mozilla -- multiple vulnerabilities

2008-03-2600:00:00

vuxml.freebsd.org

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.428 Medium

EPSS

Percentile

97.3%

JSON

The Mozilla Foundation reports of multiple security issues
in Firefox, Seamonkey, and Thunderbird. Several of these
issues can probably be used to run arbitrary code with the
privilege of the user running the program.

MFSA 2008-19
XUL popup spoofing variant (cross-tab popups)
MFSA 2008-18
Java socket connection to any local port via LiveConnect
MFSA 2008-17
Privacy issue with SSL Client Authentication
MFSA 2008-16
HTTP Referrer spoofing with malformed URLs
MFSA 2008-15
Crashes with evidence of memory corruption (rv:1.8.1.13)
MFSA 2008-14
JavaScript privilege escalation and arbitrary code execution

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfirefox< 2.0.0.13,1UNKNOWN
FreeBSDanynoarchlinux-firefox< 2.0.0.13UNKNOWN
FreeBSDanynoarchlinux-firefox-devel< 2.0.0.13UNKNOWN
FreeBSDanynoarchseamonkey< 1.1.9UNKNOWN
FreeBSDanynoarchlinux-seamonkey< 1.1.9UNKNOWN
FreeBSDanynoarchflock< 1.1.1UNKNOWN
FreeBSDanynoarchlinux-flock< 1.1.1UNKNOWN
FreeBSDanynoarchthunderbird< 2.0.0.14UNKNOWN
FreeBSDanynoarchlinux-thunderbird< 2.0.0.14UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	firefox	< 2.0.0.13,1	UNKNOWN
FreeBSD	any	noarch	linux-firefox	< 2.0.0.13	UNKNOWN
FreeBSD	any	noarch	linux-firefox-devel	< 2.0.0.13	UNKNOWN
FreeBSD	any	noarch	seamonkey	< 1.1.9	UNKNOWN
FreeBSD	any	noarch	linux-seamonkey	< 1.1.9	UNKNOWN
FreeBSD	any	noarch	flock	< 1.1.1	UNKNOWN
FreeBSD	any	noarch	linux-flock	< 1.1.1	UNKNOWN
FreeBSD	any	noarch	thunderbird	< 2.0.0.14	UNKNOWN
FreeBSD	any	noarch	linux-thunderbird	< 2.0.0.14	UNKNOWN