Ubuntu 10.04 LTS / 10.10 : thunderbird vulnerabilities (USN-1050-1)

{"result": {"cve": [{"id": "CVE-2011-0061", "type": "cve", "title": "CVE-2011-0061", "description": "Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image.", "published": "2011-03-02T15:00:01", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0061", "cvelist": ["CVE-2011-0061"], "lastseen": "2017-04-18T15:52:53"}, {"id": "CVE-2011-0053", "type": "cve", "title": "CVE-2011-0053", "description": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.", "published": "2011-03-02T15:00:01", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0053", "cvelist": ["CVE-2011-0053"], "lastseen": "2017-04-18T15:52:53"}, {"id": "CVE-2011-0062", "type": "cve", "title": "CVE-2011-0062", "description": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x before 3.1.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.", "published": "2011-03-02T15:00:01", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2011-0062", "cvelist": ["CVE-2011-0062"], "lastseen": "2017-04-18T15:52:53"}, {"id": "CVE-2010-1585", "type": "cve", "title": "CVE-2010-1585", "description": "The nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a chrome document, which makes it easier for remote attackers to execute arbitrary JavaScript with chrome privileges via a javascript: URI in input to an extension, as demonstrated by a javascript:alert sequence in (1) the HREF attribute of an A element or (2) the ACTION attribute of a FORM element.", "published": "2010-04-28T18:30:00", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2010-1585", "cvelist": ["CVE-2010-1585"], "lastseen": "2017-04-18T15:52:42"}], "openvas": [{"id": "OPENVAS:801904", "type": "openvas", "title": "Mozilla Products Buffer Overflow Vulnerability March-11 (Windows)", "description": "The host is installed with Mozilla Firefox/Seamonkey/Thunderbird that are prone\n to buffer overflow vulnerability.", "published": "2011-03-10T00:00:00", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=801904", "cvelist": ["CVE-2011-0061"], "lastseen": "2017-07-12T10:55:47"}, {"id": "OPENVAS:831346", "type": "openvas", "title": "Mandriva Update for mozilla-thunderbird MDVSA-2011:042 (mozilla-thunderbird)", "description": "Check for the Version of mozilla-thunderbird", "published": "2011-03-15T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=831346", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2017-07-24T12:55:50"}, {"id": "OPENVAS:840596", "type": "openvas", "title": "Ubuntu Update for thunderbird vulnerabilities USN-1050-1", "description": "Ubuntu Update for Linux kernel vulnerabilities USN-1050-1", "published": "2011-03-07T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=840596", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2017-07-25T10:55:43"}, {"id": "OPENVAS:1361412562310122232", "type": "openvas", "title": "Oracle Linux Local Check: ELSA-2011-0311", "description": "Oracle Linux Local Security Checks ELSA-2011-0311", "published": "2015-10-06T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310122232", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2017-07-24T12:54:01"}, {"id": "OPENVAS:870643", "type": "openvas", "title": "RedHat Update for thunderbird RHSA-2011:0311-01", "description": "Check for the Version of thunderbird", "published": "2012-07-09T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=870643", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2017-07-27T10:50:26"}, {"id": "OPENVAS:880476", "type": "openvas", "title": "CentOS Update for firefox CESA-2011:0310 centos4 i386", "description": "Check for the Version of firefox", "published": "2011-03-07T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=880476", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2017-07-25T10:55:29"}, {"id": "OPENVAS:831344", "type": "openvas", "title": "Mandriva Update for firefox MDVSA-2011:041 (firefox)", "description": "Check for the Version of firefox", "published": "2011-03-08T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=831344", "cvelist": ["CVE-2011-0061", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2017-07-24T12:55:31"}, {"id": "OPENVAS:69147", "type": "openvas", "title": "FreeBSD Ports: firefox", "description": "The remote host is missing an update to the system as announced in the referenced advisory.\nThe following packages are affected:\n firefox\n libxul\n linux-firefox\n linux-firefox-devel\n linux-seamonkey\n linux-thunderbird\n seamonkey\n thunderbird", "published": "2011-03-09T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=69147", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2017-07-02T21:13:34"}, {"id": "OPENVAS:870403", "type": "openvas", "title": "RedHat Update for firefox RHSA-2011:0310-01", "description": "Check for the Version of firefox", "published": "2011-03-07T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=870403", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2017-07-27T10:55:01"}, {"id": "OPENVAS:1361412562310122235", "type": "openvas", "title": "Oracle Linux Local Check: ELSA-2011-0310", "description": "Oracle Linux Local Security Checks ELSA-2011-0310", "published": "2015-10-06T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310122235", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2017-07-24T12:53:05"}], "nessus": [{"id": "ORACLELINUX_ELSA-2011-0374.NASL", "type": "nessus", "title": "Oracle Linux 4 / 6 : thunderbird (ELSA-2011-0374)", "description": "From Red Hat Security Advisory 2011:0374 :\n\nAn updated thunderbird package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 4, 5, and 6.\n\nThe Red Hat Security Response Team has rated this update as having important security impact.\n\nMozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis erratum blacklists a small number of HTTPS certificates.\n(BZ#689430)\n\nThis update also fixes the following bug :\n\n* The RHSA-2011:0312 and RHSA-2011:0311 updates introduced a regression, preventing some Java content and plug-ins written in Java from loading. With this update, the Java content and plug-ins work as expected. (BZ#683076)\n\nAll Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.", "published": "2013-07-12T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=68234", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051"], "lastseen": "2016-09-26T17:23:18"}, {"id": "MOZILLA_THUNDERBIRD_318.NASL", "type": "nessus", "title": "Mozilla Thunderbird 3.1 < 3.1.8 Multiple Vulnerabilities", "description": "The installed version of Thunderbird 3.1 is earlier than 3.1.8.\nSuch versions are potentially affected by multiple vulnerabilities :\n\n - Multiple memory corruption errors exist and may lead to arbitrary code execution. (MFSA 2011-01)\n\n - An input validation error exists in the class, 'ParanoidFragmentSink', which allows inline JavaScript and 'javascript:' URLs in a chrome document. Note that no unsafe usage occurs in Mozilla products, however community generated extensions could.