removido/último | <removed> (unimportant) |
| CVE-2009-3010 | (Mozilla Firefox 3.0.13 and earlier, 3.5, 3.6 a1 pre, and 3.7 a1 pre; S ...) | removido/último | <removed> (unimportant) |
| CVE-2009-2535 | (Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and T ...) | corrigido | 3.0.5-1 (unimportant) |
| CVE-2009-1310 | (Cross-site scripting (XSS) vulnerability in the MozSearch plugin imple ...) | corrigido | 3.0.9-1 |
| CVE-2009-0821 | (Mozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause ...) | removido/último | <removed> (unimportant) |
| CVE-2009-0777 | (Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonk ...) | corrigido | 3.0.7-1 (low; bug #576466) |
| CVE-2009-0776 | (nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0. ...) | corrigido | 3.0 |
| CVE-2009-0774 | (The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird ...) | corrigido | 3.0 |
| CVE-2009-0772 | (The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird ...) | corrigido | 3.0 |
| CVE-2009-0358 | (Mozilla Firefox 3.x before 3.0.6 does not properly implement the (1) n ...) | corrigido | 3.0 |
| CVE-2009-0357 | (Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not proper ...) | corrigido | 3.0 |
| CVE-2009-0356 | (Mozilla Firefox before 3.0.6 and SeaMonkey do not block links to the ( ...) | corrigido | 3.0 |
| CVE-2009-0355 | (components/sessionstore/src/nsSessionStore.js in Mozilla Firefox befor ...) | corrigido | 3.0.6-1 |
| CVE-2009-0354 | (Cross-domain vulnerability in js/src/jsobj.cpp in Mozilla Firefox 3.x ...) | corrigido | 3.0 |
| CVE-2009-0353 | (Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunder ...) | corrigido | 3.0 |
| CVE-2009-0352 | (Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0 ...) | corrigido | 3.0 |
| CVE-2009-0071 | (Mozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is e ...) | removido/último | <removed> (unimportant) |
| CVE-2008-7293 | (Mozilla Firefox before 4 cannot properly restrict modifications to coo ...) | corrigido | 4.0-1 (unimportant) |
| CVE-2008-5715 | (Mozilla Firefox 3.0.5 on Windows Vista allows remote attackers to caus ...) | removido/último | <removed> (unimportant) |
| CVE-2008-5513 | (Unspecified vulnerability in the session-restore feature in Mozilla Fi ...) | corrigido | 3.0.5-1 |
| CVE-2008-5512 | (Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0 ...) | corrigido | 3.0.5-1 |
| CVE-2008-5511 | (Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird ...) | corrigido | 3.0.5-1 |
| CVE-2008-5510 | (The CSS parser in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0. ...) | corrigido | 3.0.5-1 |
| CVE-2008-5508 | (Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird ...) | corrigido | 3.0.5-1 |
| CVE-2008-5507 | (Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird ...) | corrigido | 3.0.5-1 |
| CVE-2008-5506 | (Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird ...) | corrigido | 3.0.5-1 |
| CVE-2008-5505 | (Mozilla Firefox 3.x before 3.0.5 allows remote attackers to bypass int ...) | corrigido | 3.0.5-1 |
| CVE-2008-5504 | (Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arb ...) | corrigido | 3.0.1-1 |
| CVE-2008-5503 | (The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.1 ...) | corrigido | 3.0.1-1 |
| CVE-2008-5502 | (The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x ...) | corrigido | 3.0.5-1 |
| CVE-2008-5501 | (The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x ...) | corrigido | 3.0.5-1 |
| CVE-2008-5500 | (The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2 ...) | corrigido | 3.0.5-1 |
| CVE-2008-5052 | (The AppendAttributeValue function in the JavaScript engine in Mozilla ...) | corrigido | 3.0.4-1 |
| CVE-2008-5024 | (Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunder ...) | corrigido | 3.0.4-1 |
| CVE-2008-5023 | (Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1 ...) | corrigido | 3.0.4-1 |
| CVE-2008-5022 | (The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x befor ...) | corrigido | 3.0.4-1 |
| CVE-2008-5021 | (nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.1 ...) | corrigido | 3.0.4-1 |
