Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:mozilla:1.8:alpha2:*:*:*:*:*:*

part: a version: 1.8 update: alpha2

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductMozilla (5488dee4-fdb9-5fdb-bb63-5465af3d7de9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github//mozilla/gecko-dev purl2cpe 2026-06-01 10:17:52.541177
pkg:mozilla/mozilla-release purl2cpe 2026-06-01 10:17:52.541179

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-4685 vulnerable 2026-06-03 14:27:13.999345 Details available
Firefox and Mozilla can associate a cookie with multiple domains when the DNS resolver has a non-root domain in its search list, which allows remote attackers to trick a user into accepting a cookie for a hostname formed via search-list expansion of the hostname entered by the user, or steal a cookie for an expanded hostname, as demonstrated by an attacker who operates an ap1.com Internet web site to steal cookies associated with an ap1.com.example.com intranet web site.
Published: 2006-02-01T02:00:00.000Z
Updated: 2024-08-07T23:53:28.695Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-0143 vulnerable 2026-06-03 14:26:49.319858 Details available
Firefox before 1.0 and Mozilla before 1.7.5 display the SSL lock icon when an insecure page loads a binary file from a trusted site, which could facilitate phishing attacks.
Published: 2005-01-29T05:00:00.000Z
Updated: 2024-08-07T21:05:24.790Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1614 vulnerable 2026-06-03 14:26:40.143270 Details available
Mozilla allows remote attackers to cause a denial of service (application crash from invalid memory access) via an "unusual combination of visual elements," including several large MARQUEE tags with large height parameters, as demonstrated by mangleme.
Published: 2005-02-20T05:00:00.000Z
Updated: 2024-08-08T01:00:36.402Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1613 vulnerable 2026-06-03 14:26:40.139569 Details available
Mozilla allows remote attackers to cause a denial of service (application crash from null dereference or infinite loop) via a web page that contains a (1) TEXTAREA, (2) INPUT, (3) FRAMESET or (4) IMG tag followed by a null character and some trailing characters, as demonstrated by mangleme.
Published: 2005-02-20T05:00:00.000Z
Updated: 2024-08-08T01:00:36.308Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.