Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
freebsdFreeBSD12BD6ECF-C430-11DB-95C5-000C6EC775D9
HistoryFeb 23, 2007 - 12:00 a.m.

mozilla -- multiple vulnerabilities

2007-02-2300:00:00
vuxml.freebsd.org
27

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.971

Percentile

99.8%

JSON

The Mozilla Foundation reports of multiple security issues
in Firefox, Seamonkey, and Thunderbird. Several of these
issues can probably be used to run arbitrary code with the
privilege of the user running the program.

MFSA 2007-08 onUnload + document.write() memory corruption
MFSA 2007-07 Embedded nulls in location.hostname confuse same-domain checks
MFSA 2007-06 Mozilla Network Security Services (NSS) SSLv2 buffer overflow
MFSA 2007-05 XSS and local file access by opening blocked popups
MFSA 2007-04 Spoofing using custom cursor and CSS3 hotspot
MFSA 2007-03 Information disclosure through cache collisions
MFSA 2007-02 Improvements to help protect against Cross-Site Scripting attacks
MFSA 2007-01 Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2)

Related

openvas 40
nessus 42
ubuntu 3
suse 2
gentoo 4
oraclelinux 3
centos 5
redhat 5
securityvulns 12
osv 1
debian 1
mozilla 7
fedora 4
cvelist 9
nvd 10
veracode 7
cve 9
ubuntucve 10
checkpoint_advisories 4
prion 8
seebug 3
cert 6
exploitpack 1
exploitdb 1
zdt 1
jvn 1
openvas
openvas
FreeBSD Ports: firefox
2008-09-04 00:00:00
FreeBSD Ports: firefox
2008-09-04 00:00:00
Ubuntu: Security Advisory (USN-428-1)
2009-03-23 00:00:00
nessus
nessus
FreeBSD : mozilla -- multiple vulnerabilities (12bd6ecf-c430-11db-95c5-000c6ec775d9)
2007-02-26 00:00:00
SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 2683)
2007-12-13 00:00:00
openSUSE 10 Security Update : seamonkey (seamonkey-2811)
2007-10-17 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2007-03-01 00:00:00
Firefox regression
2007-03-02 00:00:00
Thunderbird vulnerabilities
2007-03-07 00:00:00
suse
suse
remote code execution in mozilla,MozillaThunderbird,seamonkey
2007-03-20 12:18:53
remote code execution in MozillaFirefox,seamonkey
2007-03-06 19:04:00
gentoo
gentoo
Mozilla Firefox: Multiple vulnerabilities
2007-03-02 00:00:00
SeaMonkey: Multiple vulnerabilities
2007-03-09 00:00:00
Mozilla Thunderbird: Multiple vulnerabilities
2007-03-18 00:00:00
oraclelinux
oraclelinux
Critical: Firefox security update
2007-02-24 00:00:00
Critical: thunderbird security update
2007-03-02 00:00:00
Critical: seamonkey security update
2007-02-24 00:00:00
centos
centos
thunderbird security update
2007-03-04 11:06:21
firefox security update
2007-02-24 13:53:25
seamonkey security update
2007-03-16 07:21:16
redhat
redhat
(RHSA-2007:0078) Critical: thunderbird security update
2007-03-02 00:00:00
(RHSA-2007:0079) Critical: Firefox security update
2007-02-23 00:00:00
(RHSA-2007:0077) Critical: seamonkey security update
2007-02-23 00:00:00
securityvulns
securityvulns
Multiple Mozilla Firefox / Thunderbird / Seamonkey vulnerabilities
2007-03-06 00:00:00
Mozilla Foundation Security Advisory 2007-01
2007-02-27 00:00:00
Mozilla Foundation Security Advisory 2007-06
2007-02-27 00:00:00
osv
osv
mozilla-firefox
2007-07-22 00:00:00