(MFSA 2011-08)\n\n - A buffer overflow exists related to JPEG decoding and may lead to arbitrary code execution. (MFSA 2011-09)", "published": "2011-03-03T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=52532", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2017-06-10T06:42:19"}, {"id": "SL_20110301_THUNDERBIRD_ON_SL6_X.NASL", "type": "nessus", "title": "Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64", "description": "Several flaws were found in the processing of malformed HTML content.\nMalicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2010-1585, CVE-2011-0053, CVE-2011-0062)\n\nA flaw was found in the way Thunderbird handled malformed JPEG images.\nAn HTML mail message containing a malicious JPEG image could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2011-0061)\n\nAll running instances of Thunderbird must be restarted for the update to take effect.", "published": "2012-08-01T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=60976", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2016-09-26T17:24:09"}, {"id": "REDHAT-RHSA-2011-0374.NASL", "type": "nessus", "title": "RHEL 4 / 5 / 6 : thunderbird (RHSA-2011:0374)", "description": "An updated thunderbird package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 4, 5, and 6.\n\nThe Red Hat Security Response Team has rated this update as having important security impact.\n\nMozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis erratum blacklists a small number of HTTPS certificates.\n(BZ#689430)\n\nThis update also fixes the following bug :\n\n* The RHSA-2011:0312 and RHSA-2011:0311 updates introduced a regression, preventing some Java content and plug-ins written in Java from loading. With this update, the Java content and plug-ins work as expected. (BZ#683076)\n\nAll Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.", "published": "2011-03-23T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=52762", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051"], "lastseen": "2017-01-05T02:14:56"}, {"id": "ORACLELINUX_ELSA-2011-0311.NASL", "type": "nessus", "title": "Oracle Linux 6 : thunderbird (ELSA-2011-0311)", "description": "From Red Hat Security Advisory 2011:0311 :\n\nAn updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nMozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed HTML content.\nMalicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2010-1585, CVE-2011-0053, CVE-2011-0062)\n\nA flaw was found in the way Thunderbird handled malformed JPEG images.\nAn HTML mail message containing a malicious JPEG image could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2011-0061)\n\nAll Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.", "published": "2013-07-12T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=68214", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2016-09-26T17:26:34"}, {"id": "REDHAT-RHSA-2011-0311.NASL", "type": "nessus", "title": "RHEL 6 : thunderbird (RHSA-2011:0311)", "description": "An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 6.\n\nThe Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nMozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed HTML content.\nMalicious HTML content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2010-1585, CVE-2011-0053, CVE-2011-0062)\n\nA flaw was found in the way Thunderbird handled malformed JPEG images.\nAn HTML mail message containing a malicious JPEG image could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2011-0061)\n\nAll Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.", "published": "2011-03-02T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=52495", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2017-01-05T02:13:46"}, {"id": "MANDRIVA_MDVSA-2011-042.NASL", "type": "nessus", "title": "Mandriva Linux Security Advisory : mozilla-thunderbird (MDVSA-2011:042)", "description": "Security issues were identified and fixed in mozilla-thunderbird :\n\nMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors (CVE-2011-0053).\n\nBuffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted JPEG image (CVE-2011-0061).\n\nMultiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.6.x before 3.6.14 and Thunderbird 3.1.x before 3.1.8 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors (CVE-2011-0062).\n\nThe nsIScriptableUnescapeHTML.parseFragment method in the ParanoidFragmentSink protection mechanism in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 does not properly sanitize HTML in a chrome document, which makes it easier for remote attackers to execute arbitrary JavaScript with chrome privileges via a javascript: URI in input to an extension, as demonstrated by a javascript:alert sequence in (1) the HREF attribute of an A element or (2) the ACTION attribute of a FORM element (CVE-2010-1585).\n\nPackages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:\nhttp://store.mandriva.com/product_info.php?cPath=149 products_id=490\n\nAdditionally, some packages which require so, have been rebuilt and are being provided as updates.", "published": "2011-03-08T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=52577", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2016-09-26T17:25:07"}, {"id": "CENTOS_RHSA-2011-0374.NASL", "type": "nessus", "title": "CentOS 4 : thunderbird (CESA-2011:0374)", "description": "An updated thunderbird package that fixes one security issue and one bug is now available for Red Hat Enterprise Linux 4, 5, and 6.\n\nThe Red Hat Security Response Team has rated this update as having important security impact.\n\nMozilla Thunderbird is a standalone mail and newsgroup client.\n\nThis erratum blacklists a small number of HTTPS certificates.\n(BZ#689430)\n\nThis update also fixes the following bug :\n\n* The RHSA-2011:0312 and RHSA-2011:0311 updates introduced a regression, preventing some Java content and plug-ins written in Java from loading. With this update, the Java content and plug-ins work as expected. (BZ#683076)\n\nAll Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.", "published": "2011-03-24T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=52944", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051"], "lastseen": "2016-09-26T17:25:04"}, {"id": "SUSE_11_2_SEAMONKEY-110302.NASL", "type": "nessus", "title": "openSUSE Security Update : seamonkey (seamonkey-4074)", "description": "Mozilla SeaMonkey was updated to version 2.0.12, fixing various security issues.\n\nFollowing security issues were fixed: MFSA 2011-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code.\n\nJesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry Sivonen, Martijn Wargers, David Baron and Marcia Knous reported memory safety problems that affected Firefox 3.6 and Firefox 3.5.\n(CVE-2011-0053)\n\nIgor Bukanov and Gary Kwong reported memory safety problems that affected Firefox 3.6 only. (CVE-2011-0062)\n\nMFSA 2011-02 / CVE-2011-0051: Security researcher Zach Hoffman reported that a recursive call to eval() wrapped in a try/catch statement places the browser into a inconsistent state. Any dialog box opened in this state is displayed without text and with non-functioning buttons. Closing the window causes the dialog to evaluate to true. An attacker could use this issue to force a user into accepting any dialog, such as one granting elevated privileges to the page presenting the dialog.