Vendor Dictionary: Mozilla Organization

Mozilla Organization

Short Name:	Mozilla
Previous Names:	Firefox, Firebird
URL:	http://www.mozilla.org/ [visit link]
Email:	pressmozilla.org
Security URL:	http://www.mozilla.org/security/ [visit link]
Security Email:	securitymozilla.org
Knowledge Base:	[None Entered]
Notes:	http://www.mozilla.org/projects/security/known-vulnerabilities.html

Vulnerabilities by Vendor Product

Mozilla Organization

« Previous 1 2 3 Next »

Mozilla Organization

Firefox ESR: 10.0.2; OSVDB ID: 80010 Mozilla Multiple Product shlwapi.dll Use-after-free Child Window Closing File Open Dialog Remote Code Execution; OSVDB ID: 80014 Mozilla Multiple Product Content Security Policy Header XSS Weakness; OSVDB ID: 80011 Mozilla Multiple Product Drag and Drop Action XSS Weakness; OSVDB ID: 80012 Mozilla Multiple Product SVG Filter Out-of-bounds Read Information Disclosure; OSVDB ID: 80013 Mozilla Multiple Product Use-after-free nsSMILTimeValueSpec::ConvertBetweenTimeContainers() Function SVG Animation Handling Remote Code Execution; OSVDB ID: 80015 Mozilla Multiple Product javascript: Home Page Handling about:sessionrestore Content Script Code Execution; OSVDB ID: 80016 Mozilla Multiple Product Keyframe cssText Access Remote Code Execution; OSVDB ID: 80017 Mozilla Multiple Product window.fullScreen Property mozRequestFullScreen Policy Bypass; OSVDB ID: 80017 Mozilla Multiple Product window.fullScreen Property mozRequestFullScreen Policy Bypass; OSVDB ID: 80018 Mozilla Multiple Product Unspecified Memory Corruption DoS; OSVDB ID: 80019 Mozilla Multiple Product Unspecified Memory Corruption (2012-0462); OSVDB ID: 80021 Mozilla Multiple Product Unspecified Memory Corruption (2012-0463); 10.0.3; OSVDB ID: 81516 Mozilla Multiple Product gfxImageSurface Class Graphic Value Handling Remote Overflow; OSVDB ID: 81517 Mozilla Multiple Product Multi-octet Encoding XSS; OSVDB ID: 81520 Mozilla Multiple Product Docshell Page Loading URL Display Manipulation XSS; OSVDB ID: 81522 Mozilla Multiple Product ISO-2022-KR / ISO-2022-CN Character Set Decoding XSS; OSVDB ID: 81513 Mozilla Multiple Product Multiple Unspecified Remote Memory Corruption; OSVDB ID: 81519 Mozilla Multiple Product WebGL.drawElements() Function Template Argument Handling Video Memory Information Disclosure; OSVDB ID: 81523 Mozilla Multiple Product WebGL texImage2D() Function JSVAL_TO_OBJECT Remote Code Execution; OSVDB ID: 81524 Mozilla Multiple Product RSS / Atom XML HTTPS Content Loading URL Spoofing Weakness; OSVDB ID: 81514 Mozilla Multiple Product jsval.h js::array_shift Function Unspecified Remote Memory Corruption; OSVDB ID: 81518 Mozilla Multiple Product cairo_dwrite_font_face() Function Font Rendering Memory Corruption; OSVDB ID: 81515 Mozilla Multiple Product XPConnect Hashtable Use-after-free indexedDB IDBKeyRange Handling Remote Code Execution; OSVDB ID: 80740 Google ots (OpenType Sanitizer) GSUB/GPOS Parser Off-by-one Arbitrary Code Execution; 10.0.3; 10.0.3; 10.0.3; 10.0.3; 10.0.3; 10.0.3; 10.0.3; 10.0.3; 10.0.3; 10.0.3; 10.0.3; 10.0.3; 10.0.4; OSVDB ID: 82665 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1938); OSVDB ID: 82675 Mozilla Multiple Product Network Security Services ASN.1 Decoder Zero Length Item OCSP Response Handling Remote DoS; OSVDB ID: 82730 Mozilla Multiple Product NVIDIA Driver WebGL Implementation glBufferData Function Remote Code Execution; 10.0.4; OSVDB ID: 82666 Mozilla Multiple Product Unspecified Memory Corruption; 10.0.4; OSVDB ID: 82667 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1937); 10.0.4; 10.0.4; OSVDB ID: 82669 Mozilla Multiple Product utf16_to_isolatin1 Unicode Character Set Conversion Overflow; 10.0.4; OSVDB ID: 82672 Mozilla Multiple Product Content Security Policy Inline Event Handlers XSS Protection Bypass; 10.0.4; OSVDB ID: 82673 Mozilla Multiple Product Windows Shares HTML Page Loading Arbitrary File Access; 10.0.4; OSVDB ID: 82674 Mozilla Multiple Product Use-after-free nsINode::ReplaceOrInsertBefore Document Node Insertion / Replacement Remote Code Execution; 10.0.4; 10.0.4; OSVDB ID: 82676 Mozilla Multiple Product Use-after-free nsFrameList::FirstChild Function Absolutely Positioned Element Column Container Size Manipulation Remote Code Execution; 10.0.4; OSVDB ID: 82677 Mozilla Multiple Product nsHTMLReflowState::CalculateHypotheticalBox Function Absolutely / Relatively Positioned Nested Column Element Window Resizing Overflow; 10.0.4; 10.0.5; OSVDB ID: 83995 Mozilla Multiple Product nsDocument::AdoptNode() Function Document Load Handling Use-after-free Remote Code Execution; OSVDB ID: 83996 Mozilla Multiple Product History Navigation Handling URL Bar Spoofing; OSVDB ID: 84000 Mozilla Multiple Product Feed-View Functionality XSS; OSVDB ID: 84004 Mozilla Multiple Product JSDependentString::undepend() Function Dependent String Conversion Memory Corruption; OSVDB ID: 84012 Mozilla Firefox feed: URL Handling Outfilter Filter Bypass XSS Weakness; OSVDB ID: 84007 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1948); OSVDB ID: 83997 Mozilla Multiple Product nsSMILTimeValueSpec::IsEventBased Function Unspecified Use-after-free Remote Code Execution; OSVDB ID: 83998 Mozilla Multiple Product ElementAnimations::EnsureStyleRuleFor() Function Out-of-bounds Read Overflow; OSVDB ID: 83999 Mozilla Multiple Product nsTableFrame::InsertFrames Bad Cast Memory Corruption; OSVDB ID: 84001 Mozilla Multiple Product nsGlobalWindow::PageHidden() Function Focus Event Handling Use-after-free Remote Code Execution; OSVDB ID: 84002 Mozilla Multiple Product Compartment Handling Same-Compartment Security Wrapper (SCSW) Policy Bypass; OSVDB ID: 84003 Mozilla Multiple Product X-Frame-Options Header Handling Clickjacking Weakness; OSVDB ID: 84005 Mozilla Multiple Product Content Security Policy (CSP) Implementation blocked-uri Parameter Information Disclosure; OSVDB ID: 84008 Mozilla Firefox Drag and Drop Event Handling URL Bar Spoofing; OSVDB ID: 84009 Mozilla Firefox Context Menu Functionality data: URL XSS; OSVDB ID: 84011 Mozilla Multiple Product about:certerror Page Certificate Exception Handling Clickjacking Weakness; OSVDB ID: 84013 Mozilla Multiple Product JavaScript SandBox Utility javascript: URL Handling Remote Code Execution; 10.0.5; 10.0.5; 10.0.5; 10.0.5; 10.0.5; 10.0.5; 10.0.5; 10.0.5; 10.0.5; 10.0.5; 10.0.5; OSVDB ID: 84006 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1949); 10.0.5; 10.0.5; 10.0.5; 10.0.5; OSVDB ID: 84010 Mozilla Multiple Product qcms_transform_data_rgb_out_lut_sse2 (Color Management Library) Out-of-bounds Read Memory Information Disclosure; 10.0.5; 10.0.5; 10.0.5; 10.0.6; OSVDB ID: 84959 Mozilla Multiple Product nsRangeUpdater::SelAdjDeleteNode Use-after-free Remote Code Execution; OSVDB ID: 84960 Mozilla Multiple Product mozSpellChecker::SetCurrentDictionary Use-after-free Remote Code Execution; OSVDB ID: 84961 Mozilla Multiple Product RangeData::~RangeData Use-after-free Remote Code Execution; OSVDB ID: 84962 Mozilla Multiple Product js::gc::MapAllocToTraceKind Use-after-free Remote Code Execution; OSVDB ID: 84963 Mozilla Multiple Product gfxTextRun::GetUserData Use-after-free Remote Code Execution; OSVDB ID: 84964 Mozilla Multiple Product nsHTMLEditor::CollapseAdjacentTextNodes Use-after-free Remote Code Execution; OSVDB ID: 84968 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1971); OSVDB ID: 84989 Mozilla Multiple Product Text Runs Memory Corruption; OSVDB ID: 85004 Mozilla Multiple Product nsSVGFEMorphologyElement::Filter Unspecified Value Addition Handling Overflow; OSVDB ID: 84993 Mozilla Multiple Product WebGL Shader Use-after-free Remote Code Execution; OSVDB ID: 84970 Mozilla Multiple Product gfxTextRun::CanBreakLineBefore Use-after-free Remote Code Execution; OSVDB ID: 84971 Mozilla Multiple Product PresShell::CompleteMove Use-after-free Remote Code Execution; OSVDB ID: 84972 Mozilla Multiple Product nsHTMLSelectElement::SubmitNamesValues Use-after-free Remote Code Execution; OSVDB ID: 84973 Mozilla Multiple Product MediaStreamGraphThreadRunnable::Run() Use-after-free Remote Code Execution; OSVDB ID: 84974 Mozilla Multiple Product nsBlockFrame::MarkLineDirty Use-after-free Remote Code Execution; OSVDB ID: 84994 Mozilla Multiple Product for Linux Mesa Drivers >16 Sampler Uniform Handling Memory Corruption; OSVDB ID: 84995 Mozilla Multiple Product nsTArray_base::Length() requiredFeatures Attribute Move Handling Use-after-free Remote Code Execution; OSVDB ID: 84998 Mozilla Multiple Product Root Partition Executable Execution; OSVDB ID: 85003 Mozilla Multiple Product Web Console eval() Remote Code Execution; OSVDB ID: 85001 Mozilla Multiple Product nsLocation::CheckURL Content Loading Restriction Bypass; OSVDB ID: 85000 Mozilla Multiple Product OnLocationChange Event Handling Previous Site SSL Certificate Information Display; OSVDB ID: 84975 Mozilla Multiple Product nsHTMLEditRules::DeleteNonTableElements Use-after-free Remote Code Execution; OSVDB ID: 84969 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1970); OSVDB ID: 84965 Mozilla Multiple Product nsObjectLoadingContent::LoadObject Use-after-free Remote Code Execution; OSVDB ID: 84992 Mozilla Multiple Product Negative Height Header Value BMP Image File Handling Memory Corruption; OSVDB ID: 84997 Mozilla Multiple Product XSLT Format-Number Feature Out-of-bounds Read Information Disclosure; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.6; 10.0.7; OSVDB ID: 86102 Mozilla Multiple Product IME State Manager nsIContent::GetNameSpaceID() Function Use-after-free Arbitrary Code Execution; OSVDB ID: 86115 Mozilla Multiple Product nsHTMLCSSUtils::CreateCSSPropertyTxn() Function Use-after-free Arbitrary Code Execution; OSVDB ID: 86099 Mozilla Multiple Product nsHTMLEditor::IsPrevCharInNodeWhitespace() Function Overflow; OSVDB ID: 86094 Mozilla Multiple Product nsTextEditRules::WillInsert() Function Use-after-free Arbitrary Code Execution; OSVDB ID: 86117 Mozilla Multiple Product nsWaveReader::DecodeAudioData() Function Overflow; OSVDB ID: 86096 Mozilla Multiple Product Convolve3x3() Function Overflow; 10.0.7; OSVDB ID: 86095 Mozilla Multiple Product DOMSVGTests::GetRequiredFeatures() Function Use-after-free Arbitrary Code Execution; 10.0.7; 10.0.7; OSVDB ID: 86098 Mozilla Multiple Product GetProperty() Function JSAPI Handling Arbitrary Code Execution; 10.0.7; 10.0.7; OSVDB ID: 86100 Mozilla Multiple Product nsSMILAnimationController::DoSample() Function Use-after-free Arbitrary Code Execution; 10.0.7; OSVDB ID: 86101 Mozilla Multiple Product insPos Property Memory Corruption; 10.0.7; 10.0.7; OSVDB ID: 86103 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-3983); 10.0.7; OSVDB ID: 86104 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-3982); 10.0.7; OSVDB ID: 86108 Mozilla Multiple Product DOMWindowUtils Unrestricted Testing Methods Weakness; 10.0.7; OSVDB ID: 86109 Mozilla Multiple Product Full Screen Invocation / Backwards Navigation Use-after-free Arbitrary Code Execution; 10.0.7; OSVDB ID: 86110 Mozilla Multiple Product Binary Plugin location Property Handling XSS Weakness; 10.0.7; OSVDB ID: 86111 Mozilla Multiple Product InstallTrigger Failure Chrome Object Wrapper (COW) Error Handling Arbitrary Code Execution; 10.0.7; OSVDB ID: 86112 Mozilla Multiple Product location.hash Property Handling Arbitrary Code Execution; 10.0.7; OSVDB ID: 86113 Mozilla Multiple Product Chrome Object Wrapper (COW) Standard Prototype Property Accessing Weakness Arbitrary Code Execution; 10.0.7; OSVDB ID: 86114 Mozilla Multiple Product IsCSSWordSpacingSpace() Function Out-of-bounds Read Arbitrary Code Execution; 10.0.7; 10.0.7; OSVDB ID: 86116 Mozilla Multiple Product nsCharTraits::length() Function Overflow; 10.0.7; 10.0.8; OSVDB ID: 86126 Mozilla Multiple Product Site History Information Disclosure; OSVDB ID: 86128 Mozilla Multiple Product defaultValue() Function Security Wrapper Unwrapping Handling Weakness; 10.0.8; 10.0.9; OSVDB ID: 86678 illumos x86-64 Kernel System Call Functionality Crafted Application Handling Local Privilege Escalation; OSVDB ID: 86677 Joyent SmartOS x86-64 Kernel System Call Functionality Crafted Application Handling Local Privilege Escalation; OSVDB ID: 86775 Mozilla Multiple Product Prototype Property Injection Security Wrapper Protection Bypass Location Object Disclosure; OSVDB ID: 86773 Mozilla Multiple Product window.location Object CheckURL Function Incorrect Calling Document Return XSS Weakness; OSVDB ID: 86774 Mozilla Multiple Product window.location Object valueOf Method Shadowing XSS Weakness; 10.0.9; 10.0.9; 10.0.9; 10.0.10; OSVDB ID: 87581 Mozilla Multiple Product texImage2D Call Handling Memory Corruption; 10.0.10; OSVDB ID: 87582 Mozilla Multiple Product nsPlaintextEditor::FireClipboardEvent() Function Use-after-free Arbitrary Code Execution; 10.0.10; OSVDB ID: 87583 Mozilla Multiple Product nsTextEditorState::PrepareEditor() Function Use-after-free Arbitrary Code Execution; 10.0.10; OSVDB ID: 87585 Mozilla Multiple Product location Property Shadowing XSS Weakness; 10.0.10; OSVDB ID: 87587 Mozilla Multiple Product HZ-GB-2312 Charset Encoding Handling XSS Weakness; 10.0.10; OSVDB ID: 87588 Mozilla Multiple Product Cross-Origin Wrapper Handling XSS Weakness; 10.0.10; OSVDB ID: 87590 Mozilla Firefox Installer Path Subversion Arbitrary DLL Injection Code Execution; 10.0.10; OSVDB ID: 87594 Mozilla Multiple Product evalInSandbox() Function location.href Property Handling Sandbox Bypass XSS Weakness; 10.0.10; OSVDB ID: 87595 Mozilla Multiple Product image::RasterImage::DrawFrameTo() Function GIF Image Handling Overflow; 10.0.10; OSVDB ID: 87596 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-5842); 10.0.10; OSVDB ID: 87597 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-5843); 10.0.10; OSVDB ID: 87598 Mozilla Multiple Product for OS X HTML File Handling Use-after-free Arbitrary Code Execution; 10.0.10; OSVDB ID: 87599 Mozilla Multiple Product copyTexImage2D Call Image Dimension Handling Memory Corruption; 10.0.10; OSVDB ID: 87601 Mozilla Multiple Product webgl bufferdata Handling Overflow; 10.0.10; OSVDB ID: 87602 Mozilla Multiple Product BuildTextRunsScanner::BreakSink::SetBreaks() Function Use-after-free Arbitrary Code Execution; 10.0.10; OSVDB ID: 87603 Mozilla Multiple Product nsViewManager::ProcessPendingUpdates() Function Use-after-free Arbitrary Code Execution; 10.0.10; OSVDB ID: 87604 Mozilla Multiple Product nsEditor::FindNextLeafNode() Function Use-after-free Arbitrary Code Execution; 10.0.10; OSVDB ID: 87605 Mozilla Multiple Product XPCWrappedNative::Mark() Function Use-after-free Arbitrary Code Execution; 10.0.10; OSVDB ID: 87606 Mozilla Multiple Product nsTextEditorState::PrepareEditor() Function Use-after-free Arbitrary Code Execution; 10.0.10; OSVDB ID: 87607 Mozilla Multiple Product gfxShapedWord::CompressedGlyph::IsClusterStart() Function Overflow; 10.0.10; OSVDB ID: 87608 Mozilla Multiple Product nsWindow::OnExposeEvent() Function Overflow; 10.0.10; OSVDB ID: 87609 Mozilla Multiple Product gfxFont::GetFontEntry() Function Use-after-free Arbitrary Code Execution; 10.0.11; OSVDB ID: 88997 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0769); OSVDB ID: 89009 Mozilla Multiple Product Unspecified URL Bar Spoofing Weakness; OSVDB ID: 89017 Mozilla Multiple Product Javascript String Concatenation Length Calculation Integer Overflow; OSVDB ID: 89021 Mozilla Multiple Product XMLSerializer serializeToStream Use-after-free Arbitrary Code Execution; OSVDB ID: 89022 Mozilla Multiple Product ListenerManager Listener Object Allocation Garbage Collection Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 88997 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0769); OSVDB ID: 88998 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0749); OSVDB ID: 89009 Mozilla Multiple Product Unspecified URL Bar Spoofing Weakness; OSVDB ID: 89015 Mozilla Multiple Product Plugin Handler Event Handling Same Origin Policy Bypass Clickjacking Weakness; OSVDB ID: 89017 Mozilla Multiple Product Javascript String Concatenation Length Calculation Integer Overflow; OSVDB ID: 89021 Mozilla Multiple Product XMLSerializer serializeToStream Use-after-free Arbitrary Code Execution; OSVDB ID: 89024 Mozilla Multiple Product jsobj.cpp obj_toSource Function Javascript Proxy Object Handler Method Handling Use-after-free Arbitrary Code Execution; OSVDB ID: 89023 Mozilla Multiple Product VibrateWindowListener Object Construction Vibrate Library domDoc Pointer Use-after-free Arbitrary Code Execution; OSVDB ID: 89022 Mozilla Multiple Product ListenerManager Listener Object Allocation Garbage Collection Use-after-free Arbitrary Code Execution; 17.0; 17.0; OSVDB ID: 89001 Mozilla Multiple Product ~nsHTMLEditRules() Function Use-after-free Arbitrary Code Execution; 10.0.11; OSVDB ID: 89001 Mozilla Multiple Product ~nsHTMLEditRules() Function Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89002 Mozilla Multiple Product imgRequest::OnStopFrame() Function Use-after-free Arbitrary Code Execution; 10.0.11; OSVDB ID: 89002 Mozilla Multiple Product imgRequest::OnStopFrame() Function Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89003 Mozilla Multiple Product nsSVGPathElement::GetPathLengthScale() Function Unspecified Out-of-bounds Read Issue; 10.0.11; OSVDB ID: 89003 Mozilla Multiple Product nsSVGPathElement::GetPathLengthScale() Function Unspecified Out-of-bounds Read Issue; 17.0; OSVDB ID: 89004 Mozilla Multiple Product mozilla::TrackUnionStream::EndTrack() Function Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89005 Mozilla Multiple Product Mesa WebGL Canvas Resizing Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89006 Mozilla Multiple Product gfxTextRun::ShrinkToLigatureBoundaries() Function Heap Overflow; 10.0.10; OSVDB ID: 89007 Mozilla Multiple Product nsWindow::OnExposeEvent() Function Heap Overflow; 17.0; OSVDB ID: 89008 Mozilla Multiple Product Canvas Unspecified Stack Overflow; 10.0.11; 17.0; 10.0.11; OSVDB ID: 89010 Mozilla Multiple Product TableBackgroundPainter::TableBackgroundData::Destroy() Function Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89010 Mozilla Multiple Product TableBackgroundPainter::TableBackgroundData::Destroy() Function Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89012 Mozilla Multiple Product nsSOCKSSocketInfo::ConnectToProxy(PRFileDesc*) Function SSL Socket Transport Thread Handling Arbitrary Code Execution; 17.0; OSVDB ID: 89013 Mozilla Multiple Product AutoWrapperChanger Class Garbage Collection Javascript Object Handling Arbitrary Code Execution; 10.0.11; OSVDB ID: 89014 Mozilla Multiple Product jsval-returning Quickstubs Return Value Wrapping Arbitrary Code Execution; 17.0; OSVDB ID: 89014 Mozilla Multiple Product jsval-returning Quickstubs Return Value Wrapping Arbitrary Code Execution; 17.0; 10.0.11; OSVDB ID: 89016 Mozilla Multiple Product XBL Object toString() Function Address Space Layout Information Disclosure; 17.0; OSVDB ID: 89016 Mozilla Multiple Product XBL Object toString() Function Address Space Layout Information Disclosure; 10.0.11; 17.0; 17.0; OSVDB ID: 89018 Mozilla Multiple Product XBL File XML Binding Handling Memory Corruption; 17.0; OSVDB ID: 89019 Mozilla Multiple Product Object Prototype Manipulation Chrome Object Wrappers (COW) Bypass Arbitrary Code Execution; 10.0.11; OSVDB ID: 89020 Mozilla Multiple Product Plugin Object SVG Element Interaction Chrome Privileged Page Arbitrary Code Execution; 17.0; OSVDB ID: 89020 Mozilla Multiple Product Plugin Object SVG Element Interaction Chrome Privileged Page Arbitrary Code Execution; 10.0.11; 17.0; 10.0.11; 17.0; 17.0; 17.0; 17.0.2; OSVDB ID: 90418 Mozilla Multiple Product nsPrintEngine::CommonPrint Function Use-after-free Arbitrary Code Execution; 17.0.2; OSVDB ID: 90419 Mozilla Multiple Product nsCodingStateMachine::NextState Function Unspecified Out-of-bounds Read Issue; 17.0.2; OSVDB ID: 90420 Mozilla Multiple Product ClusterIterator::NextCluster Function Unspecified Out-of-bounds Read Issue; 17.0.2; OSVDB ID: 90421 Mozilla Multiple Product nsSaveAsCharset::DoCharsetConversion Function Heap Buffer Overflow; 17.0.2; OSVDB ID: 90422 Mozilla Multiple Product Proxy 407 Response HTTPS Address Spoofing; 17.0.2; OSVDB ID: 90423 Mozilla Multiple Product nsImageLoadingContent() Function Use-after-free Arbitrary Code Execution; 17.0.2; OSVDB ID: 90424 Mozilla Multiple Product Active Browser Profile File System Location Disclosure; 17.0.2; OSVDB ID: 90425 Mozilla Multiple Product Chrome Object Wrappers (COW) / System Only Wrappers (SOW) Protection Bypass Arbitrary Code Execution; 17.0; OSVDB ID: 90429 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0783); 17.0.2; OSVDB ID: 90430 Mozilla Multiple Product nsOverflowContinuationTracker::Finish Function Use-after-free Arbitrary Code Execution; 17.0.2; OSVDB ID: 90431 Mozilla Multiple Product nsDisplayBoxShadowOuter::Paint Function Use-after-free Arbitrary Code Execution; 17.0.3; OSVDB ID: 90928 Mozilla Multiple Product HTML Editor document.execCommand Function Use-after-free Arbitrary Code Execution; 17.0.4; OSVDB ID: 91874 Mozilla Multiple Products Multiple Unspecified Memory Safety Issues (2013-0788); 17.0.4; OSVDB ID: 91875 Mozilla Multiple Products Multiple Unspecified Memory Safety Issues (2013-0789); 17.0.4; OSVDB ID: 91876 Mozilla Multiple Products Maintenance Service Local Buffer Overflow; 17.0.4; OSVDB ID: 91878 Mozilla Multiple Products Updater Path Subversion Arbitrary DLL Loading Local Privilege Escalation; 17.0.4; OSVDB ID: 91879 Mozilla Multiple Products WebGL Rendering Mesa Graphics Driver on Linux Invalid Free Arbtirary Code Execution; 17.0.4; OSVDB ID: 91880 Mozilla Multiple Products SOW Protection Bypass Protected Node Cloning Arbitrary Code Execution; 17.0.4; OSVDB ID: 91882 Mozilla Multiple Products Timed History Navigation XSS; 17.0.4; OSVDB ID: 91884 Mozilla Multiple Products Plug-in Code Unspecified Stack Corruption; 17.0.4; OSVDB ID: 91885 Network Security Services (NSS) Libary CERT_DecodeCertPackage Function Certificate Decoding Out-of-bounds Read DoS; 17.0.4; OSVDB ID: 91886 Cairo pixman_fill_sse2 Function Buffer Overflow; 17.0.5; OSVDB ID: 93422 Mozilla Multiple Product gfxSkipCharsIterator::SetOffsets Function Out-of-bound Read DoS; 17.0.5; OSVDB ID: 93423 Mozilla Multiple Product DOMSVGZoomEvent Functions Unitialized Memory Usage Information Disclosure; 17.0.5; OSVDB ID: 93424 Mozilla Multiple Product Video onresize Event Handling Use-after-free Arbitrary Code Execution; 17.0.5; OSVDB ID: 93425 Mozilla Multiple Product Mozilla Maintenance Service for Windows Local Privilege Escalation; 17.0.5; OSVDB ID: 93427 Mozilla Multiple Product Chrome Object Wrappers (COW) Content Level Constructor Calls XSS Weakness; 17.0; OSVDB ID: 93429 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0801); 17.0.5; OSVDB ID: 93430 Mozilla Multiple Product SelectionIterator::GetNextSegment Function Out-of-bounds Read DoS; 17.0.5; OSVDB ID: 93431 Mozilla Multiple Product nsContentUtils::RemoveScriptBlocker Function Heap Use-after-free Arbitrary Code Execution; 17.0.5; OSVDB ID: 93432 Mozilla Multiple Product nsFrameList::FirstChild Function Heap Use-after-free Arbitrary Code Execution; 17.0.5; OSVDB ID: 93433 Mozilla Multiple Product mozilla::plugins::child::_geturlnotify Function Heap Use-after-free Arbitrary Code Execution; 17.0.5; OSVDB ID: 93434 Mozilla Multiple Product _cairo_xlib_surface_add_glyph Function Unspecified Invalid Write Issue

