mozilla -- multiple vulnerabilities

2008-12-1700:00:00

vuxml.freebsd.org

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.052 Low

EPSS

Percentile

93.0%

JSON

The Mozilla Foundation reports:

MFSA 2008-69 XSS vulnerabilities in SessionStore
MFSA 2008-68 XSS and JavaScript privilege escalation
MFSA 2008-67 Escaped null characters ignored by CSS parser
MFSA 2008-66 Errors parsing URLs with leading whitespace and
control characters
MFSA 2008-65 Cross-domain data theft via script redirect error
message
MFSA 2008-64 XMLHttpRequest 302 response disclosure
MFSA 2008-62 Additional XSS attack vectors in feed preview
MFSA 2008-61 Information stealing via loadBindingDocument
MFSA 2008-60 Crashes with evidence of memory corruption
(rv:1.9.0.5/1.8.1.19)

OSVersionArchitecturePackageVersionFilename
FreeBSDanynoarchfirefox< 2.0.0.20,1UNKNOWN
FreeBSDanynoarchlinux-firefox< 2.0.0.20UNKNOWN
FreeBSDanynoarchseamonkey< 1.1.14UNKNOWN
FreeBSDanynoarchlinux-seamonkey< 1.1.14UNKNOWN
FreeBSDanynoarchthunderbird< 2.0.0.18UNKNOWN
FreeBSDanynoarchlinux-thunderbird< 2.0.0.18UNKNOWN

OS	Version	Architecture	Package	Version	Filename
FreeBSD	any	noarch	firefox	< 2.0.0.20,1	UNKNOWN
FreeBSD	any	noarch	linux-firefox	< 2.0.0.20	UNKNOWN
FreeBSD	any	noarch	seamonkey	< 1.1.14	UNKNOWN
FreeBSD	any	noarch	linux-seamonkey	< 1.1.14	UNKNOWN
FreeBSD	any	noarch	thunderbird	< 2.0.0.18	UNKNOWN
FreeBSD	any	noarch	linux-thunderbird	< 2.0.0.18	UNKNOWN