debian
debian
[SECURITY] [DSA 1336-1] New mozilla-firefox packages fix several vulnerabilities
2007-07-22 17:43:28
mozilla
mozilla
Crashes with evidence of memory corruption (rv:1.8.0.10/1.8.1.2) — Mozilla
2007-02-23 00:00:00
Mozilla Network Security Services (NSS) SSLv2 buffer overflows — Mozilla
2007-02-23 00:00:00
XSS and local file access by opening blocked popupsand local file access by opening blocked popups — Mozilla
2007-02-23 00:00:00
fedora
fedora
[SECURITY] Fedora Core 5 Update: nspr-4.6.5-0.5.0.fc5
2007-02-26 22:03:17
[SECURITY] Fedora Core 6 Update: nspr-4.6.5-0.6.0.fc6
2007-02-26 22:03:32
[SECURITY] Fedora Core 6 Update: nss-3.11.5-0.6.0.fc6
2007-02-26 22:03:36
cvelist
cvelist
CVE-2006-6077
2006-11-24 17:00:00
CVE-2007-0009
2007-02-26 20:00:00
CVE-2007-0981
2007-02-16 01:00:00
nvd
nvd
CVE-2006-6077
2006-11-24 17:07:00
CVE-2007-0779
2007-02-26 20:28:00
CVE-2007-0008
2007-02-26 20:28:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-04-10 00:12:48
Clickjacking
2020-04-10 00:12:51
Arbitrary Code Execution
2020-04-10 00:12:49
cve
cve
CVE-2006-6077
2006-11-24 17:07:00
CVE-2007-0009
2007-02-26 20:28:00
CVE-2007-0008
2007-02-26 20:28:00
ubuntucve
ubuntucve
CVE-2006-6077
2006-11-24 00:00:00
CVE-2007-0779
2007-02-26 00:00:00
CVE-2007-0009
2007-02-26 00:00:00
checkpoint_advisories
checkpoint_advisories
Mozilla Network Security Services SSLv2 Server Stack Overflow (CVE-2007-0009)
2010-02-16 00:00:00
Mozilla Network Security Services SSLv2 client integer underflow (CVE-2007-0008)
2010-02-16 00:00:00
Preemptive Protection against Mozilla Firefox Cross Domain Scripting Vulnerability
2007-03-15 00:00:00
prion
prion
Heap overflow
2007-02-26 20:28:00
Code injection
2007-02-26 20:28:00
Stack overflow
2007-02-26 20:28:00
seebug
seebug
Mozilla Firefox <= 2.0.0.1 (location.hostname) Cross-Domain Vulnerability
2014-07-01 00:00:00
Mozilla Firefox &lt;= 2.0.0.1 (location.hostname) Cross-Domain Vulnerability
2007-02-22 00:00:00
Mozilla Firefox &lt;= 2.0.0.1 (location.hostname) Cross-Domain Vulnerability
2007-02-20 00:00:00
cert
cert
Mozilla browsers "location.hostname" cross-domain vulnerability
2007-02-15 00:00:00
Mozilla Network Security Services (NSS) fails to properly handle the client master key
2007-03-07 00:00:00
Mozilla Network Security Services (NSS) fails to properly process malformed SSLv2 server messages
2007-03-07 00:00:00
exploitpack
exploitpack
Mozilla Firefox 2.0.0.1 - location.hostname Cross-Domain
2007-02-20 00:00:00
exploitdb
exploitdb
Mozilla Firefox 2.0.0.1 - &#039;location.hostname&#039; Cross-Domain
2007-02-20 00:00:00
zdt
zdt
Mozilla Firefox <= 2.0.0.1 (location.hostname) Cross-Domain Vulnerabil
2007-02-20 00:00:00
jvn
jvn
JVN#38605899 Mozilla Firefox cross-site scripting vulnerability
2007-06-01 00:00:00

CVSS2

9.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

EPSS

0.971

Percentile

99.8%

JSON
Related for 12BD6ECF-C430-11DB-95C5-000C6EC775D9
openvas40nessus42ubuntu3suse2gentoo4oraclelinux3centos5redhat5securityvulns12osv1debian1mozilla7fedora4cvelist9nvd10veracode7cve9ubuntucve10checkpoint_advisories4prion8seebug3cert6exploitpack1exploitdb1zdt1jvn1