\n\nMFSA 2011-03 / CVE-2011-0055: Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a method used by JSON.stringify contained a use-after-free error in which a currently in-use pointer was freed and subsequently dereferenced. This could lead to arbitrary code execution if an attacker was able to store malicious code in the freed section of memory.\n\nMozilla developer Igor Bukanov also independently discovered and reported this issue two weeks after the initial report was received.\n\nMFSA 2011-04 / CVE-2011-0054: Security researcher Christian Holler reported that the JavaScript engine's internal memory mapping of non-local JS variables contained a buffer overflow which could potentially be used by an attacker to run arbitrary code on a victim's computer.\n\nMFSA 2011-05 / CVE-2011-0056: Security researcher Christian Holler reported that the JavaScript engine's internal mapping of string values contained an error in cases where the number of values being stored was above 64K. In such cases an offset pointer was manually moved forwards and backwards to access the larger address space. If an exception was thrown between the time that the offset pointer was moved forward and the time it was reset, then the exception object would be read from an invalid memory address, potentially executing attacker-controlled memory.\n\nMFSA 2011-06 / CVE-2011-0057: Daniel Kozlowski reported that a JavaScript Worker could be used to keep a reference to an object that could be freed during garbage collection. Subsequent calls through this deleted reference could cause attacker-controlled memory to be executed on a victim's computer.\n\nMFSA 2011-07 / CVE-2011-0058: Alex Miller reported that when very long strings were constructed and inserted into an HTML document, the browser would incorrectly construct the layout objects used to display the text. Under such conditions an incorrect length would be calculated for a text run resulting in too small of a memory buffer being allocated to store the text. This issue could be used by an attacker to write data past the end of the buffer and execute malicious code on a victim's computer. This issue affects only Mozilla browsers on Windows.\n\nMFSA 2011-08 / CVE-2010-1585: Mozilla security developer Roberto Suggi Liverani reported that ParanoidFragmentSink, a class used to sanitize potentially unsafe HTML for display, allows javascript: URLs and other inline JavaScript when the embedding document is a chrome document.\nWhile there are no unsafe uses of this class in any released products, extension code could have potentially used it in an unsafe manner.\n\nMFSA 2011-09 / CVE-2011-0061: Security researcher Jordi Chancel reported that a JPEG image could be constructed that would be decoded incorrectly, causing data to be written past the end of a buffer created to store the image. An attacker could potentially craft such an image that would cause malicious code to be stored in memory and then later executed on a victim's computer.\n\nMFSA 2011-10 / CVE-2011-0059: Adobe security researcher Peleus Uhley reported that when plugin-initiated requests receive a 307 redirect response, the plugin is not notified and the request is forwarded to the new location. This is true even for cross-site redirects, so any custom headers that were added as part of the initial request would be forwarded intact across origins. This poses a CSRF risk for web applications that rely on custom headers only being present in requests from their own origin.", "published": "2011-05-05T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=53798", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2016-09-26T17:23:11"}, {"id": "CENTOS_RHSA-2011-0310.NASL", "type": "nessus", "title": "CentOS 4 : firefox (CESA-2011:0310)", "description": "Updated firefox packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 4, 5, and 6.\n\nThe Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.\n\nMozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox.\n\nA flaw was found in the way Firefox sanitized HTML content in extensions. If an extension loaded or rendered malicious content using the ParanoidFragmentSink class, it could fail to safely display the content, causing Firefox to execute arbitrary JavaScript with the privileges of the user running Firefox. (CVE-2010-1585)\n\nA flaw was found in the way Firefox handled dialog boxes. An attacker could use this flaw to create a malicious web page that would present a blank dialog box that has non-functioning buttons. If a user closes the dialog box window, it could unexpectedly grant the malicious web page elevated privileges. (CVE-2011-0051)\n\nSeveral flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-0053, CVE-2011-0055, CVE-2011-0058, CVE-2011-0062)\n\nSeveral flaws were found in the way Firefox handled malformed JavaScript. A website containing malicious JavaScript could cause Firefox to execute that JavaScript with the privileges of the user running Firefox. (CVE-2011-0054, CVE-2011-0056, CVE-2011-0057)\n\nA flaw was found in the way Firefox handled malformed JPEG images. A website containing a malicious JPEG image could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-0061)\n\nA flaw was found in the way Firefox handled plug-ins that perform HTTP requests. If a plug-in performed an HTTP request, and the server sent a 307 redirect response, the plug-in was not notified, and the HTTP request was forwarded. The forwarded request could contain custom headers, which could result in a Cross Site Request Forgery attack.\n(CVE-2011-0059)\n\nFor technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 3.6.14. You can find a link to the Mozilla advisories in the References section of this erratum.\n\nThis update also fixes the following bug :\n\n* On Red Hat Enterprise Linux 4 and 5, running the 'firefox\n-setDefaultBrowser' command caused warnings such as the following :\n\nlibgnomevfs-WARNING **: Deprecated function. User modifications to the MIME database are no longer supported.\n\nThis update disables the 'setDefaultBrowser' option. Red Hat Enterprise Linux 4 users wishing to set a default web browser can use Applications -> Preferences -> More Preferences -> Preferred Applications. Red Hat Enterprise Linux 5 users can use System -> Preferences -> Preferred Applications. (BZ#463131, BZ#665031)\n\nAll Firefox users should upgrade to these updated packages, which contain Firefox version 3.6.14, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.", "published": "2011-03-03T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://www.tenable.com/plugins/index.php?view=single&id=52507", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2016-09-26T17:25:50"}], "redhat": [{"id": "RHSA-2011:0311", "type": "redhat", "title": "(RHSA-2011:0311) Critical: thunderbird security update", "description": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed HTML content.