mozilla Archives - CVE Vulnerability

CVE-2008-7244

Sun, 26 Feb 2023 09:11:56 +0000

Mozilla Firefox 3.0.1 and earlier allows remote attackers to cause a denial of service (browser hang) by calling the window.print function in a loop, aka a “printing DoS attack,” possibly a related issue to CVE-2009-0821.

The post CVE-2008-7244 appeared first on CVE Vulnerability.

CVE-2008-6961

Sun, 26 Feb 2023 09:11:47 +0000

mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the (1) .documentURI or (2) .textContent DOM properties.

The post CVE-2008-6961 appeared first on CVE Vulnerability.

CVE-2008-5822

Sun, 26 Feb 2023 09:11:12 +0000

Memory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote attackers to cause a denial of service (memory consumption and browser hang) via a long CLASS attribute in an HR element in an HTML document.

The post CVE-2008-5822 appeared first on CVE Vulnerability.

CVE-2008-5513

Sun, 26 Feb 2023 09:11:03 +0000

Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with other domains, and conduct cross-site scripting (XSS) attacks via unknown vectors related to restoration of SessionStore data.

The post CVE-2008-5513 appeared first on CVE Vulnerability.

CVE-2008-5511

Sun, 26 Feb 2023 09:11:03 +0000

Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) attacks via an XBL binding to an “unloaded document.”

The post CVE-2008-5511 appeared first on CVE Vulnerability.

CVE-2008-5504

Sun, 26 Feb 2023 09:11:02 +0000

Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.

The post CVE-2008-5504 appeared first on CVE Vulnerability.

CVE-2008-5019

Sun, 26 Feb 2023 09:10:49 +0000

The session restore feature in Mozilla Firefox 3.x before 3.0.4 and 2.x before 2.0.0.18 allows remote attackers to violate the same origin policy to conduct cross-site scripting (XSS) attacks and execute arbitrary JavaScript with chrome privileges via unknown vectors.

The post CVE-2008-5019 appeared first on CVE Vulnerability.

CVE-2008-5016

Sun, 26 Feb 2023 09:10:49 +0000

The layout engine in Mozilla Firefox 3.x before 3.0.4, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via multiple vectors that trigger an assertion failure or other consequences.

The post CVE-2008-5016 appeared first on CVE Vulnerability.

CVE-2008-5012

Sun, 26 Feb 2023 09:10:49 +0000

Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly change the source URI when processing a canvas element and an HTTP redirect, which allows remote attackers to bypass the same origin policy and access arbitrary images that are not directly accessible to the attacker. NOTE: this issue can be leveraged to enumerate software on the client by performing redirections related to moz-icon.

The post CVE-2008-5012 appeared first on CVE Vulnerability.

CVE-2008-4821

Sun, 26 Feb 2023 09:10:44 +0000

Adobe Flash Player 9.0.124.0 and earlier, when a Mozilla browser is used, does not properly interpret jar: URLs, which allows attackers to obtain sensitive information via unknown vectors.

The post CVE-2008-4821 appeared first on CVE Vulnerability.