| 511521
|
|
downloading file with RTL override (RLO) presents conflicting filenames
|
Core Graveyard
|
File Handling
|
ehsan.akhgari
|
RESO
|
FIXE
|
2016-06-22
|
| 505988
|
|
It's possible to access a double-wrapped object's underlying privileged object
|
Core
|
XPConnect
|
mrbkap
|
RESO
|
FIXE
|
2009-12-15
|
| 503961
|
|
"ASSERTION: overflow containers out of order" with -moz-column
|
Core
|
Layout
|
dholbert
|
RESO
|
FIXE
|
2010-01-28
|
| 515583
|
|
Memory fencepost / integer underflow in ParseFTPList.cpp
|
Core Graveyard
|
Networking: FTP
|
michal.novotny
|
RESO
|
FIXE
|
2024-02-08
|
| 484107
|
|
XPCSafeJSObjectWrapper allows regexp variables to be clobbered
|
Core
|
XPConnect
|
mozilla+ben
|
RESO
|
FIXE
|
2009-10-30
|
| 503226
|
|
document.getSelection() can read cross-origin content selections
|
Core
|
DOM: Core & HTML
|
smaug
|
RESO
|
FIXE
|
2009-10-27
|
| 508927
|
|
"ASSERTION: returning frame that is not in childlist" with xul:listboxbody, XBL
|
Core
|
XUL
|
tnikkel
|
RESO
|
FIXE
|
2010-02-08
|
| 511482
|
|
moz-column-width can freeze the browser
|
Core
|
Layout
|
MatsPalmgren_bugz
|
RESO
|
FIXE
|
2009-10-02
|
| 514776
|
|
GIF with out-of-bounds colormap reference causes OOB read in nsGIFDecoder2::OutputRow
|
Core
|
Graphics: ImageLib
|
alfredkayser
|
RESO
|
FIXE
|
2009-11-09
|
| 399412
|
|
"ASSERTION: overflow containers must be zero-height" with -moz-column, overflowing height
|
Core
|
Layout
|
fantasai.bugs
|
RESO
|
FIXE
|
2018-01-20
|
| 511615
|
|
Satchel should ignore untrusted events
|
Toolkit
|
Form Manager
|
jdinbox
|
RESO
|
FIXE
|
2009-11-11
|
| 511639
|
|
Login manager should ignore untrusted events
|
Toolkit
|
Password Manager
|
jdinbox
|
RESO
|
FIXE
|
2009-11-09
|
| 472590
|
|
"ASSERTION: imgIRequest::STATUS_FRAME_COMPLETE not set"
|
Core
|
Graphics: ImageLib
|
joe
|
RESO
|
FIXE
|
2009-10-08
|
| 511689
|
|
GIF Color Map Parsing Buffer Overflow Vulnerability -- iDefense [V-jb9pzo6q1s]
|
Core
|
Graphics
|
joe
|
RESO
|
FIXE
|
2009-11-09
|
| 493709
|
|
Combined EV enablement
|
Core
|
Security: PSM
|
kaie
|
RESO
|
FIXE
|
2009-09-24
|
| 508265
|
|
Localized bookmarks backup are not replaced by new backups
|
Firefox
|
Bookmarks & History
|
mak
|
RESO
|
FIXE
|
2014-03-27
|
| 497013
|
|
Crash [@ SinkContext::~SinkContext] with document.write in -moz-binding
|
Core
|
DOM: HTML Parser
|
mrbkap
|
RESO
|
FIXE
|
2011-06-13
|
| 521969
|
|
Cannot reference tooltip by a changed ID inside XBL
|
Core
|
XBL
|
nobody
|
RESO
|
FIXE
|
2012-05-07
|
| 519589
|
|
twitter reply transparent image is not so transparent on trunk
|
Core
|
Graphics: ImageLib
|
joe
|
VERI
|
FIXE
|
2009-11-23
|
| 516862
|
|
Array indexing error in js/src/dtoa.c's Balloc() leads to floating point memory vulnerability (SA36711)
|
Core
|
JavaScript Engine
|
reed
|
VERI
|
FIXE
|
2013-03-19
|
| 506212
|
|
UI elements inside XBL are drawn incorrectly when initialized with broadcasters
|
Core
|
XUL
|
smaug
|
VERI
|
FIXE
|
2009-09-28
|
| 509602
|
|
Crash [@ nsTreeBodyFrame::InvalidateScrollbars] with overlay, tree and DOMAttrModified
|
Core
|
Layout
|
tnikkel
|
VERI
|
FIXE
|
2011-06-13
|
| 519839
|
|
SVG fails to render correctly
|
Core
|
SVG
|
wtc
|
VERI
|
FIXE
|
2010-02-25
|
| 480619
|
|
Firefox does not load CSS and images when loading a secure (SSL, https) page for the first time (or after ‘clear private data’) and requires refresh to load properly.
|
Core
|
Networking
|
bjarne
|
VERI
|
FIXE
|
2019-08-20
|
| 490760
|
|
Crash [@ SetNodeTextContent] with DOMNodeRemoved, setting innerHTML of <style>
|
Core
|
DOM: Core & HTML
|
brandon
|
VERI
|
FIXE
|
2019-03-13
|
| 514960
|
|
[1.9.0]Data from Faulting Address controls Branch Selection starting at gklayout!nsCachedStyleData::GetStyleDisplay
|
Core
|
Layout
|
MatsPalmgren_bugz
|
VERI
|
FIXE
|
2009-12-01
|
| 413735
|
|
JS shell, js.c has a buffer overflow for user-supplied input
|
Core
|
JavaScript Engine
|
mrbkap
|
VERI
|
FIXE
|
2010-02-13
|
| 399227
|
|
Crash @ nsTreeSelection::GetSingle, null mTree
|
Toolkit
|
UI Widgets
|
standard8
|
VERI
|
FIXE
|
2009-10-12
|
| 516396
|
|
Array indexing error in NSPR's Balloc() leads to floating point memory vulnerability (SA36711)
|
NSPR
|
NSPR
|
wtc
|
VERI
|
FIXE
|
2010-02-26
|