\nMalicious HTML content could cause Thunderbird to crash or, potentially,\nexecute arbitrary code with the privileges of the user running Thunderbird.\n(CVE-2010-1585, CVE-2011-0053, CVE-2011-0062)\n\nA flaw was found in the way Thunderbird handled malformed JPEG images. An\nHTML mail message containing a malicious JPEG image could cause\nThunderbird to crash or, potentially, execute arbitrary code with the\nprivileges of the user running Thunderbird. (CVE-2011-0061)\n\nAll Thunderbird users should upgrade to this updated package, which\nresolves these issues. All running instances of Thunderbird must be\nrestarted for the update to take effect.\n", "published": "2011-03-01T05:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://access.redhat.com/errata/RHSA-2011:0311", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2017-03-07T05:18:48"}, {"id": "RHSA-2011:0310", "type": "redhat", "title": "(RHSA-2011:0310) Critical: firefox security and bug fix update", "description": "Mozilla Firefox is an open source web browser. XULRunner provides the XUL\nRuntime environment for Mozilla Firefox.\n\nA flaw was found in the way Firefox sanitized HTML content in extensions.\nIf an extension loaded or rendered malicious content using the\nParanoidFragmentSink class, it could fail to safely display the content,\ncausing Firefox to execute arbitrary JavaScript with the privileges of the\nuser running Firefox. (CVE-2010-1585)\n\nA flaw was found in the way Firefox handled dialog boxes. An attacker could\nuse this flaw to create a malicious web page that would present a blank\ndialog box that has non-functioning buttons. If a user closes the dialog\nbox window, it could unexpectedly grant the malicious web page elevated\nprivileges. (CVE-2011-0051)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nFirefox. (CVE-2011-0053, CVE-2011-0055, CVE-2011-0058, CVE-2011-0062)\n\nSeveral flaws were found in the way Firefox handled malformed JavaScript. A\nwebsite containing malicious JavaScript could cause Firefox to execute that\nJavaScript with the privileges of the user running Firefox. (CVE-2011-0054,\nCVE-2011-0056, CVE-2011-0057)\n\nA flaw was found in the way Firefox handled malformed JPEG images. A\nwebsite containing a malicious JPEG image could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nFirefox. (CVE-2011-0061)\n\nA flaw was found in the way Firefox handled plug-ins that perform HTTP\nrequests. If a plug-in performed an HTTP request, and the server sent a 307\nredirect response, the plug-in was not notified, and the HTTP request was\nforwarded. The forwarded request could contain custom headers, which could\nresult in a Cross Site Request Forgery attack. (CVE-2011-0059)\n\nFor technical details regarding these flaws, refer to the Mozilla security\nadvisories for Firefox 3.6.14. You can find a link to the Mozilla\nadvisories in the References section of this erratum.\n\nThis update also fixes the following bug:\n\n* On Red Hat Enterprise Linux 4 and 5, running the \"firefox\n-setDefaultBrowser\" command caused warnings such as the following:\n\nlibgnomevfs-WARNING **: Deprecated function. User modifications to the\nMIME database are no longer supported.\n\nThis update disables the \"setDefaultBrowser\" option. Red Hat Enterprise\nLinux 4 users wishing to set a default web browser can use Applications ->\nPreferences -> More Preferences -> Preferred Applications. Red Hat\nEnterprise Linux 5 users can use System -> Preferences -> Preferred\nApplications. (BZ#463131, BZ#665031)\n\nAll Firefox users should upgrade to these updated packages, which contain\nFirefox version 3.6.14, which corrects these issues. After installing the\nupdate, Firefox must be restarted for the changes to take effect.\n", "published": "2011-03-01T05:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://access.redhat.com/errata/RHSA-2011:0310", "cvelist": ["CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0053", "CVE-2011-0054", "CVE-2011-0055", "CVE-2011-0056", "CVE-2011-0057", "CVE-2011-0058", "CVE-2011-0059", "CVE-2011-0061", "CVE-2011-0062"], "lastseen": "2017-08-02T22:58:06"}, {"id": "RHSA-2011:0312", "type": "redhat", "title": "(RHSA-2011:0312) Moderate: thunderbird security update", "description": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed HTML content.\nMalicious HTML content could cause Thunderbird to crash or, potentially,\nexecute arbitrary code with the privileges of the user running Thunderbird.\n(CVE-2011-0051, CVE-2011-0053)\n\nNote: JavaScript support is disabled by default in Thunderbird. The above\nissues are not exploitable unless JavaScript is enabled.\n\nAll Thunderbird users should upgrade to this updated package, which\nresolves these issues. All running instances of Thunderbird must be\nrestarted for the update to take effect.\n", "published": "2011-03-01T05:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://access.redhat.com/errata/RHSA-2011:0312", "cvelist": ["CVE-2011-0051", "CVE-2011-0053"], "lastseen": "2017-08-02T20:58:35"}, {"id": "RHSA-2011:0313", "type": "redhat", "title": "(RHSA-2011:0313) Critical: seamonkey security update", "description": "SeaMonkey is an open source web browser, email and newsgroup client, IRC\nchat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey handled dialog boxes. An attacker\ncould use this flaw to create a malicious web page that would present a\nblank dialog box that has non-functioning buttons. If a user closes the\ndialog box window, it could unexpectedly grant the malicious web page\nelevated privileges. (CVE-2011-0051)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause SeaMonkey to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2011-0053)\n\nA flaw was found in the way SeaMonkey handled plug-ins that perform HTTP\nrequests. If a plug-in performed an HTTP request, and the server sent a 307\nredirect response, the plug-in was not notified, and the HTTP request was\nforwarded. The forwarded request could contain custom headers, which could\nresult in a Cross Site Request Forgery attack. (CVE-2011-0059)\n\nAll SeaMonkey users should upgrade to these updated packages, which correct\nthese issues. After installing the update, SeaMonkey must be restarted for\nthe changes to take effect.