| CVE-2008-5019 | (The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2. ...) | corrigido | 3.0.4-1 |
| CVE-2008-5018 | (The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x ...) | corrigido | 3.0.4-1 |
| CVE-2008-5017 | (Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Moz ...) | corrigido | 3.0.4-1 |
| CVE-2008-5016 | (The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x ...) | corrigido | 3.0.4-1 |
| CVE-2008-5015 | (Mozilla Firefox 3.x before 3.0.4 assigns chrome privileges to a file: ...) | corrigido | 3.0.4-1 |
| CVE-2008-5014 | (jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0 ...) | corrigido | 3.0.4-1 |
| CVE-2008-5013 | (Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do ...) | corrigido | 3.0.1-1 |
| CVE-2008-5012 | (Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, ...) | corrigido | 3.0.1-1 |
| CVE-2008-4723 | (Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox ...) | não afetado | <not-affected> |
| CVE-2008-4582 | (Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and ...) | corrigido | 3.0.4-1 |
| CVE-2008-4324 | (The user interface event dispatcher in Mozilla Firefox 3.0.3 on Window ...) | removido/último | <removed> (unimportant) |
| CVE-2008-4069 | (The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey befor ...) | corrigido | 3.0.1-1 |
| CVE-2008-4068 | (Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 a ...) | corrigido | 3.0.3-1 |
| CVE-2008-4067 | (Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 a ...) | corrigido | 3.0.3-1 |
| CVE-2008-4066 | (Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows r ...) | corrigido | 3.0.1-1 |
| CVE-2008-4065 | (Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird befo ...) | corrigido | 3.0.3-1 |
| CVE-2008-4064 | (Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0 ...) | corrigido | 3.0.3-1 |
| CVE-2008-4063 | (Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0 ...) | corrigido | 3.0.3-1 |
| CVE-2008-4062 | (Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.1 ...) | corrigido | 3.0.3-1 |
| CVE-2008-4061 | (Integer overflow in the MathML component in Mozilla Firefox before 2.0 ...) | corrigido | 3.0.3-1 |
| CVE-2008-4060 | (Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird befo ...) | corrigido | 3.0.3-1 |
| CVE-2008-4059 | (The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remo ...) | corrigido | 3.0.3-1 |
| CVE-2008-4058 | (The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x bef ...) | corrigido | 3.0.3-1 |
| CVE-2008-3837 | (Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey be ...) | corrigido | 3.0.3-1 (low) |
| CVE-2008-3836 | (feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers ...) | corrigido | 3.0.1-1 |
| CVE-2008-3835 | (The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox befor ...) | corrigido | 3.0.1-1 |
| CVE-2008-3444 | (The content layout component in Mozilla Firefox 3.0 and 3.0.1 allows r ...) | removido/último | <removed> (unimportant) |
| CVE-2008-3198 | (Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arb ...) | corrigido | 3.0.1-1 (low) |
| CVE-2008-2934 | (Mozilla Firefox 3 before 3.0.1 on Mac OS X allows remote attackers to ...) | não afetado | <not-affected> (MacOS-specific) |
| CVE-2008-2933 | (Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' ...) | corrigido | 3.0.1-1 (low) |
| CVE-2008-2811 | (The block reflow implementation in Mozilla Firefox before 2.0.0.15, Th ...) | corrigido | 3.0 |
| CVE-2008-2810 | (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not pro ...) | não afetado | <not-affected> (Windows-specific) |
| CVE-2008-2809 | (Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonk ...) | corrigido | 3.0 |
| CVE-2008-2808 | (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not pro ...) | corrigido | 3.0 |
| CVE-2008-2807 | (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not pro ...) | corrigido | 3.0 |
| CVE-2008-2806 | (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 on Mac OS ...) | não afetado | <not-affected> (MacOS-specific) |
| CVE-2008-2805 | (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remo ...) | corrigido | 3.0 |