Bugzilla: 2.14; OSVDB ID: 5080 Bugzilla editusers.cgi Delete Arbitrary User; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 6362 Bugzilla editusers.cgi Form Edit Privilege Escalation; OSVDB ID: 6395 Bugzilla defparams.pl Data Directory World Writeable; OSVDB ID: 6400 Bugzilla buglist.cgi order Parameter SQL Injection; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6356 Bugzilla bug_form.pl Full Name Parameter XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; 2.14.1; OSVDB ID: 5080 Bugzilla editusers.cgi Delete Arbitrary User; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 6395 Bugzilla defparams.pl Data Directory World Writeable; OSVDB ID: 6399 Bugzilla shadow-sync Arbitrary Password Disclosure; OSVDB ID: 6400 Bugzilla buglist.cgi order Parameter SQL Injection; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6356 Bugzilla bug_form.pl Full Name Parameter XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; 2.15; OSVDB ID: 5080 Bugzilla editusers.cgi Delete Arbitrary User; OSVDB ID: 6395 Bugzilla defparams.pl Data Directory World Writeable; OSVDB ID: 6400 Bugzilla buglist.cgi order Parameter SQL Injection; OSVDB ID: 6356 Bugzilla bug_form.pl Full Name Parameter XSS; 2.16; OSVDB ID: 5080 Bugzilla editusers.cgi Delete Arbitrary User; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6349 Bugzilla Local Dependancy Graph XSS; OSVDB ID: 6350 Bugzilla Default HTML Template Multiple XSS; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; 2.16rc1; OSVDB ID: 5080 Bugzilla editusers.cgi Delete Arbitrary User; OSVDB ID: 6399 Bugzilla shadow-sync Arbitrary Password Disclosure; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6356 Bugzilla bug_form.pl Full Name Parameter XSS; 2.10; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6373 Bugzilla createaccount.cgi login Parameter XSS; OSVDB ID: 6374 Bugzilla showvotes.cgi bug_id Parameter XSS; OSVDB ID: 6375 Bugzilla reports.cgi product Parameter XSS; OSVDB ID: 6376 Bugzilla buglist.cgi DisplayError() Function XSS; OSVDB ID: 6377 Bugzilla showdependencytree.cgi id Parameter XSS; OSVDB ID: 6378 Bugzilla process_bug.cgi Multiple Parameter XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; OSVDB ID: 6365 Bugzilla process_bug.cgi who Variable Arbitrary Command Execution; 2.12; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6373 Bugzilla createaccount.cgi login Parameter XSS; OSVDB ID: 6374 Bugzilla showvotes.cgi bug_id Parameter XSS; OSVDB ID: 6375 Bugzilla reports.cgi product Parameter XSS; OSVDB ID: 6376 Bugzilla buglist.cgi DisplayError() Function XSS; OSVDB ID: 6377 Bugzilla showdependencytree.cgi id Parameter XSS; OSVDB ID: 6378 Bugzilla process_bug.cgi Multiple Parameter XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; 2.14.x; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; 2.16.1; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6349 Bugzilla Local Dependancy Graph XSS; OSVDB ID: 6350 Bugzilla Default HTML Template Multiple XSS; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; 2.16.2; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6349 Bugzilla Local Dependancy Graph XSS; OSVDB ID: 6350 Bugzilla Default HTML Template Multiple XSS; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; 2.17; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6349 Bugzilla Local Dependancy Graph XSS; OSVDB ID: 6350 Bugzilla Default HTML Template Multiple XSS; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 29546 Bugzilla Attachment Diff Private Description Disclosure; OSVDB ID: 29545 Bugzilla Multiple Description Field XSS; OSVDB ID: 29544 Bugzilla Page Header XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; 2.17.1; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6349 Bugzilla Local Dependancy Graph XSS; OSVDB ID: 6350 Bugzilla Default HTML Template Multiple XSS; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 11116 Bugzilla insidergroup Feature metadata Change Information Disclosure; OSVDB ID: 16427 Bugzilla URI Web Log Password Disclosure; OSVDB ID: 6387 Bugzilla editkeywords.cgi id Parameter SQL Injection; OSVDB ID: 6389 Bugzilla votes.cgi who Variable Information Disclosure; 2.17.2; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6349 Bugzilla Local Dependancy Graph XSS; OSVDB ID: 6350 Bugzilla Default HTML Template Multiple XSS; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; 2.17.3; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6349 Bugzilla Local Dependancy Graph XSS; OSVDB ID: 6350 Bugzilla Default HTML Template Multiple XSS; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6390 Bugzilla describecomponents.cgi Information Disclosure; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 11116 Bugzilla insidergroup Feature metadata Change Information Disclosure; OSVDB ID: 6387 Bugzilla editkeywords.cgi id Parameter SQL Injection; OSVDB ID: 6389 Bugzilla votes.cgi who Variable Information Disclosure; 2.4; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6373 Bugzilla createaccount.cgi login Parameter XSS; OSVDB ID: 6374 Bugzilla showvotes.cgi bug_id Parameter XSS; OSVDB ID: 6375 Bugzilla reports.cgi product Parameter XSS; OSVDB ID: 6376 Bugzilla buglist.cgi DisplayError() Function XSS; OSVDB ID: 6377 Bugzilla showdependencytree.cgi id Parameter XSS; OSVDB ID: 6378 Bugzilla process_bug.cgi Multiple Parameter XSS; OSVDB ID: 6365 Bugzilla process_bug.cgi who Variable Arbitrary Command Execution; 2.6; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6373 Bugzilla createaccount.cgi login Parameter XSS; OSVDB ID: 6374 Bugzilla showvotes.cgi bug_id Parameter XSS; OSVDB ID: 6375 Bugzilla reports.cgi product Parameter XSS; OSVDB ID: 6376 Bugzilla buglist.cgi DisplayError() Function XSS; OSVDB ID: 6377 Bugzilla showdependencytree.cgi id Parameter XSS; OSVDB ID: 6378 Bugzilla process_bug.cgi Multiple Parameter XSS; OSVDB ID: 6365 Bugzilla process_bug.cgi who Variable Arbitrary Command Execution; 2.8; OSVDB ID: 6348 Bugzilla showdependencygraph.cgi Symlink Arbitrary File Overwrite; OSVDB ID: 6383 Bugzilla globals.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6384 Bugzilla defparams.pl Symlink Arbitrary File Overwrite; OSVDB ID: 6385 Bugzilla checksetup.pl Symlink Arbitrary File Overwrite; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6373 Bugzilla createaccount.cgi login Parameter XSS; OSVDB ID: 6374 Bugzilla showvotes.cgi bug_id Parameter XSS; OSVDB ID: 6375 Bugzilla reports.cgi product Parameter XSS; OSVDB ID: 6376 Bugzilla buglist.cgi DisplayError() Function XSS; OSVDB ID: 6377 Bugzilla showdependencytree.cgi id Parameter XSS; OSVDB ID: 6378 Bugzilla process_bug.cgi Multiple Parameter XSS; OSVDB ID: 58527 Bugzilla process_bug.cgi Shell Metacharacter Arbitrary Command Execution; OSVDB ID: 6365 Bugzilla process_bug.cgi who Variable Arbitrary Command Execution; 2.14.2; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; 2.14.3; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; 2.14.4; OSVDB ID: 6351 Bugzilla .htaccess Backup File Protection Failure; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 6401 Bugzilla quips.cgi COMMENTS Parameter XSS; 2.16.3; OSVDB ID: 6388 Bugzilla editproducts.cgi SQL Injection; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 2843 Bugzilla collectstats.pl SQL Injection; OSVDB ID: 6387 Bugzilla editkeywords.cgi id Parameter SQL Injection; OSVDB ID: 6389 Bugzilla votes.cgi who Variable Information Disclosure; 2.17.4; OSVDB ID: 6390 Bugzilla describecomponents.cgi Information Disclosure; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 11116 Bugzilla insidergroup Feature metadata Change Information Disclosure; OSVDB ID: 6387 Bugzilla editkeywords.cgi id Parameter SQL Injection; OSVDB ID: 6389 Bugzilla votes.cgi who Variable Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.16.rc1; OSVDB ID: 6395 Bugzilla defparams.pl Data Directory World Writeable; OSVDB ID: 6400 Bugzilla buglist.cgi order Parameter SQL Injection; 2.17.7; OSVDB ID: 7782 Bugzilla Image URL Password Disclosure; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 11116 Bugzilla insidergroup Feature metadata Change Information Disclosure; 2.17.6; OSVDB ID: 7782 Bugzilla Image URL Password Disclosure; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 11116 Bugzilla insidergroup Feature metadata Change Information Disclosure; 2.17.5; OSVDB ID: 7782 Bugzilla Image URL Password Disclosure; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; OSVDB ID: 11116 Bugzilla insidergroup Feature metadata Change Information Disclosure; OSVDB ID: 84245 Bugzilla Public Comment Attachment ID Private Attachment Information Disclosure; 2.16.5; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; 2.16.4; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; 2.16rc2; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; 2.14.5; OSVDB ID: 7786 Bugzilla editcomponents.cgi action Parameter XSS; OSVDB ID: 7787 Bugzilla editgroups.cgi action Parameter XSS; OSVDB ID: 7788 Bugzilla editmilestones.cgi action Parameter XSS; OSVDB ID: 7789 Bugzilla editproducts.cgi action Parameter XSS; OSVDB ID: 7790 Bugzilla editusers.cgi action Parameter XSS; OSVDB ID: 7791 Bugzilla editversions.cgi action Parameter XSS; 2.18 rc1; OSVDB ID: 11116 Bugzilla insidergroup Feature metadata Change Information Disclosure; 2.18 rc2; OSVDB ID: 11116 Bugzilla insidergroup Feature metadata Change Information Disclosure; 2.19.1; OSVDB ID: 16427 Bugzilla URI Web Log Password Disclosure; OSVDB ID: 16426 Bugzilla Closed State Product Bug Entry Creation; OSVDB ID: 16425 Bugzilla Product Name Enumeration; 2.19; OSVDB ID: 11116 Bugzilla insidergroup Feature metadata Change Information Disclosure; 2.18; OSVDB ID: 16427 Bugzilla URI Web Log Password Disclosure; OSVDB ID: 16426 Bugzilla Closed State Product Bug Entry Creation; OSVDB ID: 29549 Bugzilla showdependencygraph.cgi XSS; OSVDB ID: 16425 Bugzilla Product Name Enumeration; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.19.2; OSVDB ID: 16427 Bugzilla URI Web Log Password Disclosure; OSVDB ID: 16426 Bugzilla Closed State Product Bug Entry Creation; OSVDB ID: 16425 Bugzilla Product Name Enumeration; 2.18.1; OSVDB ID: 16427 Bugzilla URI Web Log Password Disclosure; OSVDB ID: 16426 Bugzilla Closed State Product Bug Entry Creation; OSVDB ID: 16425 Bugzilla Product Name Enumeration; 2.19.3; OSVDB ID: 16427 Bugzilla URI Web Log Password Disclosure; OSVDB ID: 16426 Bugzilla Closed State Product Bug Entry Creation; OSVDB ID: 16425 Bugzilla Product Name Enumeration; 2.16.8; OSVDB ID: 16426 Bugzilla Closed State Product Bug Entry Creation; OSVDB ID: 16425 Bugzilla Product Name Enumeration; 2.16.9; OSVDB ID: 16426 Bugzilla Closed State Product Bug Entry Creation; OSVDB ID: 16425 Bugzilla Product Name Enumeration; 2.18.5; OSVDB ID: 29548 Bugzilla Crafted URL User-complicit Arbitrary Command Execution; OSVDB ID: 29547 Bugzilla XML Format Deadline Field Disclosure; 2.20.2; OSVDB ID: 29548 Bugzilla Crafted URL User-complicit Arbitrary Command Execution; OSVDB ID: 29547 Bugzilla XML Format Deadline Field Disclosure; 2.22; OSVDB ID: 29548 Bugzilla Crafted URL User-complicit Arbitrary Command Execution; OSVDB ID: 29547 Bugzilla XML Format Deadline Field Disclosure; 2.23.2; OSVDB ID: 29548 Bugzilla Crafted URL User-complicit Arbitrary Command Execution; OSVDB ID: 29547 Bugzilla XML Format Deadline Field Disclosure; 3.4rc1; OSVDB ID: 58089 Bugzilla token.cgi HTTP Referer Header URL Password Disclosure; 3.4; OSVDB ID: 58089 Bugzilla token.cgi HTTP Referer Header URL Password Disclosure; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; OSVDB ID: 58087 Bugzilla Bug.search WebService Function Unspecified SQL Injection; 3.4.1; OSVDB ID: 58089 Bugzilla token.cgi HTTP Referer Header URL Password Disclosure; OSVDB ID: 58087 Bugzilla Bug.search WebService Function Unspecified SQL Injection; 3.4.1; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.4rc1; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.3.4; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.3.3; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.3.2; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.3.1; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.2.4; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.2.3; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.2.2; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.2.1; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.2; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.2rc2; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.2rc1; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.1.4; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.1.3; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.1.2; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.1.1; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.1; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.0.8; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.0.7; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.5; OSVDB ID: 58087 Bugzilla Bug.search WebService Function Unspecified SQL Injection; 3.0.6; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.0.5; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.0.4; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.4rc1; OSVDB ID: 58087 Bugzilla Bug.search WebService Function Unspecified SQL Injection; 3.0.2; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.3.4; OSVDB ID: 58087 Bugzilla Bug.search WebService Function Unspecified SQL Injection; 3.0.1; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.3.3; OSVDB ID: 58087 Bugzilla Bug.search WebService Function Unspecified SQL Injection; 3.0; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 3.3.2; OSVDB ID: 58087 Bugzilla Bug.search WebService Function Unspecified SQL Injection; 2.9; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 2.8; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 2.6; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 2.4; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 2.23.4; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 2.23.3; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; 2.23.2; OSVDB ID: 58088 Bugzilla Bug.create WebService Function Unspecified SQL Injection; OSVDB ID: 85071 Bugzilla Extension Directory Browsing Template Source Code Disclosure; 3.6.8; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.6.7; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.6.6; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.6.5; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.6.4; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.6.3; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.6.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.6.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.6; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.14; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.13; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.12; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.11; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.10; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.9; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.8; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.7; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.6; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.5; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.4; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.3; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.4; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.10; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.9; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.8; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.7; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.6; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.5; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.4; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.3; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.11; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.10; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.9; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.8; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.7; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.6; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.5; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.4; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.3; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.0; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.22.7; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.22.6; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.22.5; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.22.4; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.22.3; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.22.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.22.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.22; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.20.7; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.20.6; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.20.5; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.20.4; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.20.3; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.20.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.20.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.20; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.18.6; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.18.5; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.18.4; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.18.3; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.18.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 2.18.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.7.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 4.0; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 4.0.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 4.0.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 4.0.3; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 4.0.4; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 4.0.5; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 4.1.1; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 84244 Bugzilla Addressee Permission Verification Bug Summary Information Disclosure; 4.2; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; OSVDB ID: 81263 Bugzilla buglist.cgi JavaScript Template Bug Information Disclosure; 3.6.8; 3.6.7; 3.6.6; 3.6.5; 3.6.4; 3.6.3; 3.6.2; 3.6.1; 3.6; 3.4.14; 3.4.13; 3.4.12; 3.4.11; 3.4.10; 3.4.9; 3.4.8; 3.4.7; 3.4.6; 3.4.5; 3.4.4; 3.4.3; 3.4.2; 3.4.1; 3.4; 3.2.10; 3.2.9; 3.2.8; 3.2.7; 3.2.6; 3.2.5; 3.2.4; 3.2.3; 3.2.2; 3.2.1; 3.2; 3.0.11; 3.0.10; 3.0.9; 3.0.8; 3.0.7; 3.0.6; 3.0.5; 3.0.4; 3.0.3; 3.0.2; 3.0.1; 3.0; 2.22.7; 2.22.6; 2.22.5; 2.22.4; 2.22.3; 2.22.2; 2.22.1; 2.22; 2.20.7; 2.20.6; 2.20.5; 2.20.4; 2.20.3; 2.20.2; 2.20.1; 2.20; 2.18.6; 2.18.5; 2.18.4; 2.18.3; 2.18.2; 2.18.1; 3.7.1; 4.0; 4.0.1; 4.0.2; 4.0.3; 4.0.4; 4.0.5; 4.1.1; 4.2; 4.1.1; 4.2.1; OSVDB ID: 84244 Bugzilla Addressee Permission Verification Bug Summary Information Disclosure; OSVDB ID: 84245 Bugzilla Public Comment Attachment ID Private Attachment Information Disclosure; 4.3.1; OSVDB ID: 84244 Bugzilla Addressee Permission Verification Bug Summary Information Disclosure; OSVDB ID: 84245 Bugzilla Public Comment Attachment ID Private Attachment Information Disclosure; 2.17.5; 3.6.9; OSVDB ID: 84245 Bugzilla Public Comment Attachment ID Private Attachment Information Disclosure; 3.7.1; OSVDB ID: 85071 Bugzilla Extension Directory Browsing Template Source Code Disclosure; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 84245 Bugzilla Public Comment Attachment ID Private Attachment Information Disclosure; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.0.6; OSVDB ID: 84245 Bugzilla Public Comment Attachment ID Private Attachment Information Disclosure; 4.1.1; OSVDB ID: 85071 Bugzilla Extension Directory Browsing Template Source Code Disclosure; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 84245 Bugzilla Public Comment Attachment ID Private Attachment Information Disclosure; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.2.1; 4.3.1; 2.23.2; 3.6.10; OSVDB ID: 85071 Bugzilla Extension Directory Browsing Template Source Code Disclosure; 3.7.1; 4.0.7; OSVDB ID: 85071 Bugzilla Extension Directory Browsing Template Source Code Disclosure; 4.1.1; 4.2.2; OSVDB ID: 85071 Bugzilla Extension Directory Browsing Template Source Code Disclosure; 4.3.1; OSVDB ID: 85071 Bugzilla Extension Directory Browsing Template Source Code Disclosure; 4.3.2; OSVDB ID: 85071 Bugzilla Extension Directory Browsing Template Source Code Disclosure; 2.12; OSVDB ID: 85072 Bugzilla Username Parsing LDAP Query Injection; 3.6.10; OSVDB ID: 85072 Bugzilla Username Parsing LDAP Query Injection; 3.7.1; OSVDB ID: 85072 Bugzilla Username Parsing LDAP Query Injection; 4.0.7; OSVDB ID: 85072 Bugzilla Username Parsing LDAP Query Injection; 4.1.1; OSVDB ID: 85072 Bugzilla Username Parsing LDAP Query Injection; 4.2.2; OSVDB ID: 85072 Bugzilla Username Parsing LDAP Query Injection; 4.3.1; OSVDB ID: 85072 Bugzilla Username Parsing LDAP Query Injection; 4.3.2; OSVDB ID: 85072 Bugzilla Username Parsing LDAP Query Injection; 4.3.2; OSVDB ID: 87508 Bugzilla /WebService/User.pm User.get Method Arbitrary User Saved Search Remote Information Disclosure; 3.5.3; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; 3.6rc1; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; 3.6; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.6.1; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.6.2; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.6.3; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.6.4; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.6.5; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.6.6; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.6.7; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.6.8; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; 3.7.2; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; 3.7.3; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.0rc1; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.0rc2; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.0; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.0.1; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.0.2; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.0.3; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.0.4; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; 4.0.5; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; 4.1.2; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; 4.1.3; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.2rc1; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.2rc2; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; 4.2; OSVDB ID: 81262 Bugzilla X-FORWARDED-FOR Header Validation Password Lockout Bypass Brute Force Weakness; 3.5.1; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.5.2; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.5.3; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.6.rc1; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 3.7.2; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF; 4.1.2; OSVDB ID: 78717 Bugzilla Admin Task Execution CSRF