\n", "published": "2011-03-01T05:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://access.redhat.com/errata/RHSA-2011:0313", "cvelist": ["CVE-2011-0051", "CVE-2011-0053", "CVE-2011-0059"], "lastseen": "2017-08-02T20:58:31"}], "oraclelinux": [{"id": "ELSA-2011-0311", "type": "oraclelinux", "title": "thunderbird security update", "description": "[3.1.8-4.0.2.el6_0]\n- Replace clean.gif in tarball\n[3.1.8-4.0.1.el6_0]\n- Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js\n[3.1.8-4]\n- Update to build3\n[3.1.8-3]\n- Update to build2\n[3.1.8-2]\n- Update to 3.1.8", "published": "2011-03-02T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://linux.oracle.com/errata/ELSA-2011-0311.html", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2016-09-04T11:16:20"}, {"id": "ELSA-2011-0310", "type": "oraclelinux", "title": "firefox security and bug fix update", "description": "firefox:\n[3.6.14-4.0.1.el6_0]\n- Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js\n[3.6.14-4]\n- Update to build3\n[3.6.14-3]\n- Update to build2\n[3.6.14-2]\n- Update to 3.6.14\nxulrunner:\n[1.9.2.14-3.0.1.el6_0]\n- Added xulrunner-oracle-default-prefs.js and removed the corresponding\n RedHat one. Bug#11487\n[1.9.2.14-3]\n- Update to build3\n[1.9.2.14-2]\n- Update to build2\n[1.9.2.14-1]\n- Update to 1.9.2.14", "published": "2011-03-02T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://linux.oracle.com/errata/ELSA-2011-0310.html", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2016-09-04T11:17:08"}, {"id": "ELSA-2011-0312", "type": "oraclelinux", "title": "thunderbird security update", "description": "[1.5.0.12-35.0.1.el4]\n- Add thunderbird-oracle-default-prefs.js for errata rebuild and remove\n thunderbird-redhat-default-prefs.js\n Replaced clean.gif in tarball\n[1.5.0.12-35]\n- Added fixes from 1.9.1.17", "published": "2011-03-02T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://linux.oracle.com/errata/ELSA-2011-0312.html", "cvelist": ["CVE-2011-0053", "CVE-2011-0051"], "lastseen": "2016-09-04T11:16:43"}, {"id": "ELSA-2011-0313", "type": "oraclelinux", "title": "seamonkey security update", "description": "[1.0.9-67.0.1.el4_8]\n- Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html\n and remove corresponding RedHat ones\n[1.0.9-67.el4]\n- Added fixes from 1.9.1.17", "published": "2011-03-02T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://linux.oracle.com/errata/ELSA-2011-0313.html", "cvelist": ["CVE-2011-0053", "CVE-2011-0051", "CVE-2011-0059"], "lastseen": "2016-09-04T11:16:47"}], "ubuntu": [{"id": "USN-1050-1", "type": "ubuntu", "title": "Thunderbird vulnerabilities", "description": "Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry \nSivonen, Martijn Wargers, David Baron and Marcia Knous discovered several \nmemory issues in the browser engine. An attacker could exploit these to \ncrash the browser or possibly run arbitrary code as the user invoking the \nprogram. ([CVE-2011-0053](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0053>), [CVE-2011-0062](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0062>))\n\nRoberto Suggi Liverani discovered a possible issue with unsafe JavaScript \nexecution in chrome documents. A malicious extension could exploit this to \nexecute arbitrary code with chrome privlieges. ([CVE-2010-1585](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2010-1585>))\n\nJordi Chancel discovered a buffer overlow in the JPEG decoding engine. An \nattacker could exploit this to crash the browser or possibly run arbitrary \ncode as the user invoking the program. ([CVE-2011-0061](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0061>))", "published": "2011-03-02T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://usn.ubuntu.com/usn/usn-1050-1/", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0062", "CVE-2010-1585"], "lastseen": "2017-08-09T19:13:28"}, {"id": "USN-1049-1", "type": "ubuntu", "title": "Firefox and Xulrunner vulnerabilities", "description": "Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry \nSivonen, Martijn Wargers, David Baron and Marcia Knous discovered several \nmemory issues in the browser engine. An attacker could exploit these to \ncrash the browser or possibly run arbitrary code as the user invoking the \nprogram. ([CVE-2011-0053](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0053>), [CVE-2011-0062](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0062>))\n\nZach Hoffman discovered that a recursive call to eval() wrapped in a \ntry/catch statement places the browser into a inconsistent state. An \nattacker could exploit this to force a user to accept any dialog. \n([CVE-2011-0051](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0051>))\n\nIt was discovered that memory was used after being freed in a method used \nby JSON.stringify. An attacker could exploit this to crash the browser or \npossibly run arbitrary code as the user invoking the program. \n([CVE-2011-0055](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0055>))\n\nChristian Holler discovered multiple buffer overflows in the JavaScript \nengine. An attacker could exploit these to crash the browser or possibly \nrun arbitrary code as the user invoking the program. ([CVE-2011-0054](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0054>), \n[CVE-2011-0056](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0056>))\n\nDaniel Kozlowski discovered that a JavaScript Worker kept a reference to \nmemory after it was freed. An attacker could exploit this to crash the \nbrowser or possibly run arbitrary code as the user invoking the program. \n([CVE-2011-0057](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0057>))\n\nAlex Miller discovered a buffer overflow in the browser rendering engine. \nAn attacker could exploit this to crash the browser or possibly run \narbitrary code as the user invoking the program. ([CVE-2011-0058](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0058>))\n\nRoberto Suggi Liverani discovered a possible issue with unsafe JavaScript \nexecution in chrome documents. A malicious extension could exploit this to \nexecute arbitrary code with chrome privlieges. ([CVE-2010-1585](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2010-1585>))\n\nJordi Chancel discovered a buffer overlow in the JPEG decoding engine. An \nattacker could exploit this to crash the browser or possibly run arbitrary \ncode as the user invoking the program. ([CVE-2011-0061](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0061>))\n\nPeleus Uhley discovered a CSRF vulnerability in the plugin code related to \n307 redirects. This could allow custom headers to be forwarded across \norigins. ([CVE-2011-0059](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0059>))", "published": "2011-03-02T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://usn.ubuntu.com/usn/usn-1049-1/", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2017-08-09T19:14:51"}, {"id": "USN-1049-2", "type": "ubuntu", "title": "Firefox and Xulrunner regression", "description": "USN-1049-1 fixed vulnerabilities in Firefox and Xulrunner. That update \nintroduced a regression where some Java applets would fail to load. This \nupdate fixes the problem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\nJesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry \nSivonen, Martijn Wargers, David Baron and Marcia Knous discovered several \nmemory issues in the browser engine. An attacker could exploit these to \ncrash the browser or possibly run arbitrary code as the user invoking the \nprogram. ([CVE-2011-0053](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0053>), [CVE-2011-0062](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0062>)) \n \nZach Hoffman discovered that a recursive call to eval() wrapped in a \ntry/catch statement places the browser into a inconsistent state. An \nattacker could exploit this to force a user to accept any dialog. \n([CVE-2011-0051](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0051>)) \n \nIt was discovered that memory was used after being freed in a method used \nby JSON.stringify. An attacker could exploit this to crash the browser or \npossibly run arbitrary code as the user invoking the program. \n([CVE-2011-0055](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0055>)) \n \nChristian Holler discovered multiple buffer overflows in the JavaScript \nengine. An attacker could exploit these to crash the browser or possibly \nrun arbitrary code as the user invoking the program. ([CVE-2011-0054](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0054>), \n[CVE-2011-0056](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0056>)) \n \nDaniel Kozlowski discovered that a JavaScript Worker kept a reference to \nmemory after it was freed. An attacker could exploit this to crash the \nbrowser or possibly run arbitrary code as the user invoking the program. \n([CVE-2011-0057](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0057>)) \n \nAlex Miller discovered a buffer overflow in the browser rendering engine. \nAn attacker could exploit this to crash the browser or possibly run \narbitrary code as the user invoking the program. ([CVE-2011-0058](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0058>)) \n \nRoberto Suggi Liverani discovered a possible issue with unsafe JavaScript \nexecution in chrome documents. A malicious extension could exploit this to \nexecute arbitrary code with chrome privlieges. ([CVE-2010-1585](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2010-1585>)) \n \nJordi Chancel discovered a buffer overlow in the JPEG decoding engine. An \nattacker could exploit this to crash the browser or possibly run arbitrary \ncode as the user invoking the program. ([CVE-2011-0061](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0061>)) \n \nPeleus Uhley discovered a CSRF vulnerability in the plugin code related to \n307 redirects. This could allow custom headers to be forwarded across \norigins. ([CVE-2011-0059](<http://people.ubuntu.com/~ubuntu-security/cve/CVE-2011-0059>))", "published": "2011-03-07T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://usn.ubuntu.com/usn/usn-1049-2/", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2017-08-09T19:12:42"}, {"id": "USN-1123-1", "type": "ubuntu", "title": "Xulrunner vulnerabilities", "description": "A large number of security issues were discovered in the Gecko rendering \nengine. If a user were tricked into viewing a malicious website, a remote \nattacker could exploit a variety of issues related to web browser security, \nincluding cross-site scripting attacks, denial of service attacks, and \narbitrary code execution.", "published": "2011-04-29T00:00:00", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://usn.ubuntu.com/usn/usn-1123-1/", "cvelist": ["CVE-2011-0077", "CVE-2011-1202", "CVE-2011-0071", "CVE-2010-3778", "CVE-2011-0080", "CVE-2011-0073", "CVE-2011-0053", "CVE-2011-0066", "CVE-2011-0056", "CVE-2010-3776", "CVE-2011-0065", "CVE-2011-0062", "CVE-2011-0075", "CVE-2011-0074", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0069", "CVE-2011-0078", "CVE-2011-0070", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0067", "CVE-2011-0055", "CVE-2011-0072"], "lastseen": "2017-08-09T19:12:40"}], "centos": [{"id": "CESA-2011:0310", "type": "centos", "title": "firefox security update", "description": "**CentOS Errata and Security Advisory** CESA-2011:0310\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2011-March/017266.html\nhttp://lists.centos.org/pipermail/centos-announce/2011-March/017267.html\n\n**Affected packages:**\nfirefox\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2011-0310.html", "published": "2011-03-03T00:18:19", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://lists.centos.org/pipermail/centos-announce/2011-March/017266.html", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2016-12-05T19:59:50"}, {"id": "CESA-2011:0312", "type": "centos", "title": "thunderbird security update", "description": "**CentOS Errata and Security Advisory** CESA-2011:0312\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2011-March/017264.html\nhttp://lists.centos.org/pipermail/centos-announce/2011-March/017265.html\n\n**Affected packages:**\nthunderbird\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2011-0312.html", "published": "2011-03-03T00:17:10", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://lists.centos.org/pipermail/centos-announce/2011-March/017264.html", "cvelist": ["CVE-2011-0053", "CVE-2011-0051"], "lastseen": "2016-12-05T20:08:11"}, {"id": "CESA-2011:0313", "type": "centos", "title": "seamonkey security update", "description": "**CentOS Errata and Security Advisory** CESA-2011:0313\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2011-March/017262.html\nhttp://lists.centos.org/pipermail/centos-announce/2011-March/017263.html\n\n**Affected packages:**\nseamonkey\nseamonkey-chat\nseamonkey-devel\nseamonkey-dom-inspector\nseamonkey-js-debugger\nseamonkey-mail\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2011-0313.html", "published": "2011-03-03T00:16:12", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://lists.centos.org/pipermail/centos-announce/2011-March/017262.html", "cvelist": ["CVE-2011-0053", "CVE-2011-0051", "CVE-2011-0059"], "lastseen": "2016-12-05T20:01:53"}], "freebsd": [{"id": "45F102CD-4456-11E0-9580-4061862B8C22", "type": "freebsd", "title": "mozilla -- multiple vulnerabilities", "description": "\nThe Mozilla Project reports:\n\nMFSA 2011-01 Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)\nMFSA 2011-02 Recursive eval call causes confirm dialogs to evaluate to true\nMFSA 2011-03 Use-after-free error in JSON.stringify\nMFSA 2011-04 Buffer overflow in JavaScript upvarMap\nMFSA 2011-05 Buffer overflow in JavaScript atom map\nMFSA 2011-06 Use-after-free error using Web Workers\nMFSA 2011-07 Memory corruption during text run construction (Windows)\nMFSA 2011-08 ParanoidFragmentSink allows javascript: URLs in chrome documents\nMFSA 2011-09 Crash caused by corrupted JPEG image\nMFSA 2011-10 CSRF risk with plugins and 307 redirects\n\n", "published": "2011-03-01T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://vuxml.freebsd.org/freebsd/45f102cd-4456-11e0-9580-4061862b8c22.html", "cvelist": ["CVE-2011-0061", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2016-09-26T17:24:44"}], "suse": [{"id": "SUSE-SA:2011:013", "type": "suse", "title": "remote code execution in MozillaFirefox,MozillaThunderbird,seamonkey", "description": "The MozillaFirefox browser was updated to version 3.6.15, fixing various security issues.