Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:mozilla:1.7.7:*:*:*:*:*:*:*

part: a version: 1.7.7 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductMozilla (5488dee4-fdb9-5fdb-bb63-5465af3d7de9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github//mozilla/gecko-dev purl2cpe 2026-06-01 10:17:52.541150
pkg:mozilla/mozilla-release purl2cpe 2026-06-01 10:17:52.541154

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-0496 vulnerable 2026-06-08 04:48:54.153550 Details available
Cross-site scripting (XSS) vulnerability in Mozilla 1.7.12 and possibly earlier, Mozilla Firefox 1.0.7 and possibly earlier, and Netscape 8.1 and possibly earlier, allows remote attackers to inject arbitrary web script or HTML via the -moz-binding (Cascading Style Sheets) CSS property, which does not require that the style sheet have the same origin as the web page, as demonstrated by the compromise of a large number of LiveJournal accounts.
Published: 2006-02-01T02:00:00.000Z
Updated: 2024-08-07T16:34:14.832Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4685 vulnerable 2026-06-08 04:48:44.730269 Details available
Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site.
Published: 2006-02-01T02:00:00.000Z
Updated: 2024-08-07T23:53:28.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2270 vulnerable 2026-06-08 04:48:28.783176 Details available
Firefox before 1.0.5 and Mozilla before 1.7.9 does not properly clone base objects, which allows remote attackers to execute arbitrary code by navigating the prototype chain to reach a privileged object.
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:48.688Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2269 vulnerable 2026-06-08 04:48:28.781867 Details available
Firefox before 1.0.5, Mozilla before 1.7.9, and Netscape 8.0.2 does not properly verify the associated types of DOM node names within the context of their namespaces, which allows remote attackers to modify certain tag properties, possibly leading to execution of arbitrary script or code, as demonstrated using an XHTML document with IMG tags with custom properties ("XHTML node spoofing").
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:47.768Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2268 vulnerable 2026-06-08 04:48:28.780658 Details available
Firefox before 1.0.5 and Mozilla before 1.7.9 does not clearly associate a Javascript dialog box with the web page that generated it, which allows remote attackers to spoof a dialog box from a trusted site and facilitates phishing attacks, aka the "Dialog Origin Spoofing Vulnerability."
Published: 2005-07-13T04:00:00.000Z
Updated: 2024-08-07T22:22:48.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2266 vulnerable 2026-06-08 04:48:28.778890 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2265 vulnerable 2026-06-08 04:48:28.777747 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2263 vulnerable 2026-06-08 04:48:28.775926 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2261 vulnerable 2026-06-08 04:48:28.758088 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2260 vulnerable 2026-06-08 04:48:28.756795 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1937 vulnerable 2026-06-08 04:48:27.938943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1532 vulnerable 2026-06-08 04:48:26.865713 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-1531 vulnerable 2026-06-08 04:48:26.864539 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.