| CVE-2008-2803 | (The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox befor ...) | corrigido | 3.0~b2-1 |
| CVE-2008-2802 | (Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and ...) | corrigido | 3.0~b2-1 |
| CVE-2008-2801 | (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not pro ...) | corrigido | 3.0~b2-1 |
| CVE-2008-2800 | (Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remo ...) | corrigido | 3.0~b2-1 |
| CVE-2008-2799 | (Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.1 ...) | corrigido | 3.0~b2-1 |
| CVE-2008-2798 | (Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.1 ...) | corrigido | 3.0~b2-1 |
| CVE-2008-2785 | (Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird befo ...) | corrigido | 3.0 (medium; bug #488358) |
| CVE-2008-2014 | (Mozilla Firefox 3.0 beta 5 allows remote attackers to cause a denial o ...) | removido/último | <removed> (unimportant) |
| CVE-2008-1380 | (The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird ...) | corrigido | 2.0.0.14-1 |
| CVE-2008-1241 | (GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMo ...) | corrigido | 2.0.0.13-1 |
| CVE-2008-1240 | (LiveConnect in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1. ...) | corrigido | 2.0.0.13-1 |
| CVE-2008-1238 | (Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when gener ...) | corrigido | 2.0.0.13-1 |
| CVE-2008-1237 | (Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.1 ...) | corrigido | 2.0.0.13-1 |
| CVE-2008-1236 | (Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.1 ...) | corrigido | 2.0.0.13-1 |
| CVE-2008-1235 | (Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderb ...) | corrigido | 2.0.0.13-1 |
| CVE-2008-1234 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0 ...) | corrigido | 2.0.0.13-1 |
| CVE-2008-1233 | (Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderb ...) | corrigido | 2.0.0.13-1 |
| CVE-2008-0594 | (Mozilla Firefox before 2.0.0.12 does not always display a web forgery ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0593 | (Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and Se ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0592 | (Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0591 | (Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does n ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0420 | (modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox befor ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0419 | (Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remo ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0418 | (Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0417 | (CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0416 | (Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0415 | (Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaM ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0414 | (Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0413 | (The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0412 | (The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird bef ...) | corrigido | 2.0.0.12-1 |
| CVE-2008-0367 | (Mozilla Firefox 2.0.0.11, 3.0b2, and possibly earlier versions, when p ...) | corrigido | 3.0 (low) |
| CVE-2008-0017 | (The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3 ...) | corrigido | 3.0.4-1 |
| CVE-2008-0016 | (Stack-based buffer overflow in the URL parsing implementation in Mozil ...) | corrigido | 3.0.1-1 |
| CVE-2007-6715 | (Mozilla Firefox allows remote attackers to cause a denial of service ( ...) | removido/último | <removed> (unimportant) |
| CVE-2007-6589 | (The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMon ...) | corrigido | 2.0.0.10-1 (medium) |
| CVE-2007-5960 | (Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 sets the Re ...) | corrigido | 2.0.0.10-1 |
| CVE-2007-5959 | (Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.1 ...) | corrigido | 2.0.0.10-1 |
| CVE-2007-5947 | (The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMon ...) | corrigido | 2.0.0.10-1 (low; bug #451624) |
| CVE-2007-5896 | (Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of s ...) | removido/último | <removed> (unimportant) |