Browser for Mac: 1.7RC2; OSVDB ID: 6338 Apple Mac OS X disk(s): URI Remote Code Execution; OSVDB ID: 6184 Apple Mac OS X Help URI Script Execution

Firefox for Linux: 0.8; OSVDB ID: 6107 Multiple Browser Telnet URI Handler File Manipulation; 3.6.10; OSVDB ID: 68853 Mozilla Multiple Products on Linux Unspecified Application-launch Script LD_LIBRARY_PATH Zero-length Directory Name Path Subversion Local Privilege Escalation; 3.5.13; OSVDB ID: 68853 Mozilla Multiple Products on Linux Unspecified Application-launch Script LD_LIBRARY_PATH Zero-length Directory Name Path Subversion Local Privilege Escalation

Firefox for Mac: 0.8; OSVDB ID: 6338 Apple Mac OS X disk(s): URI Remote Code Execution; OSVDB ID: 6184 Apple Mac OS X Help URI Script Execution

Camino: 0.8; OSVDB ID: 10983 Multiple Browser Cross Tab Dialog Box Spoofing; 0.8.4; OSVDB ID: 59834 Mozilla Multiple Browser Cross-domain Frame Injection Content Spoofing; OSVDB ID: 17397 Mozilla Multiple Browser Javascript Dialog Origin Spoofing; 0.8.3; OSVDB ID: 59834 Mozilla Multiple Browser Cross-domain Frame Injection Content Spoofing; 0.8.4; 0.8.3

Firebird: 0.7; OSVDB ID: 59834 Mozilla Multiple Browser Cross-domain Frame Injection Content Spoofing; 0.7

Chatzilla: 0.9.35; OSVDB ID: 2863 Mozilla irc: URI Handler DoS; 0.9.48; OSVDB ID: 2863 Mozilla irc: URI Handler DoS

Bonsai: Unknown or Unspecified; OSVDB ID: 5457 Mozilla Bonsai cvsqueryform.cgi module Parameter XSS; OSVDB ID: 5458 Mozilla Bonsai cvsquery.cgi Multiple Parameter XSS; OSVDB ID: 5459 Mozilla Bonsai cvslog.cgi Path Disclosure; OSVDB ID: 5460 Mozilla Bonsai cvsblame.cgi Multiple Parameter XSS; OSVDB ID: 5461 Mozilla Bonsai showcheckins.cgi person Parameter XSS; OSVDB ID: 5462 Mozilla Bonsai cvsview2.cgi Path Disclosure; OSVDB ID: 5463 Mozilla Bonsai multidiff.cgi Path Disclosure; OSVDB ID: 5634 Mozilla Bonsai cvslog.cgi Multiple Parameter XSS; 1.3; OSVDB ID: 5464 Mozilla Bonsai editcheckin.cgi Arbitrary Command Execution; OSVDB ID: 5465 Mozilla Bonsai editparams.cgi Authentication Bypass

