383478
|
|
File type confusion vulnerability due to null bytes in URL (encoded as %00)
|
Core
|
Security
|
dveditz
|
RESO
|
FIXE
|
2024-01-13
|
359821
|
|
Firefox just crashes after about 10 minutes of use [@ nsHTMLDocument::GetElementById]
|
Core
|
DOM: Core & HTML
|
mozilla
|
RESO
|
FIXE
|
2019-03-13
|
390488
|
|
[FIXr]Event listeners should have access to the JS callstack
|
Core
|
DOM: Events
|
bzbarsky
|
RESO
|
FIXE
|
2008-01-09
|
285211
|
|
xpcom component registration picking up the wrong copies of components (e.g,., after viewing about:plugins)
|
Camino Graveyard
|
General
|
stuart.morgan+bugzilla
|
RESO
|
FIXE
|
2007-05-13
|
337750
|
|
bookmarks-corrupted-n.plist often written as empty file
|
Camino Graveyard
|
Bookmarks
|
stuart.morgan+bugzilla
|
RESO
|
FIXE
|
2007-08-08
|
184449
|
|
[10.3] Most AppleScript doesn't work and can't open AppleScript dictionary (Shockwave needs a resource file)
|
Camino Graveyard
|
OS Integration
|
stuart.morgan+bugzilla
|
RESO
|
FIXE
|
2007-05-14
|
369174
|
|
Omnibus ad-blocking bug for February
|
Camino Graveyard
|
Annoyance Blocking
|
alqahira
|
RESO
|
FIXE
|
2007-05-13
|
372612
|
|
Omnibus ad-blocking bug for March
|
Camino Graveyard
|
Annoyance Blocking
|
alqahira
|
RESO
|
FIXE
|
2007-05-13
|
376270
|
|
Omnibus ad-blocking bug for April
|
Camino Graveyard
|
Annoyance Blocking
|
alqahira
|
RESO
|
FIXE
|
2007-05-13
|
379231
|
|
Omnibus ad-blocking bug for May
|
Camino Graveyard
|
Annoyance Blocking
|
alqahira
|
RESO
|
FIXE
|
2017-01-08
|
379315
|
|
Release Notes for Camino 1.0.5
|
Camino Graveyard
|
General
|
alqahira
|
RESO
|
FIXE
|
2007-06-10
|
383016
|
|
Omnibus ad-blocking bug for June
|
Camino Graveyard
|
Annoyance Blocking
|
alqahira
|
RESO
|
FIXE
|
2007-07-24
|
383079
|
|
Fix edgesuite.net rules on 180branch for 1.0.5
|
Camino Graveyard
|
Annoyance Blocking
|
alqahira
|
RESO
|
FIXE
|
2007-06-04
|
326777
|
|
[FIX]Event queue spinners must push null JSContext if they could be called from JS
|
Core
|
Security
|
bzbarsky
|
RESO
|
FIXE
|
2007-10-17
|
364461
|
|
[FIX]Pagehide not always dispatched in subframes
|
Core
|
DOM: Navigation
|
bzbarsky
|
RESO
|
FIXE
|
2008-07-31
|
385880
|
|
[FIX]"ASSERTION: Non-row-group primary frame list child of an nsTableFrame?" with <xul:menubar>
|
Core
|
Layout: Tables
|
bzbarsky
|
RESO
|
FIXE
|
2007-12-16
|
387979
|
|
Can't access about:blank iframe after reload
|
Core
|
DOM: Core & HTML
|
bzbarsky
|
RESO
|
FIXE
|
2019-03-13
|
386998
|
|
Can still reach remote moz-icon: files through URL encoding
|
Core
|
Graphics: ImageLib
|
cbiesinger
|
RESO
|
FIXE
|
2007-12-10
|
380998
|
|
StackGrowthDirection is not reliable with Sun Studio 11
|
Core
|
JavaScript Engine
|
crowderbt
|
RESO
|
FIXE
|
2007-08-20
|
380398
|
|
appversion manifest flag is broken in certain situations
|
Toolkit
|
Startup and Profile
|
dtownsend
|
RESO
|
FIXE
|
2008-07-31
|
376573
|
|
Potential integer overflow leads to buffers overflow in XBM decoder
|
Core
|
Graphics: ImageLib
|
dveditz
|
RESO
|
FIXE
|
2007-08-23
|
381264
|
|
XHR TRACK method (IIS) could be used to compromise Authorization and Cookie headers
|
Core
|
XML
|
dveditz
|
RESO
|
FIXE
|
2007-08-24
|
383406
|
|
Firefox crashed when add bookmark with Orca running [@nsXULSelectableAccessible::RefSelection]
|
Core
|
Disability Access AP
|
ginnchen+exoracle
|
RESO
|
FIXE
|
2011-06-09
|
380474
|
|
XSS by loading a target site in the middle of calling addEventListener()
|
Core
|
DOM: Events
|
jstenback+bmo
|
RESO
|
FIXE
|
2007-09-27
|
380476
|
|
XSS by loading a target site in the middle of calling setTimeout()
|
Core
|
Security
|
jstenback+bmo
|
RESO
|
FIXE
|
2007-09-27
|
379190
|
|
crashes when loading chrome urls
|
Core
|
Security: PSM
|
kaie
|
RESO
|
FIXE
|
2007-08-21
|
379550
|
|
