Approved changes feed: RSS · Atom

cpe:2.3:a:mozilla:mozilla_suite:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMozilla (be1b0d4e-21a7-5a25-9982-bbda6ef43ec1)
ProductMozilla Suite (043143bd-77e5-5461-9d55-72a4af5fb88b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2006-1742 vulnerable 2026-06-08 04:48:57.934060 Details available
The JavaScript engine in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 does not properly handle temporary variables that are not garbage collected, which might allow remote attackers to trigger operations on freed memory and cause memory corruption.
Published: 2006-04-14T10:00:00.000Z
Updated: 2024-08-07T17:19:49.433Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1741 vulnerable 2026-06-08 04:48:57.933020 Details available
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to inject arbitrary Javascript into other sites by (1) "using a modal alert to suspend an event handler while a new page is being loaded", (2) using eval(), and using certain variants involving (3) "new Script;" and (4) using window.__proto__ to extend eval, aka "cross-site JavaScript injection".
Published: 2006-04-14T10:00:00.000Z
Updated: 2024-08-07T17:19:49.531Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1740 vulnerable 2026-06-08 04:48:57.931838 Details available
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to spoof secure site indicators such as the locked icon by opening the trusted site in a popup window, then changing the location to a malicious site.
Published: 2006-04-14T10:00:00.000Z
Updated: 2024-08-07T17:19:49.575Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1736 vulnerable 2026-06-08 04:48:57.926329 Details available
Mozilla Firefox 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to trick users into downloading and saving an executable file via an image that is overlaid by a transparent image link that points to the executable, which causes the executable to be saved when the user clicks the "Save image as..." option. NOTE: this attack is made easier due to a GUI truncation issue that prevents the user from seeing the malicious extension when there is extra whitespace in the filename.
Published: 2006-04-14T10:00:00.000Z
Updated: 2024-08-07T17:19:49.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1735 vulnerable 2026-06-08 04:48:57.925068 Details available
Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to execute arbitrary code by using an eval in an XBL method binding (XBL.method.eval) to create Javascript functions that are compiled with extra privileges.
Published: 2006-04-14T10:00:00.000Z
Updated: 2024-08-07T17:19:49.663Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1734 vulnerable 2026-06-08 04:48:57.923704 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1733 vulnerable 2026-06-08 04:48:57.922258 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1731 vulnerable 2026-06-08 04:48:57.916439 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1729 vulnerable 2026-06-08 04:48:57.907919 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1728 vulnerable 2026-06-08 04:48:57.906961 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1727 vulnerable 2026-06-08 04:48:57.897851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-1724 vulnerable 2026-06-08 04:48:57.895122 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2006-0749 vulnerable 2026-06-08 04:48:55.142003 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-4134 vulnerable 2026-06-08 04:48:43.029401 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2707 vulnerable 2026-06-08 04:48:30.273455 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2706 vulnerable 2026-06-08 04:48:30.272657 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2705 vulnerable 2026-06-08 04:48:30.271923 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2704 vulnerable 2026-06-08 04:48:30.271201 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2703 vulnerable 2026-06-08 04:48:30.270477 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2702 vulnerable 2026-06-08 04:48:30.269446 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2005-2701 vulnerable 2026-06-08 04:48:30.265897 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.