Firefox: All Versions; OSVDB ID: 7007 Mozilla Browser Address Bar Spoofing Weakness; 0.9; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 7939 Mozilla Multiple Browsers CA Certificate SSL Page DoS; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 59834 Mozilla Multiple Browser Cross-domain Frame Injection Content Spoofing; OSVDB ID: 8309 Mozilla Browsers For Windows XPInstall Security Dialog Arbitrary Extension Installation; 1.0.2; OSVDB ID: 15009 Mozilla Firefox Sidebar Panel Script Injection; OSVDB ID: 15690 Mozilla Multiple Browser DOM Property Override Privilege Escalation; OSVDB ID: 7939 Mozilla Multiple Browsers CA Certificate SSL Page DoS; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 17397 Mozilla Multiple Browser Javascript Dialog Origin Spoofing; 0.9.1; OSVDB ID: 8238 Mozilla Browsers onunload SSL Certificate Spoofing; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 7939 Mozilla Multiple Browsers CA Certificate SSL Page DoS; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 59834 Mozilla Multiple Browser Cross-domain Frame Injection Content Spoofing; 0.9.2; OSVDB ID: 8238 Mozilla Browsers onunload SSL Certificate Spoofing; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 8307 Mozilla Browsers FTP URI Null Character MIME Type Spoofing Arbitrary Code Execution; OSVDB ID: 7939 Mozilla Multiple Browsers CA Certificate SSL Page DoS; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.9.3; OSVDB ID: 9670 Mozilla onUnload Source Spoofing; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 9966 Mozilla Multiple Products nsVCardObj.cpp writeGroup() Function Overflow; OSVDB ID: 9967 Mozilla Multiple Products nsPop3Protocol.cpp msg_info Overflow; OSVDB ID: 9969 Mozilla Multiple Products non-ASCII Long URL Overflow; OSVDB ID: 9970 Mozilla Multiple Products nsBMPDecoder.cpp BMP Decoding Overflow; OSVDB ID: 9971 Mozilla Multiple Products JavaScript Drag Same-Origin Violation; OSVDB ID: 8307 Mozilla Browsers FTP URI Null Character MIME Type Spoofing Arbitrary Code Execution; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 9965 Mozilla Multiple Products Text Field Script Generation Arbitrary Clipboard Content Manipulation; 0.8; OSVDB ID: 8308 Mozilla Browsers Redirect Sequence Security Icon Spoof; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 8307 Mozilla Browsers FTP URI Null Character MIME Type Spoofing Arbitrary Code Execution; OSVDB ID: 7939 Mozilla Multiple Browsers CA Certificate SSL Page DoS; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 59834 Mozilla Multiple Browser Cross-domain Frame Injection Content Spoofing; 0.9.x; OSVDB ID: 10478 Mozilla Firefox Download Directory Arbitrary File Deletion; 0.10.1; OSVDB ID: 10478 Mozilla Firefox Download Directory Arbitrary File Deletion; OSVDB ID: 10983 Multiple Browser Cross Tab Dialog Box Spoofing; OSVDB ID: 10984 Multiple Browser Cross Tab Form Focus; 0.1; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.2; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.3; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.4; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.5; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.6; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.6.1; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.7; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.7.1; OSVDB ID: 9968 Mozilla Multiple Products nsMsgCompUtils.cpp Multiple Overflows; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.10; OSVDB ID: 11128 Mozilla Firefox Large Binary File Rendering DoS; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.x; OSVDB ID: 11591 Mozilla Firefox File Download Truncation Extension Spoofing; OSVDB ID: 11592 Mozilla Firefox for MacOS Weak Permission Privilege Escalation; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 11590 Mozilla Firefox IMG Tag Remote File Existence Verification; OSVDB ID: 17397 Mozilla Multiple Browser Javascript Dialog Origin Spoofing; 1.0; OSVDB ID: 13625 Mozilla Firefox run-mozilla.sh Arbitrary File Overwrite; OSVDB ID: 14197 Mozilla Browsers XPCOM Scrollbar Arbitrary Code Execution; OSVDB ID: 16432 Mozilla Firefox Content-Type Header "Save to Disk" File Extension Spoofing; OSVDB ID: 16431 Mozilla Firefox Content-Type Crafted Header Download Dialog Spoofing; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.0.1; OSVDB ID: 15009 Mozilla Firefox Sidebar Panel Script Injection; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 17397 Mozilla Multiple Browser Javascript Dialog Origin Spoofing; 1.0.4; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 17968 Mozilla Multiple Browsers InstallVersion.compareTo() Access Violation; OSVDB ID: 59834 Mozilla Multiple Browser Cross-domain Frame Injection Content Spoofing; OSVDB ID: 17397 Mozilla Multiple Browser Javascript Dialog Origin Spoofing; 1.0.3; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 17397 Mozilla Multiple Browser Javascript Dialog Origin Spoofing; 1.0.x; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; 1.5.0.1; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 27560 Mozilla Multiple Products Simultaneous XPCOM Events Memory Corruption Arbitrary Code Execution; 1.5.0.2; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 27560 Mozilla Multiple Products Simultaneous XPCOM Events Memory Corruption Arbitrary Code Execution; 1.5.0.3; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 27560 Mozilla Multiple Products Simultaneous XPCOM Events Memory Corruption Arbitrary Code Execution; 1.5.0.4; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 27559 Mozilla Multiple Products Window Navigator Object Arbitrary Code Execution; OSVDB ID: 27560 Mozilla Multiple Products Simultaneous XPCOM Events Memory Corruption Arbitrary Code Execution; 1.5.0.5; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.5.0.6; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.5.0.7; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.5.0.8; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.5.0.9; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.5; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; OSVDB ID: 22893 Mozilla Multiple Products Location/Navigation Objects QueryInterface Memory Corruption; 2.0; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32113 Mozilla Firefox SVG _cairo_pen_init Heap Overflow; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 2.0.0.1; OSVDB ID: 32115 Mozilla Multiple Products JavaScript Engine Memory Corruption; OSVDB ID: 32114 Mozilla Multiple Products Layout Engine Memory Corruption; OSVDB ID: 32113 Mozilla Firefox SVG _cairo_pen_init Heap Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 2.0.0.2; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.5.0.10; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 0.8; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 0.9; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 0.9 rc; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 0.9.1; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 0.9.2; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 0.9.3; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 0.10; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 0.10.1; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.0; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.0.1; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.0.2; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.0.3; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.0.4; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.0.5; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.0.6; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.0.7; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.0.8; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32104 Mozilla Multiple Products location.hostname Null Byte URI Security Bypass; 1.5; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.5 beta 1; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; 1.5 beta 2; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; 1.5.0.1; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.5.0.2; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.5.0.3; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.5.0.4; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.5.0.5; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.5.0.6; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.5.0.7; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 1.5.0.9; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 2.0; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; 2.0 BETA 1; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; 2.0 RC2; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; 2.0 RC3; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; 2.0.1; OSVDB ID: 32111 Mozilla Multiple Products HTML Tag Attribute Trailing Character Content Filter Bypass; OSVDB ID: 32105 Mozilla Multiple Products NSS SSLv2 Client Overflow; 2.0.0.2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5.0.10; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 0.8; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 0.9; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 0.9.1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 0.9.2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 0.9.3; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 0.10; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 0.10.1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.0; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.0.1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.0.2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.0.3; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.0.4; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.0.5; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.0.6; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 19880 Mozilla Firefox IFRAME Width Overflow; 1.0.7; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 19880 Mozilla Firefox IFRAME Width Overflow; 1.0.8; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.5; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5 beta 1; 1.5 beta 2; 1.5.0.1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5.0.2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5.0.3; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5.0.4; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5.0.5; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5.0.6; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5.0.7; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5.0.9; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 2.0; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 2.0 BETA 1; 2.0 RC2; 2.0 RC3; 2.0.1; 0.x; 1.0.x; 1.5.0.8; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 2.0.0.1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 0.1; 0.2; 0.3; 0.4; 0.5; 0.6; 0.6.1; 0.7; 0.7.1; 1.0 RC1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.0 RC2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.1a1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.1a2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.4; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.4.1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.5 RC1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.5 rc2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.5 RC3; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.5.0.1 RC1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 2.0a1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 2.0a2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 2.0a3; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 2.0b1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 2.0b2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 2.0 RC 1; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 2.0 RC 2; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 2.0 RC 3; OSVDB ID: 32110 Mozilla Multiple Products Cache Collision Information Disclosure; OSVDB ID: 32107 Mozilla Multiple Products Blocked Popup XSS; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; 1.5.0.11; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 2.0.0.3; OSVDB ID: 32108 Mozilla Multiple Products Blocked Popup Arbitrary File Access; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 1.5.0.1rc1; OSVDB ID: 35139 Mozilla Multiple Browser Cookie Path Data DoS; 2.0.0.11; OSVDB ID: 41215 Mozilla Multiple Browsers Stylesheet Redirect URL Token Disclosure; OSVDB ID: 41218 Mozilla Multiple Browsers designMode Frame Forward Navigation Information Disclosure; OSVDB ID: 41220 Mozilla Multiple Products xpconnect Multiple Function javascript: URI Handling Cross-frame Privilege Escalation; OSVDB ID: 41221 Mozilla Multiple Browsers File Input Focus Stealing; OSVDB ID: 41222 Mozilla Multiple Products Browser Engine Multiple Unspecified Memory Corruption; OSVDB ID: 41223 Mozilla Multiple Products JavaScript Engine Multiple Unspecified Memory Corruption; OSVDB ID: 43456 Mozilla Multiple Products Exception Objects PAC Privilege Escalation; OSVDB ID: 43457 Mozilla Multiple Products Array.prototype Method javascript: URL XSS; OSVDB ID: 43458 Mozilla Multiple Products XPCNativeWrapper js_GetClassPrototype .prototype Bypass; OSVDB ID: 43459 Mozilla Multiple Products XPCNativeWrapper Redefine Bypass; OSVDB ID: 43460 Mozilla Multiple Products DOMImplementation.createDocument() Arbitrary Code Execution; OSVDB ID: 43461 Mozilla Multiple Products XMLDocument.load() Subframe XSS; OSVDB ID: 43462 Mozilla Multiple Products XML Document XMLDocument.cloneNode() Function Arbitrary Script Code Execution; OSVDB ID: 41217 Mozilla Multiple Browsers Timer-enabled Security Dialog Tampering; OSVDB ID: 86524 Mozilla Firefox < 10 Multiple Method DoS; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 2.0.0.11; 3.0.5; OSVDB ID: 51926 Mozilla Multiple Products XMLHttpRequest Call Set-Cookie Response Header Restriction Bypass; 3.0.6; OSVDB ID: 52451 Mozilla Multiple Products nsIRDFService Cross-domain Redirect Same-origin Policy Bypass; 3.5; OSVDB ID: 55846 Mozilla Firefox Just-in-time (JIT) JavaScript Compiler js/src/jstracer.cpp font HTML Tag Handling Memory Corruption; 3.5.4; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.5.3; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.5.2; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.5.1; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.5; OSVDB ID: 65109 Mozilla Firefox Invalid news / nntp URI IFRAME Element Handling Remote DoS; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.0.13; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57971 Mozilla Firefox Browser Engine Multiple Unspecified Memory Corruption (2009-3070); OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.0.12; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.0.11; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.0.10; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; OSVDB ID: 55164 Mozilla Firefox xul.dll nsJSNPRuntime.cpp NPObjWrapper_NewResolve Function Race Condition Arbitrary Code Execution; 3.0.9; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; OSVDB ID: 55164 Mozilla Firefox xul.dll nsJSNPRuntime.cpp