Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:firefox:2.0_.4:*:*:*:*:*:*:*

part: a version: 2.0_.4 update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductFirefox (d152d976-2d5e-5cc4-89b6-e80c6d067896)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:deb/debian/firefox purl2cpe 2026-06-01 10:17:52.815929
pkg:mozilla/mozilla-central purl2cpe 2026-06-01 10:17:52.815931
pkg:rpm/fedora/firefox purl2cpe 2026-06-01 10:17:52.815933
pkg:rpm/opensuse/mozillafirefox purl2cpe 2026-06-01 10:17:52.815934

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2009-3987 vulnerable 2026-06-08 04:51:45.745010 Details available
The GeckoActiveXObject function in Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, generates different exception messages depending on whether the referenced COM object is listed in the registry, which allows remote attackers to obtain potentially sensitive information about installed software by making multiple calls that specify the ProgID values of different COM objects.
Published: 2009-12-17T17:00:00.000Z
Updated: 2024-08-07T06:45:50.904Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3986 vulnerable 2026-06-08 04:51:45.740587 Details available
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to execute arbitrary JavaScript with chrome privileges by leveraging a reference to a chrome window from a content window, related to the window.opener property.
Published: 2009-12-17T17:00:00.000Z
Updated: 2024-08-07T06:45:50.896Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3985 vulnerable 2026-06-08 04:51:45.736615 Details available
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to associate spoofed content with an invalid URL by setting document.location to this URL, and then writing arbitrary web script or HTML to the associated blank document, a related issue to CVE-2009-2654.
Published: 2009-12-17T17:00:00.000Z
Updated: 2024-08-07T06:45:50.919Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3984 vulnerable 2026-06-08 04:51:45.732641 Details available
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to spoof an SSL indicator for an http URL or a file URL by setting document.location to an https URL corresponding to a site that responds with a No Content (aka 204) status code and an empty body.
Published: 2009-12-17T17:00:00.000Z
Updated: 2024-08-07T06:45:50.789Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3983 vulnerable 2026-06-08 04:51:45.728604 Details available
Mozilla Firefox before 3.0.16 and 3.5.x before 3.5.6, and SeaMonkey before 2.0.1, allows remote attackers to send authenticated requests to arbitrary applications by replaying the NTLM credentials of a browser user.
Published: 2009-12-17T17:00:00.000Z
Updated: 2024-08-07T06:45:50.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3981 vulnerable 2026-06-08 04:51:45.723124 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3979 vulnerable 2026-06-08 04:51:45.701727 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3079 vulnerable 2026-06-08 04:51:32.189414 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3078 vulnerable 2026-06-08 04:51:32.186379 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3077 vulnerable 2026-06-08 04:51:32.183073 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3076 vulnerable 2026-06-08 04:51:32.179930 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3075 vulnerable 2026-06-08 04:51:32.176883 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3074 vulnerable 2026-06-08 04:51:32.173809 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3072 vulnerable 2026-06-08 04:51:32.170868 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3071 vulnerable 2026-06-08 04:51:32.168131 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-3070 vulnerable 2026-06-08 04:51:32.165518 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2664 vulnerable 2026-06-08 04:51:29.724285 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2663 vulnerable 2026-06-08 04:51:29.721700 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2654 vulnerable 2026-06-08 04:51:29.653310 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2535 vulnerable 2026-06-08 04:51:29.084826 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2470 vulnerable 2026-06-08 04:51:28.701674 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2463 vulnerable 2026-06-08 04:51:28.657838 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2462 vulnerable 2026-06-08 04:51:28.641697 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2065 vulnerable 2026-06-08 04:51:26.531039 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-2061 vulnerable 2026-06-08 04:51:26.437899 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1841 vulnerable 2026-06-08 04:51:25.234279 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1838 vulnerable 2026-06-08 04:51:25.209720 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1836 vulnerable 2026-06-08 04:51:25.132978 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1835 vulnerable 2026-06-08 04:51:25.129129 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1834 vulnerable 2026-06-08 04:51:25.125636 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1833 vulnerable 2026-06-08 04:51:25.120690 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1832 vulnerable 2026-06-08 04:51:25.110294 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1311 vulnerable 2026-06-08 04:51:14.485892 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1309 vulnerable 2026-06-08 04:51:14.479510 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1308 vulnerable 2026-06-08 04:51:14.476480 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1306 vulnerable 2026-06-08 04:51:14.470936 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-1169 vulnerable 2026-06-08 04:51:13.367929 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0821 vulnerable 2026-06-08 04:51:11.535658 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0356 vulnerable 2026-06-08 04:51:09.065609 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2009-0355 vulnerable 2026-06-08 04:51:09.059789 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2933 vulnerable 2026-06-08 04:50:32.617392 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2808 vulnerable 2026-06-08 04:50:32.233319 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2008-2806 vulnerable 2026-06-08 04:50:32.204135 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.