| CVE-2007-5691 | (ParseFTPList.cpp in Mozilla Firefox 2.0.0.7 allows remote FTP servers ...) | corrigido | 2.0.0.8-1 (unimportant) |
| CVE-2007-5415 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox 2.0, when ...) | removido/último | <removed> (unimportant) |
| CVE-2007-5414 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0 ...) | corrigido | 2.0+dfsg-1 |
| CVE-2007-5341 | (Remote code execution in the Venkman script debugger in Mozilla Firefo ...) | corrigido | 2.0.0.8-1 |
| CVE-2007-5340 | (Multiple vulnerabilities in the Javascript engine in Mozilla Firefox b ...) | corrigido | 2.0.0.8-1 (high) |
| CVE-2007-5339 | (Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbir ...) | corrigido | 2.0.0.8-1 (high) |
| CVE-2007-5338 | (Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote ...) | corrigido | 2.0.0.8-1 |
| CVE-2007-5337 | (Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when runnin ...) | corrigido | 2.0.0.8-1 |
| CVE-2007-5335 | (Mozilla Firefox 2.0 before 2.0.0.8 allows remote attackers to obtain s ...) | corrigido | 2.0.0.8-1 (low) |
| CVE-2007-5334 | (Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the ...) | corrigido | 2.0.0.8-1 |
| CVE-2007-5045 | (Argument injection vulnerability in Apple QuickTime 7.1.5 and earlier, ...) | não afetado | <not-affected> (Only affects Firefox/Thunderbird on Windows) |
| CVE-2007-4879 | (Mozilla Firefox before Firefox 2.0.0.13, and SeaMonkey before 1.1.9, c ...) | corrigido | 2.0.0.13-1 (low; bug #444803) |
| CVE-2007-4841 | (Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMon ...) | não afetado | <not-affected> (windows only issue) |
| CVE-2007-4357 | (Mozilla Firefox 2.0.0.6 and earlier allows remote attackers to spoof t ...) | removido/último | <removed> (unimportant) |
| CVE-2007-4041 | (Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 ...) | corrigido | 2.0.0.6-1 |
| CVE-2007-4038 | (Argument injection vulnerability in Mozilla Firefox before 2.0.0.5, wh ...) | corrigido | 2.0.0.5-1 |
| CVE-2007-3845 | (Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x be ...) | corrigido | 2.0.0.6-1 (medium) |
| CVE-2007-3844 | (Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and ...) | corrigido | 2.0.0.6-1 (medium) |
| CVE-2007-3738 | (Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 ...) | corrigido | 2.0.0.5-1 (medium) |
| CVE-2007-3737 | (Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbi ...) | corrigido | 2.0.0.5-1 (high) |
| CVE-2007-3736 | (Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0 ...) | corrigido | 2.0.0.5-1 (high) |
| CVE-2007-3735 | (Multiple unspecified vulnerabilities in the JavaScript engine in Mozil ...) | corrigido | 2.0.0.5-1 (high) |
| CVE-2007-3734 | (Multiple unspecified vulnerabilities in the browser engine in Mozilla ...) | corrigido | 2.0.0.5-1 (high) |
| CVE-2007-3670 | (Argument injection vulnerability in Microsoft Internet Explorer, when ...) | não afetado | <not-affected> (Only affects Firefox/Thunderbird on Windows) |
| CVE-2007-3656 | (Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not pe ...) | corrigido | 2.0.0.5-1 (high) |
| CVE-2007-3511 | (The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12 ...) | corrigido | 2.0.0.8-1 (bug #438873; low) |
| CVE-2007-3285 | (Mozilla Firefox before 2.0.0.5, when run on Windows, allows remote att ...) | não afetado | <not-affected> (Affects only Firefox in Windows) |
| CVE-2007-3089 | (Mozilla Firefox before 2.0.0.5 does not prevent use of document.write ...) | corrigido | 2.0.0.5-1 (low; bug #427691) |
| CVE-2007-3074 | (Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read fi ...) | corrigido | 2.0.0.4-1 (low) |
| CVE-2007-3072 | (Directory traversal vulnerability in Mozilla Firefox before 2.0.0.4 on ...) | não afetado | <not-affected> (Only affects Windows versions of Firefox) |
| CVE-2007-2871 | (Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaM ...) | corrigido | 2.0.0.4-1 (low) |
| CVE-2007-2870 | (Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaM ...) | corrigido | 2.0.0.4-1 (medium) |