NPObjWrapper_NewResolve Function Race Condition Arbitrary Code Execution; 3.0.8; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; OSVDB ID: 55164 Mozilla Firefox xul.dll nsJSNPRuntime.cpp NPObjWrapper_NewResolve Function Race Condition Arbitrary Code Execution; 3.0.7; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; OSVDB ID: 55164 Mozilla Firefox xul.dll nsJSNPRuntime.cpp NPObjWrapper_NewResolve Function Race Condition Arbitrary Code Execution; 3.0.6; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.0.5; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.0.4; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.0.3; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.0.2; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3.0.1; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 3; OSVDB ID: 57976 Mozilla Firefox JavaScript Engine Multiple Unspecified Memory Corruption; 0.9; 0.9.1; 0.8; 1.0.4; 3.5.7; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; 3.5.6; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; 3.5.5; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; 3.0.17; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; 3.0.16; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; 3.0.15; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; 3.0.14; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; 3.0.7 Beta; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; 3.6; OSVDB ID: 65109 Mozilla Firefox Invalid news / nntp URI IFRAME Element Handling Remote DoS; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; OSVDB ID: 77956 Mozilla Multiple Products Large OGG <video> Element Handling Remote DoS; 3.0; OSVDB ID: 63273 Mozilla Firefox Authorization Prompt Implementation toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js Concurrent Request Authorization Dialog Spoofing; 3.0.19; OSVDB ID: 64787 Mozilla Multiple Browsers mailto: URL Multiple IFRAME Element Handling DoS; OSVDB ID: 65109 Mozilla Firefox Invalid news / nntp URI IFRAME Element Handling Remote DoS; 3.5.9; OSVDB ID: 64787 Mozilla Multiple Browsers mailto: URL Multiple IFRAME Element Handling DoS; 3.6.2; OSVDB ID: 64787 Mozilla Multiple Browsers mailto: URL Multiple IFRAME Element Handling DoS; 4.0.beta7; OSVDB ID: 69758 Mozilla Firefox WebSockets Proxy Upgrade Negotiation Weakness; 3.6.12; OSVDB ID: 69776 Mozilla Multiple Products netwerk/base/public/nsNetUtil.h NS_SecurityCompareURIs Function Error Page Location Bar Spoofing Weakness; OSVDB ID: 69775 Mozilla Multiple Products Firebug Add-on XMLHttpRequestSpy Module Crafted HTTP Response Arbitrary Code Execution; OSVDB ID: 69774 Mozilla Multiple Products XUL Tree Child Content Index Value Calculation Arbitrary Code Execution; OSVDB ID: 69773 Mozilla Multiple Products about:blank Page ISINDEX Element chrome: URI Redirection Arbitrary Code Execution; OSVDB ID: 69772 Mozilla Multiple Products Rendering Engine x-mac Characters XSS; OSVDB ID: 69770 Mozilla Multiple Products Downloadable Font @font-face CSS Rule Arbitrary Code Execution; OSVDB ID: 69769 Mozilla Multiple Products JavaScript Array NewIdArray Function Overflow; OSVDB ID: 69768 Mozilla Multiple Products nsDOMAttribute Node Use-after-free Arbitrary Code Execution; OSVDB ID: 69777 Mozilla Multiple Products data: URL Java LiveConnect Script Redirection Weakness; OSVDB ID: 69778 Mozilla Multiple Products Browser Engine Unspecified Memory Corruption (2010-3776); OSVDB ID: 69780 Mozilla Multiple Products Unspecified Memory Corruption (2010-3778); OSVDB ID: 69779 Mozilla Multiple Products Unspecified Memory Corruption (2010-3777); 3.5.15; OSVDB ID: 69776 Mozilla Multiple Products netwerk/base/public/nsNetUtil.h NS_SecurityCompareURIs Function Error Page Location Bar Spoofing Weakness; OSVDB ID: 69775 Mozilla Multiple Products Firebug Add-on XMLHttpRequestSpy Module Crafted HTTP Response Arbitrary Code Execution; OSVDB ID: 69774 Mozilla Multiple Products XUL Tree Child Content Index Value Calculation Arbitrary Code Execution; OSVDB ID: 69773 Mozilla Multiple Products about:blank Page ISINDEX Element chrome: URI Redirection Arbitrary Code Execution; OSVDB ID: 69772 Mozilla Multiple Products Rendering Engine x-mac Characters XSS; OSVDB ID: 69770 Mozilla Multiple Products Downloadable Font @font-face CSS Rule Arbitrary Code Execution; OSVDB ID: 69769 Mozilla Multiple Products JavaScript Array NewIdArray Function Overflow; OSVDB ID: 69768 Mozilla Multiple Products nsDOMAttribute Node Use-after-free Arbitrary Code Execution; OSVDB ID: 69777 Mozilla Multiple Products data: URL Java LiveConnect Script Redirection Weakness; OSVDB ID: 69778 Mozilla Multiple Products Browser Engine Unspecified Memory Corruption (2010-3776); OSVDB ID: 69780 Mozilla Multiple Products Unspecified Memory Corruption (2010-3778); OSVDB ID: 69779 Mozilla Multiple Products Unspecified Memory Corruption (2010-3777); Unspecified; OSVDB ID: 70137 Mozilla Firefox about:cache Cleartext Credential Local Disclosure; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; OSVDB ID: 82560 Mozilla Firefox Cross-Origin Window Forced Navigation Weakness; OSVDB ID: 85927 Transport Layer Security (TLS) Protocol v1.2 Chosen Plaintext Attack Cryptanalysis Compromise (CRIME); 3.6.11; OSVDB ID: 86535 Mozilla Firefox < 15 Multiple Method DoS; OSVDB ID: 68905 Mozilla Firefox DOM Insertion document.write() Unspecified Overflow; 3.5.14; OSVDB ID: 68905 Mozilla Firefox DOM Insertion document.write() Unspecified Overflow; 3.6.10; OSVDB ID: 68854 Mozilla Multiple Products LookupGetterOrSetter Function window.__lookupGetter__ Function Call Crafted HTML Document Arbitrary Code Execution; OSVDB ID: 68846 Mozilla Multiple Products Browser Engine Multiple Unspecified Memory Corruption (2010-3175); OSVDB ID: 68847 Mozilla Multiple Products Browser Engine Multiple Unspecified Memory Corruption (2010-3176); OSVDB ID: 68848 Mozilla Multiple Products Gopher Parser Crafted File / Directory Name XSS; OSVDB ID: 68849 Mozilla Multiple Products Javascript: URL Modal Call Crafted HTML Document Same Origin Policy Bypass; OSVDB ID: 68850 Mozilla Multiple Products Text-rendering document.write Method Long Argument Overflow; OSVDB ID: 68851 Mozilla Multiple Products nsBarProp Function Use-after-free Closed Window locationbar Property Arbitrary Code Execution; OSVDB ID: 68852 Mozilla Multiple Products Path Subversion Arbitrary DLL Injection Code Execution (2010-3181); OSVDB ID: 68844 Mozilla Multiple Products SSL Implementation Diffie-Hellman Ephemeral Mode Minimum Key Length Brute Force Weakness; 3.5.13; OSVDB ID: 68854 Mozilla Multiple Products LookupGetterOrSetter Function window.__lookupGetter__ Function Call Crafted HTML Document Arbitrary Code Execution; OSVDB ID: 68845 Mozilla Multiple Products Browser Engine Unspecified Memory Corruption (2010-3174); OSVDB ID: 68847 Mozilla Multiple Products Browser Engine Multiple Unspecified Memory Corruption (2010-3176); OSVDB ID: 68848 Mozilla Multiple Products Gopher Parser Crafted File / Directory Name XSS; OSVDB ID: 68849 Mozilla Multiple Products Javascript: URL Modal Call Crafted HTML Document Same Origin Policy Bypass; OSVDB ID: 68850 Mozilla Multiple Products Text-rendering document.write Method Long Argument Overflow; OSVDB ID: 68851 Mozilla Multiple Products nsBarProp Function Use-after-free Closed Window locationbar Property Arbitrary Code Execution; OSVDB ID: 68852 Mozilla Multiple Products Path Subversion Arbitrary DLL Injection Code Execution (2010-3181); OSVDB ID: 68844 Mozilla Multiple Products SSL Implementation Diffie-Hellman Ephemeral Mode Minimum Key Length Brute Force Weakness; 4.0; OSVDB ID: 72075 Mozilla Multiple Products Unspecified Memory Corruption (2011-0081); OSVDB ID: 72076 Mozilla Multiple Products Unspecified Remote DoS (2011-0069); OSVDB ID: 72077 Mozilla Multiple Products Unspecified Remote DoS (2011-0070); OSVDB ID: 72077 Mozilla Multiple Products Unspecified Remote DoS (2011-0070); OSVDB ID: 72074 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-0079); OSVDB ID: 86518 Mozilla Firefox < 6 Multiple Method DoS; OSVDB ID: 86516 Mozilla Firefox < 5 Multiple Method DoS; OSVDB ID: 86526 Mozilla Firefox < 11 Multiple Method DoS; OSVDB ID: 86496 Mozilla Firefox < 9 Multiple Method DoS; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; OSVDB ID: 72093 ANGLE WebGLES Graphics Library Program::getActiveUniformMaxLength Off-by-three Overflow; OSVDB ID: 72091 Mozilla Firefox for Windows WebGLES Library Missing ASLR Protection Weakness; OSVDB ID: 73801 ANGLE WebGLES Graphics Library AddString Shader Loading Overflow; OSVDB ID: 72094 Mozilla Multiple Products XSLT generate-id() Heap Address Disclosure Weakness; 4.0; 3.6.16; OSVDB ID: 72075 Mozilla Multiple Products Unspecified Memory Corruption (2011-0081); OSVDB ID: 72078 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-0080); OSVDB ID: 72085 Mozilla Multiple Products OBJECT's mChannel Use-after-free Remote Code Execution; OSVDB ID: 72085 Mozilla Multiple Products OBJECT's mChannel Use-after-free Remote Code Execution; OSVDB ID: 72086 Mozilla Multiple Products OBJECT's mObserverList Use-after-free Remote Code Execution; OSVDB ID: 72088 Mozilla Multiple Products Java Applet Form Autocomplete Form History Information Disclosure; OSVDB ID: 72076 Mozilla Multiple Products Unspecified Remote DoS (2011-0069); OSVDB ID: 72077 Mozilla Multiple Products Unspecified Remote DoS (2011-0070); OSVDB ID: 72077 Mozilla Multiple Products Unspecified Remote DoS (2011-0070); OSVDB ID: 72090 Mozilla Multiple Products resource: Protocol Traversal Arbitrary File Access; OSVDB ID: 72084 Mozilla Multiple Products Unspecified Memory Corruption (2011-0072); OSVDB ID: 72087 Mozilla Multiple Products nsTreeRange Dangling Pointer Remote Code Execution; OSVDB ID: 72080 Mozilla Multiple Products Unspecified Memory Corruption (2011-0074); OSVDB ID: 72081 Mozilla Multiple Products Unspecified Memory Corruption (2011-0075); OSVDB ID: 72089 Mozilla Multiple Products for Mac OS X Java Embedding Plugin Unspecified Privilege Escalation; OSVDB ID: 72082 Mozilla Multiple Products Unspecified Memory Corruption (2011-0077); OSVDB ID: 72083 Mozilla Multiple Products Unspecified Memory Corruption (2011-0078); OSVDB ID: 72094 Mozilla Multiple Products XSLT generate-id() Heap Address Disclosure Weakness; 4.0; 3.6.16; 3.5.18; OSVDB ID: 72078 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-0080); OSVDB ID: 72085 Mozilla Multiple Products OBJECT's mChannel Use-after-free Remote Code Execution; OSVDB ID: 72085 Mozilla Multiple Products OBJECT's mChannel Use-after-free Remote Code Execution; OSVDB ID: 72086 Mozilla Multiple Products OBJECT's mObserverList Use-after-free Remote Code Execution; OSVDB ID: 72088 Mozilla Multiple Products Java Applet Form Autocomplete Form History Information Disclosure; OSVDB ID: 72076 Mozilla Multiple Products Unspecified Remote DoS (2011-0069); OSVDB ID: 72077 Mozilla Multiple Products Unspecified Remote DoS (2011-0070); OSVDB ID: 72077 Mozilla Multiple Products Unspecified Remote DoS (2011-0070); OSVDB ID: 72090 Mozilla Multiple Products resource: Protocol Traversal Arbitrary File Access; OSVDB ID: 72084 Mozilla Multiple Products Unspecified Memory Corruption (2011-0072); OSVDB ID: 72087 Mozilla Multiple Products nsTreeRange Dangling Pointer Remote Code Execution; OSVDB ID: 72080 Mozilla Multiple Products Unspecified Memory Corruption (2011-0074); OSVDB ID: 72081 Mozilla Multiple Products Unspecified Memory Corruption (2011-0075); OSVDB ID: 72089 Mozilla Multiple Products for Mac OS X Java Embedding Plugin Unspecified Privilege Escalation; OSVDB ID: 72082 Mozilla Multiple Products Unspecified Memory Corruption (2011-0077); OSVDB ID: 72083 Mozilla Multiple Products Unspecified Memory Corruption (2011-0078); OSVDB ID: 72094 Mozilla Multiple Products XSLT generate-id() Heap Address Disclosure Weakness; 4.0; 3.6.16; 3.5.18; 4.0; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 3.6.16; 3.5.18; 4.0; 4.0; 4.0; 3.6.16; 3.5.18; 4.0; 3.6.13; OSVDB ID: 72457 Mozilla Multiple Products js3250.dll JSON.stringify() Method js_HasOwnProperty() Function Use-after-free Remote Code Execution; OSVDB ID: 72440 Mozilla Multiple Products popTemplateRule Call txExecutionState.init Memory Corruption DoS; OSVDB ID: 72441 Mozilla Multiple Products v_ins->isF64() /jstracer.cpp:9347 Assertion Failure Memory Corruption; OSVDB ID: 72442 Mozilla Multiple Products abs.pos. Continuations Style Context Memory Corruption; OSVDB ID: 72443 Mozilla Multiple Products Valgrind Testcase Invalid Read / Write Memory Corruption; OSVDB ID: 72444 Mozilla Multiple Products nsSHTransaction::GetPrev Memory Corruption DoS; OSVDB ID: 72445 Mozilla Multiple Products js/src/xpconnect/src/xpcwrappednative.cpp Incorrect Scope Passed Assertion Memory Corruption; OSVDB ID: 72446 Mozilla Multiple Products AddRef() nsNPAPIPluginInstance::mOwner Deleted Object Memory Corruption DoS; OSVDB ID: 72447 Mozilla Multiple Products nsEUCJPToUnicodeV2::Convert Buffer Writing Memory Corruption DoS; OSVDB ID: 72449 Mozilla Multiple Products jstracer.cpp TraceRecorder::box_jsval() Function Memory Corruption; OSVDB ID: 72448 Mozilla Multiple Products nsUTF8ToUnicode Buffer Overrun Memory Corruption; OSVDB ID: 72437 Mozilla Multiple Products jsapi.cpp JS_ResolveStandardClass String.prototype Memory Corruption DoS; OSVDB ID: 72438 Mozilla Multiple Products nsXULTemplateBuilder/nsXULTemplateQueryProcessorXML Data Loading Memory Corruption; OSVDB ID: 72439 Mozilla Multiple Products GC / OOM Reporting Title Lock Function Allocation Memory Corruption; OSVDB ID: 72456 Mozilla Multiple Products try/catch Statement eval() Recursive Call Handling Privilege Escalation; OSVDB ID: 72458 Mozilla Multiple Products Non-Local JavaScript Internal Memory Mapping Overflow; OSVDB ID: 72459 Mozilla Multiple Products Baseline JavaScript Internal String Mapping Atom Map Overflow; OSVDB ID: 72460 Mozilla Multiple Products Web Workers Garbage Collection Use-after-free Remote Code Execution; OSVDB ID: 72461 Mozilla Multiple Products Layout Objects Long Text Run Overflow; OSVDB ID: 72467 Mozilla Multiple Products Plugin Request 307 Redirect Response CSRF; OSVDB ID: 72466 Mozilla Multiple Products JPEG Image Decoding Overflow; OSVDB ID: 72454 Mozilla Multiple Products JSObject::dropProperty Memory Corruption; 3.5.16; OSVDB ID: 72457 Mozilla Multiple Products js3250.dll JSON.stringify() Method js_HasOwnProperty() Function Use-after-free Remote Code Execution; OSVDB ID: 72440 Mozilla Multiple Products popTemplateRule Call txExecutionState.init Memory Corruption DoS; OSVDB ID: 72441 Mozilla Multiple Products v_ins->isF64() /jstracer.cpp:9347 Assertion Failure Memory Corruption; OSVDB ID: 72442 Mozilla Multiple Products abs.pos. Continuations Style Context Memory Corruption; OSVDB ID: 72443 Mozilla Multiple Products Valgrind Testcase Invalid Read / Write Memory Corruption; OSVDB ID: 72444 Mozilla Multiple Products nsSHTransaction::GetPrev Memory Corruption DoS; OSVDB ID: 72445 Mozilla Multiple Products js/src/xpconnect/src/xpcwrappednative.cpp Incorrect Scope Passed Assertion Memory Corruption; OSVDB ID: 72446 Mozilla Multiple Products AddRef() nsNPAPIPluginInstance::mOwner Deleted Object Memory Corruption DoS; OSVDB ID: 72447 Mozilla Multiple Products