CVSS: 9.8EPSS: 4%CPEs: 265EXPL: 0CVE-2011-2377 – Mozilla Crash caused by corrupted JPEG image (MFSA 2011-21)
https://notcve.org/view.php?id=CVE-2011-2377
30 Jun 2011 — Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a multipart/x-mixed-replace image. Mozilla Firefox antes de v3.6.18 y v4.x hasta v4.0.1, Thunderbird antes de v3.1.11, y SeaMonkey hasta v2.0.14, permite a atacantes remotos causar una denegación de servicio (corrupción de memoria y caída de aplicación) o posiblemente e... • http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 2%CPEs: 251EXPL: 0CVE-2011-0083 – Mozilla Firefox SVGPathSegList.replaceItem Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0083
21 Jun 2011 — Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback. Vulnerabilidad de uso después de liberación (use-after-free) en la función nsSVGPathSegList::ReplaceItem de la implementación del elemento listas SV... • http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 2%CPEs: 251EXPL: 0CVE-2011-0085 – Mozilla Firefox nsXULCommandDispatcher Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0085
21 Jun 2011 — Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafted XUL document that dequeues the current command updater. Vulnerabilidad use-after-free en la función nsXULCommandDispatcher en Mozilla Firefox antes de v3.6.18, Thunderbird antes de v3.1.11, y SeaMonkey hasta v2.0.14 permite a atacantes remotos ejecutar código de su elección mediante un doc... • http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 2%CPEs: 251EXPL: 0CVE-2011-2363 – Mozilla Firefox SVGPointList.appendItem Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-2363
21 Jun 2011 — Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via vectors involving a user-supplied callback. Vulnerabilidad de uso después de la liberación en la función nsSVGPointList::AppendElement en la implementación de listas de elementos SVG en Mozill... • http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html • CWE-399: Resource Management Errors •
CVSS: 10.0EPSS: 81%CPEs: 164EXPL: 2CVE-2011-0073 – Mozilla Firefox nsTreeRange Dangling Pointer Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0073
07 May 2011 — Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly use nsTreeRange data structures, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to a "dangling pointer." Mozilla Firefox anterior a v3.5.19 y v3.6.x anterior a v3.6.17, y SeaMonkey anterior a v2.0.14, no utiliza correctamente las estructuras de datos nsTreeRange, permitiendo a atacantes remotos ejecutar código arbitrario a través de vectores no especificados produc... • https://www.exploit-db.com/exploits/17419 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 83%CPEs: 164EXPL: 5CVE-2011-0065 – Mozilla Firefox OBJECT mChannel Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0065
07 May 2011 — Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mChannel. Vulnerabilidad de uso después de la liberación (Use-after-free) en Mozilla Firefox anterior a v3.5.19 y v3.6.x anterior a v3.6.17, y SeaMonkey anterior a v2.0.14, permite a atacantes remotos ejecutar código arbitrario mediante OBJECT's mChannel. This vulnerability allows remote attackers to execute arbi... • https://packetstorm.news/files/id/129259 • CWE-399: Resource Management Errors CWE-416: Use After Free •
CVSS: 10.0EPSS: 4%CPEs: 164EXPL: 0CVE-2011-0066 – Mozilla Firefox OBJECT mObserverList Remote Code Execution Vulnerability
https://notcve.org/view.php?id=CVE-2011-0066
07 May 2011 — Use-after-free vulnerability in Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, allows remote attackers to execute arbitrary code via vectors related to OBJECT's mObserverList. Vulnerabilidad de uso después de la liberación (Use-after-free) en Mozilla Firefox anterior a v3.5.19 y v3.6.x anterior a v3.6.17, y SeaMonkey anterior a v2.0.14, permite a atacantes remotos ejecutar código arbitrario mediante OBJECT's mObserverList. This vulnerability allows remote attackers to ex... • http://downloads.avaya.com/css/P8/documents/100144158 • CWE-399: Resource Management Errors CWE-416: Use After Free •
CVSS: 7.5EPSS: 0%CPEs: 164EXPL: 1CVE-2011-0067 – Mozilla untrusted events can trigger autocomplete popup (MFSA 2011-14)
https://notcve.org/view.php?id=CVE-2011-0067
07 May 2011 — Mozilla Firefox before 3.5.19 and 3.6.x before 3.6.17, and SeaMonkey before 2.0.14, does not properly implement autocompletion for forms, which allows remote attackers to read form history entries via a Java applet that spoofs interaction with the autocomplete controls. Mozilla Firefox v3.5.19 y v3.6.x anterior a v3.6.17, y SeaMonkey anterior a v2.0.14, no implementa adecuadamente el autocompletado de formularios, permitiendo a atacantes remotos leer las entradas del historial de formularios a través de un ... • http://downloads.avaya.com/css/P8/documents/100144158 • CWE-20: Improper Input Validation •
CVSS: 10.0EPSS: 2%CPEs: 176EXPL: 1CVE-2011-0069 – Mozilla javascript crash (MFSA 2011-12)
https://notcve.org/view.php?id=CVE-2011-0069
07 May 2011 — Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0070. Vulnerabilidad no especificada en el motor del navegador de Mozilla Firefox v3.5.x anterior a v3.5.19, v3.6.x anterior a v3.6.17,... • http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird •
CVSS: 10.0EPSS: 2%CPEs: 176EXPL: 1CVE-2011-0070 – Mozilla double free flaw (MFSA 2011-12)
https://notcve.org/view.php?id=CVE-2011-0070
07 May 2011 — Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before 3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0069. Vulnerabilidad no especificada en el motor del navegador de Mozilla Firefox v3.5.x anterior a v3.5.19, v3.6.x anterior a v3.6.17,... • http://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_thunderbird •