| CVE-2007-2869 | (The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12 ...) | corrigido | 2.0.0.4-1 |
| CVE-2007-2868 | (Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox ...) | corrigido | 2.0.0.4-1 (high) |
| CVE-2007-2867 | (Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5. ...) | corrigido | 2.0.0.4-1 (high) |
| CVE-2007-2671 | (Mozilla Firefox 2.0.0.3 allows remote attackers to cause a denial of s ...) | removido/último | <removed> (unimportant) |
| CVE-2007-2292 | (CRLF injection vulnerability in the Digest Authentication support for ...) | corrigido | 2.0.0.8-1 (low) |
| CVE-2007-2162 | ((1) Mozilla Firefox 2.0.0.3 and (2) GNU IceWeasel 2.0.0.3 allow remote ...) | removido/último | <removed> (unimportant) |
| CVE-2007-1970 | (Mozilla Firefox does not warn the user about HTTP elements on an HTTPS ...) | removido/último | <removed> (unimportant; bug #556267) |
| CVE-2007-1762 | (Mozilla Firefox 2.0.0.1 through 2.0.0.3 does not canonicalize URLs bef ...) | corrigido | 3.0.1-1 (unimportant; bug #445515) |
| CVE-2007-1736 | (Mozilla Firefox 2.0.0.3 does not check URLs embedded in (1) object or ...) | removido/último | <removed> (unimportant) |
| CVE-2007-1562 | (The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and ...) | corrigido | 2.0.0.3-1 (low) |
| CVE-2007-1362 | (Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaM ...) | corrigido | 2.0.0.4-1 (low) |
| CVE-2007-1256 | (Mozilla Firefox 2.0.0.2 allows remote attackers to spoof the address b ...) | removido/último | <removed> (unimportant) |
| CVE-2007-1116 | (The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI ...) | corrigido | 2.0.0.4-1 (low) |
| CVE-2007-1095 | (Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not prope ...) | corrigido | 2.0.0.8-1 (low; bug #445514) |
| CVE-2007-1092 | (Mozilla Firefox 1.5.0.9 and 2.0.0.1, and SeaMonkey before 1.0.8 allow ...) | corrigido | 2.0.0.2+dfsg-1 (low) |
| CVE-2007-1084 | (Mozilla Firefox 2.0.0.1 and earlier does not prompt users before savin ...) | removido/último | <removed> (unimportant; bug #556268) |
| CVE-2007-1004 | (Mozilla Firefox might allow remote attackers to conduct spoofing and p ...) | corrigido | 2.0.0.4-1 (low) |
| CVE-2007-0996 | (The child frames in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0 ...) | corrigido | 2.0.0.2+dfsg-1 (low) |
| CVE-2007-0995 | (Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey ...) | corrigido | 2.0.0.2+dfsg-1 (low) |
| CVE-2007-0994 | (A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x befor ...) | corrigido | 2.0.0.2+dfsg-2 (medium) |
| CVE-2007-0981 | (Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x befo ...) | corrigido | 2.0.0.1+dfsg-3 (bug #411192; high) |
| CVE-2007-0802 | (Mozilla Firefox 2.0.0.1 allows remote attackers to bypass the Phishing ...) | corrigido | 2.0.0.16-1 (low) |
| CVE-2007-0801 | (The nsExternalAppHandler::SetUpTempFile function in Mozilla Firefox 1. ...) | corrigido | 2.0.0.2+dfsg-1 (low) |
| CVE-2007-0800 | (Cross-zone vulnerability in Mozilla Firefox 1.5.0.9 considers blocked ...) | corrigido | 2.0.0.2+dfsg-1 (medium) |
| CVE-2007-0780 | (browser.js in Mozilla Firefox 1.5.x before 1.5.0.10 and 2.x before 2.0 ...) | corrigido | 2.0.0.2+dfsg-1 (medium) |
| CVE-2007-0779 | (GUI overlay vulnerability in Mozilla Firefox 1.5.x before 1.5.0.10 and ...) | corrigido | 2.0.0.2+dfsg-1 (low) |
| CVE-2007-0778 | (The page cache feature in Mozilla Firefox before 1.5.0.10 and 2.x befo ...) | corrigido | 2.0.0.2+dfsg-1 (low) |
| CVE-2007-0777 | (The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x befor ...) | corrigido | 2.0.0.2+dfsg-1 (high) |
| CVE-2007-0776 | (Heap-based buffer overflow in the _cairo_pen_init function in Mozilla ...) | corrigido | 2.0.0.2+dfsg-1 (high) |
| CVE-2007-0775 | (Multiple unspecified vulnerabilities in the layout engine in Mozilla F ...) | corrigido | 2.0.0.2+dfsg-1 (high) |
| CVE-2007-0009 | (Stack-based buffer overflow in the SSLv2 support in Mozilla Network Se ...) | corrigido | 2.0.0.2+dfsg-1 (low) |
| CVE-2007-0008 | (Integer underflow in the SSLv2 support in Mozilla Network Security Ser ...) | corrigido | 2.0.0.2+dfsg-1 (low) |