nsEUCJPToUnicodeV2::Convert Buffer Writing Memory Corruption DoS; OSVDB ID: 72449 Mozilla Multiple Products jstracer.cpp TraceRecorder::box_jsval() Function Memory Corruption; OSVDB ID: 72448 Mozilla Multiple Products nsUTF8ToUnicode Buffer Overrun Memory Corruption; OSVDB ID: 72437 Mozilla Multiple Products jsapi.cpp JS_ResolveStandardClass String.prototype Memory Corruption DoS; OSVDB ID: 72438 Mozilla Multiple Products nsXULTemplateBuilder/nsXULTemplateQueryProcessorXML Data Loading Memory Corruption; OSVDB ID: 72439 Mozilla Multiple Products GC / OOM Reporting Title Lock Function Allocation Memory Corruption; OSVDB ID: 72456 Mozilla Multiple Products try/catch Statement eval() Recursive Call Handling Privilege Escalation; OSVDB ID: 72458 Mozilla Multiple Products Non-Local JavaScript Internal Memory Mapping Overflow; OSVDB ID: 72459 Mozilla Multiple Products Baseline JavaScript Internal String Mapping Atom Map Overflow; OSVDB ID: 72460 Mozilla Multiple Products Web Workers Garbage Collection Use-after-free Remote Code Execution; OSVDB ID: 72461 Mozilla Multiple Products Layout Objects Long Text Run Overflow; OSVDB ID: 72467 Mozilla Multiple Products Plugin Request 307 Redirect Response CSRF; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; 3.5.16; 3.6.13; OSVDB ID: 72465 Mozilla Multiple Products ParanoidFragmentSink nsIScriptableUnescapeHTML.parseFragment Method javascript: URI Remote Code Execution; 3.5.16; OSVDB ID: 72465 Mozilla Multiple Products ParanoidFragmentSink nsIScriptableUnescapeHTML.parseFragment Method javascript: URI Remote Code Execution; 3.6.13; 3.6.13; 3.5.16; 3.6.17; OSVDB ID: 73177 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-2374); OSVDB ID: 73179 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-2376); OSVDB ID: 73181 Mozilla Multiple Products Unspecified DoS (2011-2365); OSVDB ID: 73182 Mozilla Multiple Products XUL Document Handling Use-after-free Arbitrary Code Execution; OSVDB ID: 73183 Mozilla Multiple Products multipart/x-mixed-replace Image Handling Memory Corruption; OSVDB ID: 73187 Mozilla Multiple Products nsXULCommandDispatcher.cpp Use-after-free Remote Code Execution; OSVDB ID: 73185 Mozilla Multiple Products nsSVGPathSegList::ReplaceItem() Use-after-free Remote Code Execution; OSVDB ID: 73188 Mozilla Multiple Products Trailing Dot Cookie Cross-domain Information Disclosure; OSVDB ID: 73186 Mozilla Multiple Products nsSVGPointList::AppendElement() Use-after-free Remote Code Execution; OSVDB ID: 73180 Mozilla Multiple Products Unspecified DoS (2011-2364); OSVDB ID: 73184 Mozilla Multiple Products Array.reduceRight() Method Overflow; 4; OSVDB ID: 73177 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-2374); OSVDB ID: 73178 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-2375); OSVDB ID: 73182 Mozilla Multiple Products XUL Document Handling Use-after-free Arbitrary Code Execution; OSVDB ID: 73183 Mozilla Multiple Products multipart/x-mixed-replace Image Handling Memory Corruption; OSVDB ID: 73186 Mozilla Multiple Products nsSVGPointList::AppendElement() Use-after-free Remote Code Execution; OSVDB ID: 73190 Mozilla Multiple Products WebGL Out-of-bounds Read GPU Processes Information Disclosure; OSVDB ID: 73191 Mozilla Multiple Products WebGL Invalid Write Remote Code Execution; OSVDB ID: 73192 Mozilla Multiple Products HTML-encoded Entities SVG Elements XSS; OSVDB ID: 73193 Mozilla Multiple Products Non-whitelisted Site Install Dialog Triggering Weakness; OSVDB ID: 73184 Mozilla Multiple Products Array.reduceRight() Method Overflow; OSVDB ID: 73189 Mozilla Multiple Products WebGL Texture Image Rendering Cross-domain Image Data Disclosure; 4; 3.6.17; 3.6.17; 3.6.17; 3.6.17; 4; 3.6.17; 4; 3.6.17; 4; 3.6.17; 3.6.17; 4; 3.6.17; 3.6.17; 4; 4; 4; 4; 4; 4; OSVDB ID: 74581 Mozilla Multiple Products SVGTextElement.getCharNumAtPosition() Function SVG Text Handling Remote Code Execution; OSVDB ID: 74589 Mozilla Multiple Products D2D API Same Origin Policy Bypass Image Data Disclosure; OSVDB ID: 74590 Mozilla Multiple Products WebGL Almost Native Graphics Layer Engine (ANGLE) Shader Pre-Processor Overflow; OSVDB ID: 74591 Mozilla Multiple Products WebGL Shader Compiler ShaderSource Method Overflow; OSVDB ID: 74592 Mozilla Multiple Products WebGL Unspecified DoS; OSVDB ID: 74593 Mozilla Multiple Products Content Security Policy (CSP) Violation Report Proxy-Authorization Credential Disclosure; OSVDB ID: 74594 Mozilla Multiple Products JavaScript Unspecified DoS; OSVDB ID: 74595 Mozilla Multiple Products Ogg Reader Unspecified DoS; OSVDB ID: 74596 Mozilla Multiple Products JAR Digital Signature Same Origin Policy Bypass Privilege Escalation; 5; OSVDB ID: 74581 Mozilla Multiple Products SVGTextElement.getCharNumAtPosition() Function SVG Text Handling Remote Code Execution; OSVDB ID: 74589 Mozilla Multiple Products D2D API Same Origin Policy Bypass Image Data Disclosure; OSVDB ID: 74590 Mozilla Multiple Products WebGL Almost Native Graphics Layer Engine (ANGLE) Shader Pre-Processor Overflow; OSVDB ID: 74591 Mozilla Multiple Products WebGL Shader Compiler ShaderSource Method Overflow; OSVDB ID: 74592 Mozilla Multiple Products WebGL Unspecified DoS; OSVDB ID: 74593 Mozilla Multiple Products Content Security Policy (CSP) Violation Report Proxy-Authorization Credential Disclosure; OSVDB ID: 74594 Mozilla Multiple Products JavaScript Unspecified DoS; OSVDB ID: 74595 Mozilla Multiple Products Ogg Reader Unspecified DoS; OSVDB ID: 74596 Mozilla Multiple Products JAR Digital Signature Same Origin Policy Bypass Privilege Escalation; 3.6.19; OSVDB ID: 74581 Mozilla Multiple Products SVGTextElement.getCharNumAtPosition() Function SVG Text Handling Remote Code Execution; OSVDB ID: 74583 Mozilla Multiple Products ThinkPadSensor::Startup() Function Path Subversion Arbitrary DLL Injection Code Execution; OSVDB ID: 74584 Mozilla Multiple Products Event-Management Same Origin Policy Bypass Remote Code Execution; OSVDB ID: 74585 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-2982); OSVDB ID: 74586 Mozilla Multiple Products RegExp.input Property Same Origin Policy Bypass Information Disclosure; OSVDB ID: 74587 Mozilla Multiple Products Tab Element Dropping Weakness Remote Code Execution; OSVDB ID: 74582 Mozilla Multiple Products .appendChild() Function DOM Object Handling Remote Code Execution; 3.6.19; 3.6.19; 3.6.19; 3.6.19; 3.6.19; 3.6.19; 4; OSVDB ID: 74588 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-2985); 5; OSVDB ID: 74588 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2011-2985); 4; 5; 4; 5; 4; 5; 4; 5; 4; 5; 4; 5; 4; 5; 4; 5; 8.0; OSVDB ID: 77952 Mozilla Multiple Products Multiple Unspecified Remote Memory Corruption; OSVDB ID: 77951 Mozilla Multiple Products YARR Regular Expression Library Javascript Parsing Remote Code Execution; OSVDB ID: 77954 Mozilla Multiple Products SVG Animation accessKey Event Handling Disabled Javascript Key Stroke Detection Prevention Bypass; OSVDB ID: 77955 Mozilla Multiple Products for Mac DOM Frame Deletion NULL Dereference Remote Code Execution; OSVDB ID: 77956 Mozilla Multiple Products Large OGG <video> Element Handling Remote DoS; OSVDB ID: 86526 Mozilla Firefox < 11 Multiple Method DoS; OSVDB ID: 86524 Mozilla Firefox < 10 Multiple Method DoS; OSVDB ID: 86529 Mozilla Firefox < 12 Multiple Method DoS; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; OSVDB ID: 77953 Mozilla Multiple Products DOMAttrModified nsSVGValue Observer Handling Out-of-bounds Memory Access Remote Code Execution; 8.0; 8.0; 8.0; 8.0; 8.0; 3.6; 10.0.2; OSVDB ID: 80010 Mozilla Multiple Product shlwapi.dll Use-after-free Child Window Closing File Open Dialog Remote Code Execution; 11.0; OSVDB ID: 81516 Mozilla Multiple Product gfxImageSurface Class Graphic Value Handling Remote Overflow; OSVDB ID: 81517 Mozilla Multiple Product Multi-octet Encoding XSS; OSVDB ID: 81520 Mozilla Multiple Product Docshell Page Loading URL Display Manipulation XSS; OSVDB ID: 81522 Mozilla Multiple Product ISO-2022-KR / ISO-2022-CN Character Set Decoding XSS; OSVDB ID: 81513 Mozilla Multiple Product Multiple Unspecified Remote Memory Corruption; OSVDB ID: 81519 Mozilla Multiple Product WebGL.drawElements() Function Template Argument Handling Video Memory Information Disclosure; OSVDB ID: 81523 Mozilla Multiple Product WebGL texImage2D() Function JSVAL_TO_OBJECT Remote Code Execution; OSVDB ID: 81524 Mozilla Multiple Product RSS / Atom XML HTTPS Content Loading URL Spoofing Weakness; OSVDB ID: 81521 Mozilla Multiple Product IPv6 XMLHttpRequest / WebSocket Handling Same Origin Policy Bypass; OSVDB ID: 81526 Mozilla Multiple Product Cross-Origin Error Message Leak Information Disclosure; OSVDB ID: 81514 Mozilla Multiple Product jsval.h js::array_shift Function Unspecified Remote Memory Corruption; OSVDB ID: 81518 Mozilla Multiple Product cairo_dwrite_font_face() Function Font Rendering Memory Corruption; OSVDB ID: 81533 Mozilla Firefox document.write() Memory Exhaustion Remote DoS; OSVDB ID: 81515 Mozilla Multiple Product XPConnect Hashtable Use-after-free indexedDB IDBKeyRange Handling Remote Code Execution; OSVDB ID: 86529 Mozilla Firefox < 12 Multiple Method DoS; OSVDB ID: 86532 Mozilla Firefox < 13 Multiple Method DoS; OSVDB ID: 80740 Google ots (OpenType Sanitizer) GSUB/GPOS Parser Off-by-one Arbitrary Code Execution; 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; 11.0; 10; OSVDB ID: 79216 Mozilla Multiple Product nsXBLDocumentInfo::ReadPrototypeBindings() Method Use-After-Free XBL Binding Handling Remote Code Execution; OSVDB ID: 80019 Mozilla Multiple Product Unspecified Memory Corruption (2012-0462); OSVDB ID: 80021 Mozilla Multiple Product Unspecified Memory Corruption (2012-0463); 3.6.27; OSVDB ID: 80011 Mozilla Multiple Product Drag and Drop Action XSS Weakness; OSVDB ID: 80012 Mozilla Multiple Product SVG Filter Out-of-bounds Read Information Disclosure; OSVDB ID: 80013 Mozilla Multiple Product Use-after-free nsSMILTimeValueSpec::ConvertBetweenTimeContainers() Function SVG Animation Handling Remote Code Execution; OSVDB ID: 80015 Mozilla Multiple Product javascript: Home Page Handling about:sessionrestore Content Script Code Execution; OSVDB ID: 80018 Mozilla Multiple Product Unspecified Memory Corruption DoS; OSVDB ID: 80021 Mozilla Multiple Product Unspecified Memory Corruption (2012-0463); OSVDB ID: 80020 Mozilla Multiple Product array.join() Function Unspecified Memory Corruption; 10.0; OSVDB ID: 80014 Mozilla Multiple Product Content Security Policy Header XSS Weakness; OSVDB ID: 80011 Mozilla Multiple Product Drag and Drop Action XSS Weakness; OSVDB ID: 80012 Mozilla Multiple Product SVG Filter Out-of-bounds Read Information Disclosure; OSVDB ID: 80013 Mozilla Multiple Product Use-after-free nsSMILTimeValueSpec::ConvertBetweenTimeContainers() Function SVG Animation Handling Remote Code Execution; OSVDB ID: 80015 Mozilla Multiple Product javascript: Home Page Handling about:sessionrestore Content Script Code Execution; OSVDB ID: 80016 Mozilla Multiple Product Keyframe cssText Access Remote Code Execution; OSVDB ID: 80017 Mozilla Multiple Product window.fullScreen Property mozRequestFullScreen Policy Bypass; OSVDB ID: 80017 Mozilla Multiple Product window.fullScreen Property mozRequestFullScreen Policy Bypass; OSVDB ID: 80018 Mozilla Multiple Product Unspecified Memory Corruption DoS; OSVDB ID: 80020 Mozilla Multiple Product array.join() Function Unspecified Memory Corruption; 10.0.2; OSVDB ID: 80020 Mozilla Multiple Product array.join() Function Unspecified Memory Corruption; Unspecified; 12.0; OSVDB ID: 82665 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1938); OSVDB ID: 86532 Mozilla Firefox < 13 Multiple Method DoS; OSVDB ID: 86533 Mozilla Firefox < 14 Multiple Method DoS; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; OSVDB ID: 82675 Mozilla Multiple Product Network Security Services ASN.1 Decoder Zero Length Item OCSP Response Handling Remote DoS; OSVDB ID: 82730 Mozilla Multiple Product NVIDIA Driver WebGL Implementation glBufferData Function Remote Code Execution; OSVDB ID: 82671 Mozilla Multiple Product Updater Service Arbitrary DLL Loading Local Privilege Escalation; 12.0; OSVDB ID: 82667 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1937); 12.0; 12.0; OSVDB ID: 82669 Mozilla Multiple Product utf16_to_isolatin1 Unicode Character Set Conversion Overflow; 12.0; OSVDB ID: 82670 Mozilla Multiple Product Updater Service wsock32.dll Module Loading Local Privilege Escalation; 12.0; 12.0; OSVDB ID: 82672 Mozilla Multiple Product Content Security Policy Inline Event Handlers XSS Protection Bypass; 12.0; OSVDB ID: 82673 Mozilla Multiple Product Windows Shares HTML Page Loading Arbitrary File Access; 12.0; OSVDB ID: 82674 Mozilla Multiple Product Use-after-free nsINode::ReplaceOrInsertBefore Document Node Insertion / Replacement Remote Code Execution; 12.0; 12.0; OSVDB ID: 82676 Mozilla Multiple Product Use-after-free nsFrameList::FirstChild Function Absolutely Positioned Element Column Container Size Manipulation Remote Code Execution; 12.0; OSVDB ID: 82677 Mozilla Multiple Product nsHTMLReflowState::CalculateHypotheticalBox Function Absolutely / Relatively Positioned Nested Column Element Window Resizing Overflow; 12.0; 9; OSVDB ID: 78738 Mozilla Multiple Products mImageBufferSize() Method image/vnd.microsoft.icon Image Encoding Information Disclosure; 13.0; OSVDB ID: 83039 Mozilla Firefox Long Unicode String Handling DoS; OSVDB ID: 86533 Mozilla Firefox < 14 Multiple Method DoS; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; 4.0; 4.0.1; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta1; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta2; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta3; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta4; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta5; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta6; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta7; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta8; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta9; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta10; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta11; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 4.0 beta12; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 5.0; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 5.0.1; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 6.0; OSVDB ID: 86518 Mozilla Firefox < 6 Multiple Method DoS; OSVDB ID: 86520 Mozilla Firefox < 8 Multiple Method DoS; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 6.0.1; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 6.0.2; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 7.0; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 7.0.1; OSVDB ID: 86533 Mozilla Firefox < 14 Multiple Method DoS; OSVDB ID: 83115 Mozilla Multiple Products nsHTMLSelectElement.cpp nsHTMLSelectElement Function Use-after-free Remote Code Execution; 8.0; 13; OSVDB ID: 83340 Mozilla Firefox New Tab Thumbnails Information Disclosure; OSVDB ID: 86533 Mozilla Firefox < 14 Multiple Method DoS; OSVDB ID: 83995 Mozilla Multiple Product nsDocument::AdoptNode() Function Document Load Handling Use-after-free Remote Code