Proposing threading safety patch for stable branch(es)
|
Core
|
XPCOM
|
kaie
|
RESO
|
FIXE
|
2007-07-09
|
387613
|
|
Crash [@ nsNSSCertificate::GetCert fb3ac2be] on click submit on chrome://pippki/content/editcacert.xul
|
Core Graveyard
|
Security: UI
|
kaie
|
RESO
|
FIXE
|
2016-09-27
|
363592
|
|
GCC build errors in nsImageWin.h and nsImageWin.cpp
|
Core Graveyard
|
GFX: Win32
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2009-01-22
|
365923
|
|
[GTK1 only?] Crash [@ SetFontCharsetInfo]
|
Core Graveyard
|
GFX: Gtk
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2011-06-13
|
256515
|
|
OpenBSD: ld libldap50.a error
|
Directory
|
LDAP C SDK
|
mcs
|
RESO
|
FIXE
|
2007-07-11
|
352882
|
|
Untrusted object should not be able to usefully implement nsISecurityCheckedComponent
|
Core
|
XPConnect
|
mrbkap
|
RESO
|
FIXE
|
2007-09-06
|
377090
|
|
Introduce API to null out and restore cx->fp on a JSContext
|
Core
|
JavaScript Engine
|
mrbkap
|
RESO
|
FIXE
|
2007-06-22
|
175651
|
|
CJK (at least Chinese and Japanese) font Preferences changes not applied to any CJK Web page
|
Camino Graveyard
|
Preferences
|
murph
|
RESO
|
FIXE
|
2008-06-15
|
322436
|
|
WARNING: nsBlockFrame::CheckFloats: Explicit float list is out of sync with float cache
|
Core
|
Layout
|
roc
|
RESO
|
FIXE
|
2018-08-29
|
384477
|
|
Crash [@ nsIFrame:GetParent] with wrapping, grid, float
|
Core
|
Web Painting
|
roc
|
RESO
|
FIXE
|
2018-08-29
|
386607
|
|
Fix Mac 1.8 branch regression from bug 344228
|
Core
|
XUL
|
roc
|
RESO
|
FIXE
|
2008-07-31
|
381120
|
|
trees set attributes during reflow (nsTreeBodyFrame::UpdateScrollbars)
|
Core
|
XUL
|
smaug
|
RESO
|
FIXE
|
2009-02-09
|
389259
|
|
Scroll thumbs non-functional beginning in 2007072300 branch build
|
Camino Graveyard
|
Page Layout
|
stuart.morgan+bugzilla
|
RESO
|
FIXE
|
2007-08-09
|
382754
|
|
Unsafe DOM mutation events fired in presentation code on 1.8 and 1.8.0
|
Core
|
DOM: Events
|
vladimir.sukhoy
|
RESO
|
FIXE
|
2012-12-03
|
382532
|
|
instanceof, etc. broken by use of |prototype| in heavyweight constructor
|
Core
|
JavaScript Engine
|
brendan
|
VERI
|
FIXE
|
2007-08-06
|
371858
|
|
[FIX]Pushing null JSContext on the stack doesn't prevent bogus subject principals
|
Core
|
Security
|
bzbarsky
|
VERI
|
FIXE
|
2008-05-07
|
387333
|
|
[FIX]unauthorized access to wyciwyg:// documents possible
|
Core
|
Security
|
bzbarsky
|
VERI
|
FIXE
|
2010-10-27
|
380842
|
|
[regression] table-cell :before/:after pseudo-element set to display:block show as display:inline
|
Core
|
CSS Parsing and Comp
|
bzbarsky
|
VERI
|
FIXE
|
2007-07-10
|
382600
|
|
[FIX]When an empty select box is disabled an XX is added to it (1.8 branch only)
|
Core
|
Layout: Form Control
|
bzbarsky
|
VERI
|
FIXE
|
2007-07-10
|
382503
|
|
"Assertion failure: (slot) < (uint32)(obj)->dslots[-1]" with prototype=regexp
|
Core
|
JavaScript Engine
|
general
|
VERI
|
FIXE
|
2007-12-03
|
379245
|
|
Interpreter on 1.8.* does not clear obj register during inline calls
|
Core
|
JavaScript Engine
|
igor
|
VERI
|
FIXE
|
2007-09-21
|
375976
|
|
"Assertion failure: *flagp != GCF_FINAL" with post-increment
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2007-09-21
|
381374
|
|
"Assertion failure: *flagp != GCF_FINAL" with getter, setter, watch, and more
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2007-09-21
|
373919
|
|
Crash [@ nsIFrame::GetOffsetTo] with xul, html elements, position fixed and moving elements
|
Core
|
Layout
|
roc
|
VERI
|
FIXE
|
2013-12-24
|
388583
|
|
Autocomplete dropdown doesn't update when scrolling with scrollbar
|
Core
|
XUL
|
roc
|
VERI
|
FIXE
|
2011-05-24
|
386506
|
|
Keychain is broken in 1.0.5 on 10.2
|
Camino Graveyard
|
OS Integration
|
stuart.morgan+bugzilla
|
VERI
|
FIXE
|
2007-08-30
|