| CVE-2006-6971 | (Mozilla Firefox 2.0, possibly only when running on Windows, allows rem ...) | não afetado | <not-affected> (Windows only) |
| CVE-2006-6954 | (Flock beta 1 0.7 allows remote attackers to cause a denial of service ...) | removido/último | <removed> (unimportant) |
| CVE-2006-6585 | (The Extensions manager in Mozilla Firefox 2.0 does not properly popula ...) | corrigido | 2.0.0.1+dfsg-1 |
| CVE-2006-6507 | (Mozilla Firefox 2.0 before 2.0.0.1 allows remote attackers to bypass C ...) | corrigido | 2.0.0.1+dfsg-1 (high) |
| CVE-2006-6506 | (The "Feed Preview" feature in Mozilla Firefox 2.0 before 2.0.0.1 sends ...) | corrigido | 2.0.0.1+dfsg-1 (low) |
| CVE-2006-6504 | (Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, and SeaMonke ...) | corrigido | 2.0.0.1+dfsg-1 (high) |
| CVE-2006-6503 | (Mozilla Firefox 2.x before 2.0.0.1, 1.5.x before 1.5.0.9, Thunderbird ...) | corrigido | 2.0.0.1+dfsg-1 (high) |
| CVE-2006-6502 | (Use-after-free vulnerability in the LiveConnect bridge code for Mozill ...) | corrigido | 2.0.0.1+dfsg-1 (high) |
| CVE-2006-6501 | (Unspecified vulnerability in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x ...) | corrigido | 2.0.0.1+dfsg-1 (high) |
| CVE-2006-6500 | (Heap-based buffer overflow in Mozilla Firefox 2.x before 2.0.0.1, 1.5. ...) | não afetado | <not-affected> (windows only) |
| CVE-2006-6499 | (The js_dtoa function in Mozilla Firefox 2.x before 2.0.0.1, 1.5.x befo ...) | corrigido | 2.0.0.1+dfsg-1 (high) |
| CVE-2006-6498 | (Multiple unspecified vulnerabilities in the JavaScript engine for Mozi ...) | corrigido | 2.0.0.1+dfsg-1 (high) |
| CVE-2006-6497 | (Multiple unspecified vulnerabilities in the layout engine for Mozilla ...) | corrigido | 2.0.0.1+dfsg-1 (medium) |
| CVE-2006-6077 | (The (1) Password Manager in Mozilla Firefox 2.0, and 1.5.0.8 and earli ...) | corrigido | 2.0.0.2+dfsg-1 (high; bug #409220) |
| CVE-2006-5748 | (Multiple unspecified vulnerabilities in the JavaScript engine in Mozil ...) | corrigido | 2.0+dfsg-1 (high) |
| CVE-2006-5747 | (Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbi ...) | corrigido | 2.0+dfsg-1 (high) |
| CVE-2006-5633 | (Firefox 1.5.0.7 and 2.0, and Seamonkey 1.1b, allows remote attackers t ...) | removido/último | <removed> (unimportant) |
| CVE-2006-5464 | (Multiple unspecified vulnerabilities in the layout engine in Mozilla F ...) | corrigido | 2.0+dfsg-1 (low) |
| CVE-2006-5463 | (Unspecified vulnerability in Mozilla Firefox before 1.5.0.8, Thunderbi ...) | corrigido | 2.0+dfsg-1 (high) |
| CVE-2006-5462 | (Mozilla Network Security Service (NSS) library before 3.11.3, as used ...) | corrigido | 2.0+dfsg-1 (high) |
| CVE-2006-4310 | (Mozilla Firefox 1.5.0.6 allows remote attackers to cause a denial of s ...) | corrigido | 2.0+dfsg-1 |
| CVE-2006-2894 | (Mozilla Firefox 1.5.0.4, 2.0.x before 2.0.0.8, Mozilla Suite 1.7.13, M ...) | corrigido | 2.0.0.8 |
| CVE-2006-2723 | (Unspecified versions of Mozilla Firefox allow remote attackers to caus ...) | removido/último | <removed> (unimportant) |
| CVE-2006-0496 | (Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibl ...) | corrigido | 3.0-1 (unimportant; bug #349339) |
| CVE-2005-4874 | (The XMLHttpRequest object in Mozilla 1.7.8 supports the HTTP TRACE met ...) | não afetado | <not-affected> (old version and CVE) |
| CVE-2005-4685 | (Firefox and Mozilla can associate a cookie with multiple domains when ...) | removido/último | <removed> (unimportant) |
| CVE-2005-2414 | (Race condition in the xpcom library, as used by web browsers such as F ...) | não afetado | <not-affected> |
| CVE-2005-2395 | (Mozilla Firefox 1.0.4 and 1.0.5 does not choose the challenge with the ...) | removido/último | <removed> (bug #320539; unimportant) |
| CVE-2004-1639 | (Mozilla Firefox before 0.10, Mozilla 5.0, and Gecko 20040913 allows re ...) | removido/último | <removed> (unimportant) |
| CVE-2002-2437 | (The JavaScript implementation in Mozilla Firefox before 4.0, Thunderbi ...) | corrigido | 4.0-1 (unimportant) |
| CVE-2002-2436 | (The Cascading Style Sheets (CSS) implementation in Mozilla Firefox bef ...) | corrigido | 4.0-1 (unimportant) |