Execution; OSVDB ID: 83996 Mozilla Multiple Product History Navigation Handling URL Bar Spoofing; OSVDB ID: 84000 Mozilla Multiple Product Feed-View Functionality XSS; OSVDB ID: 84004 Mozilla Multiple Product JSDependentString::undepend() Function Dependent String Conversion Memory Corruption; OSVDB ID: 84012 Mozilla Firefox feed: URL Handling Outfilter Filter Bypass XSS Weakness; OSVDB ID: 84007 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1948); OSVDB ID: 83997 Mozilla Multiple Product nsSMILTimeValueSpec::IsEventBased Function Unspecified Use-after-free Remote Code Execution; OSVDB ID: 83998 Mozilla Multiple Product ElementAnimations::EnsureStyleRuleFor() Function Out-of-bounds Read Overflow; OSVDB ID: 83999 Mozilla Multiple Product nsTableFrame::InsertFrames Bad Cast Memory Corruption; OSVDB ID: 84001 Mozilla Multiple Product nsGlobalWindow::PageHidden() Function Focus Event Handling Use-after-free Remote Code Execution; OSVDB ID: 84002 Mozilla Multiple Product Compartment Handling Same-Compartment Security Wrapper (SCSW) Policy Bypass; OSVDB ID: 84003 Mozilla Multiple Product X-Frame-Options Header Handling Clickjacking Weakness; OSVDB ID: 84005 Mozilla Multiple Product Content Security Policy (CSP) Implementation blocked-uri Parameter Information Disclosure; OSVDB ID: 84008 Mozilla Firefox Drag and Drop Event Handling URL Bar Spoofing; OSVDB ID: 84009 Mozilla Firefox Context Menu Functionality data: URL XSS; OSVDB ID: 84011 Mozilla Multiple Product about:certerror Page Certificate Exception Handling Clickjacking Weakness; OSVDB ID: 84013 Mozilla Multiple Product JavaScript SandBox Utility javascript: URL Handling Remote Code Execution; 3.6.4; OSVDB ID: 83039 Mozilla Firefox Long Unicode String Handling DoS; 8.0; OSVDB ID: 83562 Mozilla Firefox nsObjectLoadingContent.cpp mChannel Null Pointer Dereference; 13; 13; 13; 13; 13; 13; 13; 13; 13; 13; 13; 13; OSVDB ID: 84006 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1949); 13; 13; 13; 13; OSVDB ID: 84010 Mozilla Multiple Product qcms_transform_data_rgb_out_lut_sse2 (Color Management Library) Out-of-bounds Read Memory Information Disclosure; 13; 13; 13; 14; OSVDB ID: 84959 Mozilla Multiple Product nsRangeUpdater::SelAdjDeleteNode Use-after-free Remote Code Execution; OSVDB ID: 84960 Mozilla Multiple Product mozSpellChecker::SetCurrentDictionary Use-after-free Remote Code Execution; OSVDB ID: 84961 Mozilla Multiple Product RangeData::~RangeData Use-after-free Remote Code Execution; OSVDB ID: 84962 Mozilla Multiple Product js::gc::MapAllocToTraceKind Use-after-free Remote Code Execution; OSVDB ID: 84963 Mozilla Multiple Product gfxTextRun::GetUserData Use-after-free Remote Code Execution; OSVDB ID: 84964 Mozilla Multiple Product nsHTMLEditor::CollapseAdjacentTextNodes Use-after-free Remote Code Execution; OSVDB ID: 84968 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1971); OSVDB ID: 84989 Mozilla Multiple Product Text Runs Memory Corruption; OSVDB ID: 84990 Mozilla Multiple Product Object.defineProperty window.location Shadowing XSS Weakness; OSVDB ID: 85004 Mozilla Multiple Product nsSVGFEMorphologyElement::Filter Unspecified Value Addition Handling Overflow; OSVDB ID: 85005 Mozilla Firefox HTTPMonitor Extension Remote Debugging Weakness; OSVDB ID: 84993 Mozilla Multiple Product WebGL Shader Use-after-free Remote Code Execution; OSVDB ID: 84970 Mozilla Multiple Product gfxTextRun::CanBreakLineBefore Use-after-free Remote Code Execution; OSVDB ID: 84971 Mozilla Multiple Product PresShell::CompleteMove Use-after-free Remote Code Execution; OSVDB ID: 84972 Mozilla Multiple Product nsHTMLSelectElement::SubmitNamesValues Use-after-free Remote Code Execution; OSVDB ID: 84973 Mozilla Multiple Product MediaStreamGraphThreadRunnable::Run() Use-after-free Remote Code Execution; OSVDB ID: 84974 Mozilla Multiple Product nsBlockFrame::MarkLineDirty Use-after-free Remote Code Execution; OSVDB ID: 84996 Mozilla Multiple Product Graphite 2 Library Unspecified Memory Corruption; OSVDB ID: 84994 Mozilla Multiple Product for Linux Mesa Drivers >16 Sampler Uniform Handling Memory Corruption; OSVDB ID: 84995 Mozilla Multiple Product nsTArray_base::Length() requiredFeatures Attribute Move Handling Use-after-free Remote Code Execution; OSVDB ID: 84999 Mozilla Multiple Product DOMParser text/html Data Parsing Information Disclosure; OSVDB ID: 84998 Mozilla Multiple Product Root Partition Executable Execution; OSVDB ID: 85003 Mozilla Multiple Product Web Console eval() Remote Code Execution; OSVDB ID: 85001 Mozilla Multiple Product nsLocation::CheckURL Content Loading Restriction Bypass; OSVDB ID: 85000 Mozilla Multiple Product OnLocationChange Event Handling Previous Site SSL Certificate Information Display; OSVDB ID: 85002 Mozilla Firefox __android_log_print dump() Statement Handing Remote Code Execution; OSVDB ID: 84991 Mozilla Firefox Crafted about:newtab Context Handling Privileged Code Execution; OSVDB ID: 84975 Mozilla Multiple Product nsHTMLEditRules::DeleteNonTableElements Use-after-free Remote Code Execution; OSVDB ID: 84969 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-1970); OSVDB ID: 84965 Mozilla Multiple Product nsObjectLoadingContent::LoadObject Use-after-free Remote Code Execution; OSVDB ID: 84992 Mozilla Multiple Product Negative Height Header Value BMP Image File Handling Memory Corruption; OSVDB ID: 84997 Mozilla Multiple Product XSLT Format-Number Feature Out-of-bounds Read Information Disclosure; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; 14; Unspecified; 15; OSVDB ID: 86102 Mozilla Multiple Product IME State Manager nsIContent::GetNameSpaceID() Function Use-after-free Arbitrary Code Execution; OSVDB ID: 86115 Mozilla Multiple Product nsHTMLCSSUtils::CreateCSSPropertyTxn() Function Use-after-free Arbitrary Code Execution; OSVDB ID: 86099 Mozilla Multiple Product nsHTMLEditor::IsPrevCharInNodeWhitespace() Function Overflow; OSVDB ID: 86094 Mozilla Multiple Product nsTextEditRules::WillInsert() Function Use-after-free Arbitrary Code Execution; OSVDB ID: 86117 Mozilla Multiple Product nsWaveReader::DecodeAudioData() Function Overflow; OSVDB ID: 86096 Mozilla Multiple Product Convolve3x3() Function Overflow; 15; OSVDB ID: 86095 Mozilla Multiple Product DOMSVGTests::GetRequiredFeatures() Function Use-after-free Arbitrary Code Execution; 15; 15; OSVDB ID: 86097 Mozilla Multiple Product JavaScript Object instanceof Operator Handling Invalid Cast Arbitrary Code Execution; 15; OSVDB ID: 86098 Mozilla Multiple Product GetProperty() Function JSAPI Handling Arbitrary Code Execution; 15; 15; OSVDB ID: 86100 Mozilla Multiple Product nsSMILAnimationController::DoSample() Function Use-after-free Arbitrary Code Execution; 15; OSVDB ID: 86101 Mozilla Multiple Product insPos Property Memory Corruption; 15; 15; OSVDB ID: 86103 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-3983); 15; OSVDB ID: 86104 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-3982); 15; OSVDB ID: 86105 Mozilla Multiple Product <select> Dropdown Menu Handling Spoofing Weakness; 15; OSVDB ID: 86106 Mozilla Multiple Product document.domain Handling Same Origin Policy Bypass; 15; OSVDB ID: 86107 Mozilla Firefox for Android Reader Mode Transition Handling XSS Weakness; 15; OSVDB ID: 86108 Mozilla Multiple Product DOMWindowUtils Unrestricted Testing Methods Weakness; 15; OSVDB ID: 86109 Mozilla Multiple Product Full Screen Invocation / Backwards Navigation Use-after-free Arbitrary Code Execution; 15; OSVDB ID: 86110 Mozilla Multiple Product Binary Plugin location Property Handling XSS Weakness; 15; OSVDB ID: 86111 Mozilla Multiple Product InstallTrigger Failure Chrome Object Wrapper (COW) Error Handling Arbitrary Code Execution; 15; OSVDB ID: 86112 Mozilla Multiple Product location.hash Property Handling Arbitrary Code Execution; 15; OSVDB ID: 86113 Mozilla Multiple Product Chrome Object Wrapper (COW) Standard Prototype Property Accessing Weakness Arbitrary Code Execution; 15; OSVDB ID: 86114 Mozilla Multiple Product IsCSSWordSpacingSpace() Function Out-of-bounds Read Arbitrary Code Execution; 15; 15; OSVDB ID: 86116 Mozilla Multiple Product nsCharTraits::length() Function Overflow; 15; 16; OSVDB ID: 86125 Mozilla Multiple Product mozilla::net::FailDelayManager::Lookup() Function Memory Corruption; OSVDB ID: 86124 Mozilla Multiple Product on Jail-broken Android FT2FontEntry::CreateFontEntry() Function Memory Corruption; OSVDB ID: 86126 Mozilla Multiple Product Site History Information Disclosure; OSVDB ID: 86128 Mozilla Multiple Product defaultValue() Function Security Wrapper Unwrapping Handling Weakness; 16; 16; 16; 15.0.1; OSVDB ID: 86171 Mozilla Multiple Product <select> Element XPI / Geolocation Clickjacking Weakness; Unspecified; OSVDB ID: 86183 Mozilla Firefox js::gc::Arena::finalize Use-after-free Remote Code Execution; Unspecified; OSVDB ID: 86209 Mozilla Firefox JSScript::hasAnalysis Use-after-free Remote DoS; 9.0; OSVDB ID: 86210 Mozilla Firefox nsIDNService::Init Function Memory Corruption; OSVDB ID: 86524 Mozilla Firefox < 10 Multiple Method DoS; OSVDB ID: 86533 Mozilla Firefox < 14 Multiple Method DoS; 12.0; OSVDB ID: 86210 Mozilla Firefox nsIDNService::Init Function Memory Corruption; 15.0; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; 15.0a1; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; Unspecified; Trunk; 13.0; 9.0b2; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; 10.0a2; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; 9.0a1; OSVDB ID: 86526 Mozilla Firefox < 11 Multiple Method DoS; OSVDB ID: 86524 Mozilla Firefox < 10 Multiple Method DoS; OSVDB ID: 86496 Mozilla Firefox < 9 Multiple Method DoS; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; 12.0; 14.0b6; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; 13.0; 1.9.2; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; 10.0; OSVDB ID: 86211 Mozilla Firefox < 16 Multiple Method DoS; Unspecified; OSVDB ID: 86212 Mozilla Firefox mozSocial API Sidebar URL Cross-domain Information Disclosure; 15.0; OSVDB ID: 86226 Mozilla Firefox nsHttpConnectionMgr Function Stack Overflow; 9.0; OSVDB ID: 86228 Mozilla Firefox PluginWndProcInternal Flash Content Handling Overflow DoS; 3.6.13; OSVDB ID: 86468 Mozilla Firefox Private Browsing Search Provider / Strings Local Disclosure; 5.0; OSVDB ID: 86468 Mozilla Firefox Private Browsing Search Provider / Strings Local Disclosure; 4.0.1; OSVDB ID: 86468 Mozilla Firefox Private Browsing Search Provider / Strings Local Disclosure; OSVDB ID: 86518 Mozilla Firefox < 6 Multiple Method DoS; 9.0b6; OSVDB ID: 86481 Mozilla Firefox js::Shape::finalize Function DoS; 9.0.1; OSVDB ID: 86482 Mozilla Firefox Null Location Header Handling CRLF Injection Weakness; OSVDB ID: 86529 Mozilla Firefox < 12 Multiple Method DoS; OSVDB ID: 86532 Mozilla Firefox < 13 Multiple Method DoS; 4.0b7pre; OSVDB ID: 86496 Mozilla Firefox < 9 Multiple Method DoS; 4.0b8; OSVDB ID: 86496 Mozilla Firefox < 9 Multiple Method DoS; 4.0; 9.0a1; 4.0b3; OSVDB ID: 86524 Mozilla Firefox < 10 Multiple Method DoS; OSVDB ID: 86496 Mozilla Firefox < 9 Multiple Method DoS; 4.0b8pre; OSVDB ID: 86497 Mozilla Firefox Inspect Network Request Window Private Browsing Information Disclosure; Unspecified; OSVDB ID: 86507 Mozilla Firefox nsHttpNegotiateAuth.cpp Authentication Parsing Remote Overflow; 1.8; OSVDB ID: 86508 Mozilla Firefox FireBug __scope__.api Privileged Object Access; 3.0.8; OSVDB ID: 86509 Mozilla Firefox Malformed Quoted src XSS Weakness; 1.9.0; OSVDB ID: 86509 Mozilla Firefox Malformed Quoted src XSS Weakness; 0.9.6; OSVDB ID: 86510 Mozilla Firefox Image Saturation Handling DoS; 3.7a5pre; OSVDB ID: 86511 Mozilla Firefox HTML5 Parser Malformed script Tag Parsing XSS Weakness; 3.7a5pre; OSVDB ID: 86512 Mozilla Firefox on Windows 7 Jump Bar Limited Browsing History Disclosure; 3.6.12; OSVDB ID: 86513 Mozilla Firefox nsCSSValue::BufferFromString Function Integer Overflow; Unspecified; OSVDB ID: 86514 Mozilla Firefox GCLI Command Execution Privilege Issue; 6.0; OSVDB ID: 86515 Mozilla Firefox nsFilePicker Windows Recent Documents Privacy Mode Bypass; 6.0a1; OSVDB ID: 86518 Mozilla Firefox < 6 Multiple Method DoS; OSVDB ID: 86516 Mozilla Firefox < 5 Multiple Method DoS; 5.0a2; OSVDB ID: 86516 Mozilla Firefox < 5 Multiple Method DoS; 4.0b11pre; OSVDB ID: 86516 Mozilla Firefox < 5 Multiple Method DoS; OSVDB ID: 86526 Mozilla Firefox < 11 Multiple Method DoS; 4.0; 4.0b12; OSVDB ID: 86516 Mozilla Firefox < 5 Multiple Method DoS; 7.0a1; OSVDB ID: 86517 Mozilla Firefox Location Bar URI Copying Information Disclosure; 8.0a1; OSVDB ID: 86517 Mozilla Firefox Location Bar URI Copying Information Disclosure; OSVDB ID: 86518 Mozilla Firefox < 6 Multiple Method DoS; OSVDB ID: 86520 Mozilla Firefox < 8 Multiple Method DoS; 3.6.0; OSVDB ID: 86518 Mozilla Firefox < 6 Multiple Method DoS; 4.0; 6.0; 8.0a1; 4.0.1; 6.0a1; Unspecified; OSVDB ID: 86519 Mozilla Firefox gfxImageSurface::gfxImageSurface Function Integer Overflow; 8.0a1; 6.0; 8.0a2; OSVDB ID: 86520 Mozilla Firefox < 8 Multiple Method DoS; 11.0a1; OSVDB ID: 86521 Mozilla Firefox nsAttrValue::EnsureEmptyMiscContainer() Function Buffer Overflow; OSVDB ID: 86533 Mozilla Firefox < 14 Multiple Method DoS; 10.0a1; OSVDB ID: 86521 Mozilla Firefox nsAttrValue::EnsureEmptyMiscContainer() Function Buffer Overflow; OSVDB ID: 86526 Mozilla Firefox < 11 Multiple Method DoS; OSVDB ID: 86524 Mozilla Firefox < 10 Multiple Method DoS; OSVDB ID: 86535 Mozilla Firefox < 15 Multiple Method DoS; 9.0; OSVDB ID: 86521 Mozilla Firefox nsAttrValue::EnsureEmptyMiscContainer() Function Buffer Overflow; Unspecified; OSVDB ID: 86522 Mozilla Firefox LookupSwitch / TableSwitch Stack Corruption Arbitrary Code Execution; 6.0; OSVDB ID: 86523 Mozilla Firefox nsLocalFile::EnsureShortPath GetShortPathName Function Buffer Overflow; 2.0.0.11; 9.0; 8.0; 10.0a1; 4.0b3; 9.0a1; Unspecified; OSVDB ID: 86525 Mozilla Firefox RegExpGuard Memory Corruption; 9.0a1; 3.6b5pre; OSVDB ID: 86526 Mozilla Firefox < 11 Multiple Method DoS; 10.0a1; 8.0.1; OSVDB ID: 86526 Mozilla Firefox < 11 Multiple Method DoS; OSVDB ID: 86529 Mozilla Firefox < 12 Multiple Method DoS; 4.0b11pre; 4.0; 8.0; 8.1; OSVDB ID: 86526 Mozilla Firefox < 11 Multiple Method DoS; 8.0.1; 12.0; 14.0a1; OSVDB ID: 86529 Mozilla Firefox < 12 Multiple Method DoS; 11.0b1; OSVDB ID: 86529 Mozilla Firefox < 12 Multiple Method DoS; 11.0; 9.0.1; 8.0; 12.0a1; OSVDB ID: 86529 Mozilla Firefox < 12 Multiple Method DoS; Unspecified; OSVDB ID: 86530 Mozilla Firefox Invalid Certificate Silent Installation Weakness; 9.0.1; 11.0a2; OSVDB ID: 86532 Mozilla Firefox < 13 Multiple Method DoS; 11.0; 12.0; 8.0b1; OSVDB ID: 86532 Mozilla Firefox < 13 Multiple Method DoS; 13; 14.0; 12.0; 9.0; 11.0a1; 7.0.1; 13.0a2; OSVDB ID: 86533 Mozilla Firefox < 14 Multiple Method DoS; 13.0a1; OSVDB ID: 86533 Mozilla Firefox < 14 Multiple Method DoS; 13.0; 4.0b2; OSVDB ID: 86535 Mozilla Firefox < 15 Multiple Method DoS; 3.6.11; 10.0a1; 6.0; OSVDB ID: 86554 Mozilla Firefox < 7 Multiple Method DoS; 3.6; OSVDB ID: 86554 Mozilla Firefox < 7 Multiple Method DoS; 3.6 RC1; OSVDB ID: 86554 Mozilla Firefox < 7 Multiple Method DoS; 4.0.1; OSVDB ID: 86554 Mozilla Firefox < 7 Multiple Method DoS; 16.0.1; OSVDB ID: 86678 illumos x86-64 Kernel System