Tenable800742.PRMFirefox 3.6.x < 3.6.4 Multiple Vulnerabilities
Versions of Firefox 3.6.x earlier than 3.6.4 are potentially affected by multiple vulnerabilities :
-
Multiple crashes can result in code execution. (MFSA 2010-26)
-
Freed object reuse across plugin instances. (MFSA 2010-28)
-
A heap buffer overflow in nsGenericDOMDataNode::SetTextInternal. (MFSA 2010-29)
-
An integer overflow in XSLT node sorting. (MFSA 2010-30)
The focus() behavior can be used to inject or steal keystrokes. (MFSA 2010-31)
- The ‘Content-Disposition: attachment’ HTTP header is ignored when ‘Content-Type: multipart’ is also present. (MFSA 2010-32)
It is possible to reverse engineer the value used to seed Math.random(). (MFSA 2008-33)
Binary data 800742.prmReferences
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203
www.mozilla.org/security/announce/2010/mfsa2010-26.html
www.mozilla.org/security/announce/2010/mfsa2010-28.html
www.mozilla.org/security/announce/2010/mfsa2010-29.html
www.mozilla.org/security/announce/2010/mfsa2010-30.html
www.mozilla.org/security/announce/2010/mfsa2010-31.html
www.mozilla.org/security/announce/2010/mfsa2010-32.html
www.mozilla.org/security/announce/2010/mfsa2010-33.html
www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.4