Call Functionality Crafted Application Handling Local Privilege Escalation; OSVDB ID: 86677 Joyent SmartOS x86-64 Kernel System Call Functionality Crafted Application Handling Local Privilege Escalation; OSVDB ID: 86775 Mozilla Multiple Product Prototype Property Injection Security Wrapper Protection Bypass Location Object Disclosure; OSVDB ID: 86773 Mozilla Multiple Product window.location Object CheckURL Function Incorrect Calling Document Return XSS Weakness; OSVDB ID: 86774 Mozilla Multiple Product window.location Object valueOf Method Shadowing XSS Weakness; 16.0.1; 16.0.1; 16.0.1; 16.0.2; OSVDB ID: 87581 Mozilla Multiple Product texImage2D Call Handling Memory Corruption; 16.0.2; OSVDB ID: 87582 Mozilla Multiple Product nsPlaintextEditor::FireClipboardEvent() Function Use-after-free Arbitrary Code Execution; 16.0.2; OSVDB ID: 87583 Mozilla Multiple Product nsTextEditorState::PrepareEditor() Function Use-after-free Arbitrary Code Execution; 16.0.2; OSVDB ID: 87584 Mozilla Firefox Style Inspector Stylesheet Handling Arbitrary Code Execution; 16.0.2; OSVDB ID: 87585 Mozilla Multiple Product location Property Shadowing XSS Weakness; 16.0.2; OSVDB ID: 87586 Mozilla Firefox Developer Toolbar XSS; 16.0.2; OSVDB ID: 87587 Mozilla Multiple Product HZ-GB-2312 Charset Encoding Handling XSS Weakness; 16.0.2; OSVDB ID: 87588 Mozilla Multiple Product Cross-Origin Wrapper Handling XSS Weakness; 16.0.2; OSVDB ID: 87589 Mozilla Multiple Product XrayWrappers Handling Chrome-Only DOM Object Property Information Disclosure; 16.0.2; OSVDB ID: 87590 Mozilla Firefox Installer Path Subversion Arbitrary DLL Injection Code Execution; 16.0.2; OSVDB ID: 87591 Mozilla Multiple Product XMLHttpRequest Sandbox Object Creation Permission Weakness; 16.0.2; OSVDB ID: 87592 Mozilla Multiple Product str_unescape() Function JavaScript Handling Memory Corruption; 16.0.2; OSVDB ID: 87593 Mozilla Multiple Product CSS Property Setting SVG Text Handling Memory Corruption; 16.0.2; OSVDB ID: 87594 Mozilla Multiple Product evalInSandbox() Function location.href Property Handling Sandbox Bypass XSS Weakness; 16.0.2; OSVDB ID: 87595 Mozilla Multiple Product image::RasterImage::DrawFrameTo() Function GIF Image Handling Overflow; 16.0.2; OSVDB ID: 87596 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-5842); 16.0.2; OSVDB ID: 87597 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2012-5843); 16.0.2; OSVDB ID: 87598 Mozilla Multiple Product for OS X HTML File Handling Use-after-free Arbitrary Code Execution; 16.0.2; OSVDB ID: 87599 Mozilla Multiple Product copyTexImage2D Call Image Dimension Handling Memory Corruption; 16.0.2; OSVDB ID: 87600 Mozilla Firefox New Tab Page Javascript: URL Handling Privilege Weakness; 16.0.2; OSVDB ID: 87601 Mozilla Multiple Product webgl bufferdata Handling Overflow; 16.0.2; OSVDB ID: 87602 Mozilla Multiple Product BuildTextRunsScanner::BreakSink::SetBreaks() Function Use-after-free Arbitrary Code Execution; 16.0.2; OSVDB ID: 87603 Mozilla Multiple Product nsViewManager::ProcessPendingUpdates() Function Use-after-free Arbitrary Code Execution; 16.0.2; OSVDB ID: 87604 Mozilla Multiple Product nsEditor::FindNextLeafNode() Function Use-after-free Arbitrary Code Execution; 16.0.2; OSVDB ID: 87605 Mozilla Multiple Product XPCWrappedNative::Mark() Function Use-after-free Arbitrary Code Execution; 16.0.2; OSVDB ID: 87606 Mozilla Multiple Product nsTextEditorState::PrepareEditor() Function Use-after-free Arbitrary Code Execution; 16.0.2; OSVDB ID: 87607 Mozilla Multiple Product gfxShapedWord::CompressedGlyph::IsClusterStart() Function Overflow; 16.0.2; OSVDB ID: 87608 Mozilla Multiple Product nsWindow::OnExposeEvent() Function Overflow; 16.0.2; OSVDB ID: 87609 Mozilla Multiple Product gfxFont::GetFontEntry() Function Use-after-free Arbitrary Code Execution; 9.0.1; OSVDB ID: 78739 Mozilla Multiple Products Ogg Vorbis File Decoding Remote Memory Corruption; OSVDB ID: 78741 Mozilla Multiple Products Firefox Sync Key Export Permission Weakness Firefox Recovery Key.html Information Disclosure; OSVDB ID: 78734 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2012-0442); OSVDB ID: 78735 Mozilla Multiple Products Sub-Frame Cross-domain Name Attribute Handling Phishing Weakness; OSVDB ID: 78737 Mozilla Multiple Products XPConnect Security Check XSS Weakness; OSVDB ID: 78740 Mozilla Multiple Products Embedded XSLT Stylesheet Handling Remote Memory Corruption; OSVDB ID: 78733 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2012-0443); OSVDB ID: 78736 Mozilla Multiple Products AttributeChildRemoved() Method nsDOMAttribute Child Node Use-after-free Remote Code Execution; 3.6; OSVDB ID: 78737 Mozilla Multiple Products XPConnect Security Check XSS Weakness; 3.6.25; OSVDB ID: 78739 Mozilla Multiple Products Ogg Vorbis File Decoding Remote Memory Corruption; OSVDB ID: 78734 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2012-0442); OSVDB ID: 78740 Mozilla Multiple Products Embedded XSLT Stylesheet Handling Remote Memory Corruption; OSVDB ID: 78733 Mozilla Multiple Products Multiple Unspecified Memory Corruption (2012-0443); OSVDB ID: 78736 Mozilla Multiple Products AttributeChildRemoved() Method nsDOMAttribute Child Node Use-after-free Remote Code Execution; 3.6.25; OSVDB ID: 78774 Mozilla Multiple Products IPv6 Proxy Generated XMLHttpRequest Object Handling Remote Information Disclosure; 6.0.2; OSVDB ID: 78774 Mozilla Multiple Products IPv6 Proxy Generated XMLHttpRequest Object Handling Remote Information Disclosure; 17.0.1; OSVDB ID: 88617 Mozilla Firefox HTML File Handling DoS; 17; 17; 17; 17; 17.0; OSVDB ID: 88997 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0769); OSVDB ID: 88999 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0770); OSVDB ID: 88998 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0749); OSVDB ID: 89000 Mozilla Multiple Product CharDistributionAnalysis::HandleOneChar() Function Buffer Overflow; OSVDB ID: 89009 Mozilla Multiple Product Unspecified URL Bar Spoofing Weakness; OSVDB ID: 89015 Mozilla Multiple Product Plugin Handler Event Handling Same Origin Policy Bypass Clickjacking Weakness; OSVDB ID: 89017 Mozilla Multiple Product Javascript String Concatenation Length Calculation Integer Overflow; OSVDB ID: 89021 Mozilla Multiple Product XMLSerializer serializeToStream Use-after-free Arbitrary Code Execution; OSVDB ID: 89024 Mozilla Multiple Product jsobj.cpp obj_toSource Function Javascript Proxy Object Handler Method Handling Use-after-free Arbitrary Code Execution; OSVDB ID: 89023 Mozilla Multiple Product VibrateWindowListener Object Construction Vibrate Library domDoc Pointer Use-after-free Arbitrary Code Execution; OSVDB ID: 89022 Mozilla Multiple Product ListenerManager Listener Object Allocation Garbage Collection Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89001 Mozilla Multiple Product ~nsHTMLEditRules() Function Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89002 Mozilla Multiple Product imgRequest::OnStopFrame() Function Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89003 Mozilla Multiple Product nsSVGPathElement::GetPathLengthScale() Function Unspecified Out-of-bounds Read Issue; 17.0; OSVDB ID: 89004 Mozilla Multiple Product mozilla::TrackUnionStream::EndTrack() Function Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89005 Mozilla Multiple Product Mesa WebGL Canvas Resizing Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89006 Mozilla Multiple Product gfxTextRun::ShrinkToLigatureBoundaries() Function Heap Overflow; 17.0; OSVDB ID: 89007 Mozilla Multiple Product nsWindow::OnExposeEvent() Function Heap Overflow; 17.0; OSVDB ID: 89008 Mozilla Multiple Product Canvas Unspecified Stack Overflow; 17.0; 17.0; OSVDB ID: 89010 Mozilla Multiple Product TableBackgroundPainter::TableBackgroundData::Destroy() Function Use-after-free Arbitrary Code Execution; 17.0; OSVDB ID: 89011 Mozilla Multiple Product iframe Touch Event Handling Same Origin Policy Bypass Weakness; 17.0; OSVDB ID: 89012 Mozilla Multiple Product nsSOCKSSocketInfo::ConnectToProxy(PRFileDesc*) Function SSL Socket Transport Thread Handling Arbitrary Code Execution; 17.0; OSVDB ID: 89013 Mozilla Multiple Product AutoWrapperChanger Class Garbage Collection Javascript Object Handling Arbitrary Code Execution; 17.0; OSVDB ID: 89014 Mozilla Multiple Product jsval-returning Quickstubs Return Value Wrapping Arbitrary Code Execution; 17.0; 17.0; OSVDB ID: 89016 Mozilla Multiple Product XBL Object toString() Function Address Space Layout Information Disclosure; 17.0; 17.0; OSVDB ID: 89018 Mozilla Multiple Product XBL File XML Binding Handling Memory Corruption; 17.0; OSVDB ID: 89019 Mozilla Multiple Product Object Prototype Manipulation Chrome Object Wrappers (COW) Bypass Arbitrary Code Execution; 17.0; OSVDB ID: 89020 Mozilla Multiple Product Plugin Object SVG Element Interaction Chrome Privileged Page Arbitrary Code Execution; 17.0; 17.0; 17.0; 17.0; 18.0.2; OSVDB ID: 90418 Mozilla Multiple Product nsPrintEngine::CommonPrint Function Use-after-free Arbitrary Code Execution; OSVDB ID: 90427 Mozilla Multiple Product GIF File Handling Out-of-bounds Read Information Disclosure; 18.0.2; OSVDB ID: 90419 Mozilla Multiple Product nsCodingStateMachine::NextState Function Unspecified Out-of-bounds Read Issue; 18.0.2; OSVDB ID: 90420 Mozilla Multiple Product ClusterIterator::NextCluster Function Unspecified Out-of-bounds Read Issue; 18.0.2; OSVDB ID: 90421 Mozilla Multiple Product nsSaveAsCharset::DoCharsetConversion Function Heap Buffer Overflow; 18.0.2; OSVDB ID: 90422 Mozilla Multiple Product Proxy 407 Response HTTPS Address Spoofing; 18.0.2; OSVDB ID: 90423 Mozilla Multiple Product nsImageLoadingContent() Function Use-after-free Arbitrary Code Execution; 18.0.2; OSVDB ID: 90424 Mozilla Multiple Product Active Browser Profile File System Location Disclosure; 17.0; OSVDB ID: 90424 Mozilla Multiple Product Active Browser Profile File System Location Disclosure; 16.0.2; OSVDB ID: 90424 Mozilla Multiple Product Active Browser Profile File System Location Disclosure; 16.0.1; OSVDB ID: 90424 Mozilla Multiple Product Active Browser Profile File System Location Disclosure; 17.0.1; OSVDB ID: 90424 Mozilla Multiple Product Active Browser Profile File System Location Disclosure; 15.0; OSVDB ID: 90424 Mozilla Multiple Product Active Browser Profile File System Location Disclosure; 18.0.2; OSVDB ID: 90425 Mozilla Multiple Product Chrome Object Wrappers (COW) / System Only Wrappers (SOW) Protection Bypass Arbitrary Code Execution; 18.0.2; OSVDB ID: 90426 Mozilla Multiple Product Wrapped WebIDL Object Handling Arbitrary Code Execution; 18.0.2; 18.0; OSVDB ID: 90428 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0784); 18.0; OSVDB ID: 90429 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0783); 18.0.2; OSVDB ID: 90430 Mozilla Multiple Product nsOverflowContinuationTracker::Finish Function Use-after-free Arbitrary Code Execution; 18.0.2; OSVDB ID: 90431 Mozilla Multiple Product nsDisplayBoxShadowOuter::Paint Function Use-after-free Arbitrary Code Execution; 9; OSVDB ID: 90439 Mozilla Firefox firefoxurl:// URI Handler Arbitrary Command Injection; 19.0.1; OSVDB ID: 90928 Mozilla Multiple Product HTML Editor document.execCommand Function Use-after-free Arbitrary Code Execution; 19.0.2; OSVDB ID: 91621 Mozilla Firefox 'a' Tag JavaScript After Click Reference Manipulation Weakness; OSVDB ID: 91877 Mozilla Firefox for Android app_tmp Directory World Read/Write Access; 19.0.2; OSVDB ID: 91874 Mozilla Multiple Products Multiple Unspecified Memory Safety Issues (2013-0788); 19.0.2; OSVDB ID: 91875 Mozilla Multiple Products Multiple Unspecified Memory Safety Issues (2013-0789); 19.0.2; OSVDB ID: 91876 Mozilla Multiple Products Maintenance Service Local Buffer Overflow; 19.0.2; 19.0.2; OSVDB ID: 91878 Mozilla Multiple Products Updater Path Subversion Arbitrary DLL Loading Local Privilege Escalation; 19.0.2; OSVDB ID: 91879 Mozilla Multiple Products WebGL Rendering Mesa Graphics Driver on Linux Invalid Free Arbtirary Code Execution; 19.0.2; OSVDB ID: 91880 Mozilla Multiple Products SOW Protection Bypass Protected Node Cloning Arbitrary Code Execution; 19.0.2; OSVDB ID: 91881 Mozilla Multiple Products Tab-modal Dialog Origin Disclosure Bypass; 19.0.2; OSVDB ID: 91882 Mozilla Multiple Products Timed History Navigation XSS; 19.0.2; OSVDB ID: 91883 Mozilla Multiple Products Grayscale PNG Image Rendering Memory Disclosure; 19.0.2; OSVDB ID: 91884 Mozilla Multiple Products Plug-in Code Unspecified Stack Corruption; 19.0.2; OSVDB ID: 91885 Network Security Services (NSS) Libary CERT_DecodeCertPackage Function Certificate Decoding Out-of-bounds Read DoS; 19.0.2; OSVDB ID: 91886 Cairo pixman_fill_sse2 Function Buffer Overflow; 0.1.x; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 0.2.x; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 0.3.x; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 0.4.x; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 0.5.x; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 0.6.x; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 0.7.x; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 0.8.x; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 0.9.1; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 0.9.0; OSVDB ID: 7595 Mozilla Browsers for Windows shell: URI Arbitrary Command Execution; 19; OSVDB ID: 92279 Mozilla Firefox document.cookie Malformed Character Handling Arbitrary Site DoS; 20.0; OSVDB ID: 93422 Mozilla Multiple Product gfxSkipCharsIterator::SetOffsets Function Out-of-bound Read DoS; 20.0; OSVDB ID: 93423 Mozilla Multiple Product DOMSVGZoomEvent Functions Unitialized Memory Usage Information Disclosure; 20.0; OSVDB ID: 93424 Mozilla Multiple Product Video onresize Event Handling Use-after-free Arbitrary Code Execution; 20.0; OSVDB ID: 93425 Mozilla Multiple Product Mozilla Maintenance Service for Windows Local Privilege Escalation; 20.0; OSVDB ID: 93426 Mozilla Firefox File Input Control Path Disclosure; 20.0; OSVDB ID: 93427 Mozilla Multiple Product Chrome Object Wrappers (COW) Content Level Constructor Calls XSS Weakness; 20.0; OSVDB ID: 93428 Mozilla Firefox Multiple Unspecified Memory Corruption (2013-1669); 20.0; OSVDB ID: 93429 Mozilla Multiple Product Multiple Unspecified Memory Corruption (2013-0801); 20.0; OSVDB ID: 93430 Mozilla Multiple Product SelectionIterator::GetNextSegment Function Out-of-bounds Read DoS; 20.0; OSVDB ID: 93431 Mozilla Multiple Product nsContentUtils::RemoveScriptBlocker Function Heap Use-after-free Arbitrary Code Execution; 20.0; OSVDB ID: 93432 Mozilla Multiple Product nsFrameList::FirstChild Function Heap Use-after-free Arbitrary Code Execution; 20.0; OSVDB ID: 93433 Mozilla Multiple Product mozilla::plugins::child::_geturlnotify Function Heap Use-after-free Arbitrary Code Execution; 20.0; OSVDB ID: 93434 Mozilla Multiple Product _cairo_xlib_surface_add_glyph Function Unspecified Invalid Write Issue

The database information may change without any notice. Use of the information constitutes acceptance for use in an AS IS condition, and there are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the copyright holder or distributor (OSVDB or OSF) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.