\n#### Solution\nThere is no known workaround, please install the update packages.", "published": "2011-03-15T12:02:21", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://lists.opensuse.org/opensuse-security-announce/2011-03/msg00002.html", "cvelist": ["CVE-2011-0061", "CVE-2010-3777", "CVE-2011-0053", "CVE-2011-0056", "CVE-2011-0062", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0058", "CVE-2011-0055"], "lastseen": "2016-09-04T11:53:06"}, {"id": "OPENSUSE-SU-2014:1100-1", "type": "suse", "title": "Firefox update to 31.1esr (important)", "description": "This patch contains security updates for\n\n * mozilla-nss 3.16.4\n - The following 1024-bit root CA certificate was restored to allow more\n time to develop a better transition strategy for affected sites. It\n was removed in NSS 3.16.3, but discussion in the\n mozilla.dev.security.policy forum led to the decision to keep this\n root included longer in order to give website administrators more time\n to update their web servers.\n - CN = GTE CyberTrust Global Root\n * In NSS 3.16.3, the 1024-bit "Entrust.net Secure Server Certification\n Authority" root CA certificate was removed. In NSS 3.16.4, a 2048-bit\n intermediate CA certificate has been included, without explicit trust.\n The intention is to mitigate the effects of the previous removal of\n the 1024-bit Entrust.net root certificate, because many public\n Internet sites still use the "USERTrust Legacy Secure Server CA"\n intermediate certificate that is signed by the 1024-bit Entrust.net\n root certificate. The inclusion of the intermediate certificate is a\n temporary measure to allow those sites to function, by allowing them\n to find a trust path to another 2048-bit root CA certificate. The\n temporarily included intermediate certificate expires November 1, 2015.\n\n * Firefox 31.1esr Firefox is updated from 24esr to 31esr as maintenance\n for version 24 stopped\n\n", "published": "2014-09-09T18:04:16", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://lists.opensuse.org/opensuse-security-announce/2014-09/msg00004.html", "cvelist": ["CVE-2012-1945", "CVE-2011-3648", "CVE-2014-1505", "CVE-2014-1536", "CVE-2011-0061", "CVE-2011-0077", "CVE-2014-1513", "CVE-2012-0478", "CVE-2012-4193", "CVE-2012-0442", "CVE-2013-5601", "CVE-2013-1687", "CVE-2013-5612", "CVE-2013-1692", "CVE-2010-0654", "CVE-2012-1962", "CVE-2013-0743", "CVE-2012-0443", "CVE-2012-5842", "CVE-2012-4212", "CVE-2013-5595", "CVE-2010-0176", "CVE-2014-1530", "CVE-2011-0083", "CVE-2010-1203", "CVE-2013-1737", "CVE-2012-4214", "CVE-2008-1236", "CVE-2013-5611", "CVE-2012-1970", "CVE-2008-3835", "CVE-2013-1709", "CVE-2007-3738", "CVE-2012-3989", "CVE-2013-5616", "CVE-2013-1678", "CVE-2010-2762", "CVE-2012-5830", "CVE-2013-0763", "CVE-2014-1510", "CVE-2011-3026", "CVE-2012-0460", "CVE-2013-5613", "CVE-2012-1973", "CVE-2014-1522", "CVE-2011-3654", "CVE-2014-1567", "CVE-2012-1974", "CVE-2010-2766", "CVE-2012-4195", "CVE-2012-3986", "CVE-2013-0783", "CVE-2007-3734", "CVE-2011-2371", "CVE-2014-1481", "CVE-2013-1670", "CVE-2012-4185", "CVE-2010-3777", "CVE-2012-3991", "CVE-2013-1719", "CVE-2012-3968", "CVE-2013-1725", "CVE-2012-3963", "CVE-2014-1539", "CVE-2010-0174", "CVE-2012-0452", "CVE-2013-1735", "CVE-2012-1956", "CVE-2014-1487", "CVE-2012-3978", "CVE-2012-3985", "CVE-2013-0746", "CVE-2012-5829", "CVE-2009-1571", "CVE-2012-1944", "CVE-2012-5838", "CVE-2011-2986", "CVE-2010-1205", "CVE-2014-1538", "CVE-2012-4213", "CVE-2013-1685", "CVE-2012-0479", "CVE-2013-5609", "CVE-2007-3737", "CVE-2013-0766", "CVE-2007-3736", "CVE-2012-1940", "CVE-2013-1697", "CVE-2014-1484", "CVE-2014-1525", "CVE-2012-3993", "CVE-2013-5619", "CVE-2012-5837", "CVE-2008-5500", "CVE-2012-5836", "CVE-2014-1509", "CVE-2009-0772", "CVE-2013-0787", "CVE-2012-3995", "CVE-2012-4201", "CVE-2010-0159", "CVE-2009-0773", "CVE-2011-3659", "CVE-2011-3663", "CVE-2014-1494", "CVE-2014-1559", "CVE-2013-0747", "CVE-2012-0470", "CVE-2012-0446", "CVE-2008-4063", "CVE-2014-1537", "CVE-2013-1694", "CVE-2014-1523", "CVE-2012-1972", "CVE-2010-1200", "CVE-2010-0175", "CVE-2012-3988", "CVE-2012-0457", "CVE-2010-3778", "CVE-2012-3994", "CVE-2013-5615", "CVE-2013-1680", "CVE-2012-3962", "CVE-2012-0459", "CVE-2011-2362", "CVE-2014-1529", "CVE-2013-1724", "CVE-2010-1213", "CVE-2013-5597", "CVE-2012-5843", "CVE-2014-1543", "CVE-2014-1486", "CVE-2011-0085", "CVE-2013-5590", "CVE-2008-5510", "CVE-2011-0080", "CVE-2013-0780", "CVE-2008-5502", "CVE-2010-3765", "CVE-2013-1732", "CVE-2013-0744", "CVE-2013-0795", "CVE-2008-1237", "CVE-2013-1720", "CVE-2008-4070", "CVE-2013-0748", "CVE-2012-4183", "CVE-2010-3178", "CVE-2013-1679", "CVE-2007-3285", "CVE-2013-5610", "CVE-2013-0768", "CVE-2011-3661", "CVE-2012-4181", "CVE-2014-1532", "CVE-2013-6671", "CVE-2009-0040", "CVE-2011-3652", "CVE-2013-0755", "CVE-2008-4067", "CVE-2014-1548", "CVE-2011-2364", "CVE-2014-1531", "CVE-2013-0752", "CVE-2012-4186", "CVE-2014-1508", "CVE-2012-1948", "CVE-2008-5012", "CVE-2012-1938", "CVE-2013-0796", "CVE-2012-0449", "CVE-2010-3769", "CVE-2012-3969", "CVE-2014-1502", "CVE-2013-1723", "CVE-2013-0782", "CVE-2012-1953", "CVE-2012-1949", "CVE-2014-1542", "CVE-2012-0456", "CVE-2011-2372", "CVE-2010-3169", "CVE-2012-3970", "CVE-2011-0053", "CVE-2012-5840", "CVE-2010-3176", "CVE-2012-4191", "CVE-2010-3174", "CVE-2010-3768", "CVE-2014-1477", "CVE-2013-0800", "CVE-2010-1212", "CVE-2013-1681", "CVE-2010-1211", "CVE-2010-1121", "CVE-2013-0773", "CVE-2013-0754", "CVE-2010-3167", "CVE-2012-4202", "CVE-2010-3180", "CVE-2012-3957", "CVE-2011-3660", "CVE-2014-1540", "CVE-2014-1534", "CVE-2012-1941", "CVE-2013-1738", "CVE-2014-1482", "CVE-2014-1479", "CVE-2008-4066", "CVE-2008-5018", "CVE-2012-3984", "CVE-2014-1504", "CVE-2012-0444", "CVE-2011-3650", "CVE-2014-1511", "CVE-2010-2753", "CVE-2012-1946", "CVE-2010-3776", "CVE-2012-4182", "CVE-2008-1233", "CVE-2012-4187", "CVE-2012-3983", "CVE-2011-0062", "CVE-2008-0016", "CVE-2011-3101", "CVE-2010-3168", "CVE-2013-0788", "CVE-2013-1728", "CVE-2014-1545", "CVE-2010-0173", "CVE-2012-0472", "CVE-2013-5592", "CVE-2013-1730", "CVE-2008-4059", "CVE-2010-2764", "CVE-2014-1492", "CVE-2011-0081", "CVE-2009-0771", "CVE-2007-3670", "CVE-2012-1954", "CVE-2009-0774", "CVE-2014-1556", "CVE-2012-0461", "CVE-2011-2376", "CVE-2012-3958", "CVE-2012-0469", "CVE-2014-1563", "CVE-2014-1524", "CVE-2014-1512", "CVE-2012-1975", "CVE-2011-0075", "CVE-2013-1690", "CVE-2012-0464", "CVE-2013-0775", "CVE-2012-1967", "CVE-2013-5604", "CVE-2014-1514", "CVE-2010-3166", "CVE-2011-0074", "CVE-2013-0801", "CVE-2012-3956", "CVE-2010-2769", "CVE-2012-3982", "CVE-2009-3555", "CVE-2013-1714", "CVE-2011-2989", "CVE-2010-1196", "CVE-2008-5021", "CVE-2008-5017", "CVE-2013-0769", "CVE-2012-3966", "CVE-2013-0771", "CVE-2014-1490", "CVE-2012-5839", "CVE-2013-0757", "CVE-2014-1498", "CVE-2012-1961", "CVE-2010-3173", "CVE-2012-4216", "CVE-2008-4062", "CVE-2010-3179", "CVE-2010-0182", "CVE-2014-1565", "CVE-2012-3967", "CVE-2013-0749", "CVE-2011-3651", "CVE-2008-4060", "CVE-2007-3656", "CVE-2008-1234", "CVE-2012-1951", "CVE-2012-0475", "CVE-2014-1555", "CVE-2014-1564", "CVE-2012-1952", "CVE-2010-1201", "CVE-2013-0761", "CVE-2013-1669", "CVE-2010-1585", "CVE-2012-3959", "CVE-2012-0455", "CVE-2014-1558", "CVE-2011-0084", "CVE-2012-0759", "CVE-2007-3089", "CVE-2014-1519", "CVE-2013-1701", "CVE-2012-0474", "CVE-2012-3975", "CVE-2010-2768", "CVE-2008-5014", "CVE-2013-1684", "CVE-2008-4058", "CVE-2012-4184", "CVE-2012-0447", "CVE-2014-1547", "CVE-2011-3232", "CVE-2012-4205", "CVE-2014-1480", "CVE-2014-1500", "CVE-2011-0069", "CVE-2013-6630", "CVE-2008-5022", "CVE-2008-5512", "CVE-2014-1497", "CVE-2013-5596", "CVE-2012-3992", "CVE-2008-1235", "CVE-2013-1676", "CVE-2013-0789", "CVE-2008-5501", "CVE-2008-4068", "CVE-2008-5016", "CVE-2013-1675", "CVE-2014-1478", "CVE-2012-3980", "CVE-2008-5503", "CVE-2011-2374", "CVE-2012-1955", "CVE-2012-1960", "CVE-2012-0445", "CVE-2012-0462", "CVE-2012-4217", "CVE-2013-1686", "CVE-2013-0745", "CVE-2013-0756", "CVE-2012-4218", "CVE-2013-0760", "CVE-2011-2377", "CVE-2014-1485", "CVE-2014-1493", "CVE-2007-3735", "CVE-2011-3000", "CVE-2010-2765", "CVE-2014-1544", "CVE-2010-2767", "CVE-2011-0078", "CVE-2012-3960", "CVE-2010-3175", "CVE-2012-0451", "CVE-2011-3655", "CVE-2012-4180", "CVE-2013-0767", "CVE-2010-3182", "CVE-2009-0776", "CVE-2013-5603", "CVE-2012-1959", "CVE-2011-2363", "CVE-2011-0070", "CVE-2013-1682", "CVE-2012-1947", "CVE-2013-6673", "CVE-2013-1674", "CVE-2013-0762", "CVE-2014-1562", "CVE-2010-3170", "CVE-2011-3005", "CVE-2012-4208", "CVE-2011-3658", "CVE-2014-1541", "CVE-2011-2373", "CVE-2008-5511", "CVE-2011-2992", "CVE-2014-1488", "CVE-2012-1957", "CVE-2012-1958", "CVE-2008-4064", "CVE-2012-1976", "CVE-2011-1187", "CVE-2012-5835", "CVE-2014-1552", "CVE-2010-3183", "CVE-2010-1202", "CVE-2012-0468", "CVE-2013-5599", "CVE-2014-1553", "CVE-2014-1549", "CVE-2013-1713", "CVE-2008-5508", "CVE-2012-3972", "CVE-2012-4207", "CVE-2011-2988", "CVE-2008-4061", "CVE-2013-5591", "CVE-2010-1199", "CVE-2012-4204", "CVE-2013-5602", "CVE-2011-2985", "CVE-2012-4192", "CVE-2011-2987", "CVE-2012-4188", "CVE-2012-0441", "CVE-2013-0774", "CVE-2008-5024", "CVE-2013-0753", "CVE-2012-5833", "CVE-2014-1557", "CVE-2013-1736", "CVE-2014-1526", "CVE-2013-0776", "CVE-2012-3964", "CVE-2013-5593", "CVE-2014-1550", "CVE-2013-1718", "CVE-2012-5841", "CVE-2014-1533", "CVE-2013-1717", "CVE-2010-2754", "CVE-2008-5507", "CVE-2012-3990", "CVE-2014-1491", "CVE-2013-6672", "CVE-2013-5614", "CVE-2008-4065", "CVE-2013-1693", "CVE-2010-2760", "CVE-2013-0750", "CVE-2012-1937", "CVE-2014-1560", "CVE-2012-4215", "CVE-2013-6629", "CVE-2012-0463", "CVE-2013-1677", "CVE-2011-2991", "CVE-2013-0770", "CVE-2013-0793", "CVE-2012-4179", "CVE-2011-3001", "CVE-2014-1483", "CVE-2014-1489", "CVE-2011-3062", "CVE-2012-0477", "CVE-2013-1722", "CVE-2012-0473", "CVE-2012-4194", "CVE-2011-2365", "CVE-2012-4209", "CVE-2012-1963", "CVE-2012-4196", "CVE-2008-5506", "CVE-2013-1710", "CVE-2012-0467", "CVE-2012-0458", "CVE-2013-0758", "CVE-2013-5600", "CVE-2010-2752", "CVE-2014-1499", "CVE-2014-1518", "CVE-2012-0471", "CVE-2012-3961", "CVE-2014-1561", "CVE-2012-3971", "CVE-2013-0764", "CVE-2014-1528", "CVE-2013-5618", "CVE-2011-0072"], "lastseen": "2016-09-04T12:21:58"}], "gentoo": [{"id": "GLSA-201301-01", "type": "gentoo", "title": "Mozilla Products: Multiple vulnerabilities", "description": "### Background\n\nMozilla Firefox is an open-source web browser and Mozilla Thunderbird an open-source email client, both from the Mozilla Project. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the \u2018Mozilla Application Suite\u2019. XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XPCOM applications such as Firefox and Thunderbird. NSS is Mozilla\u2019s Network Security Services library that implements PKI support. IceCat is the GNU version of Firefox. \n\n### Description\n\nMultiple vulnerabilities have been discovered in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the CVE identifiers referenced below for details. \n\n### Impact\n\nA remote attacker could entice a user to view a specially crafted web page or email, possibly resulting in execution of arbitrary code or a Denial of Service condition. Furthermore, a remote attacker may be able to perform Man-in-the-Middle attacks, obtain sensitive information, bypass restrictions and protection mechanisms, force file downloads, conduct XML injection attacks, conduct XSS attacks, bypass the Same Origin Policy, spoof URL\u2019s for phishing attacks, trigger a vertical scroll, spoof the location bar, spoof an SSL indicator, modify the browser\u2019s font, conduct clickjacking attacks, or have other unspecified impact. \n\nA local attacker could gain escalated privileges, obtain sensitive information, or replace an arbitrary downloaded file. \n\n### Workaround\n\nThere is no known workaround at this time.\n\n### Resolution\n\nAll Mozilla Firefox users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=www-client/firefox-10.0.11\"\n \n\nAll users of the Mozilla Firefox binary package should upgrade to the latest version: \n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=www-client/firefox-bin-10.0.11\"\n \n\nAll Mozilla Thunderbird users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=mail-client/thunderbird-10.0.11\"\n \n\nAll users of the Mozilla Thunderbird binary package should upgrade to the latest version: \n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose\n \">=mail-client/thunderbird-bin-10.0.11\"\n \n\nAll Mozilla SeaMonkey users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=www-client/seamonkey-2.14-r1\"\n \n\nAll users of the Mozilla SeaMonkey binary package should upgrade to the latest version: \n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=www-client/seamonkey-bin-2.14\"\n \n\nAll NSS users should upgrade to the latest version:\n \n \n # emerge --sync\n # emerge --ask --oneshot --verbose \">=dev-libs/nss-3.14\"\n \n\nThe \u201cwww-client/mozilla-firefox\u201d package has been merged into the \u201cwww-client/firefox\u201d package. To upgrade, please unmerge \u201cwww-client/mozilla-firefox\u201d and then emerge the latest \u201cwww-client/firefox\u201d package: \n \n \n # emerge --sync\n # emerge --unmerge \"www-client/mozilla-firefox\"\n # emerge --ask --oneshot --verbose \">=www-client/firefox-10.0.11\"\n \n\nThe \u201cwww-client/mozilla-firefox-bin\u201d package has been merged into the \u201cwww-client/firefox-bin\u201d package. To upgrade, please unmerge \u201cwww-client/mozilla-firefox-bin\u201d and then emerge the latest \u201cwww-client/firefox-bin\u201d package: \n \n \n # emerge --sync\n # emerge --unmerge \"www-client/mozilla-firefox-bin\"\n # emerge --ask --oneshot --verbose \">=www-client/firefox-bin-10.0.11\"\n \n\nThe \u201cmail-client/mozilla-thunderbird\u201d package has been merged into the \u201cmail-client/thunderbird\u201d package. To upgrade, please unmerge \u201cmail-client/mozilla-thunderbird\u201d and then emerge the latest \u201cmail-client/thunderbird\u201d package: \n \n \n # emerge --sync\n # emerge --unmerge \"mail-client/mozilla-thunderbird\"\n # emerge --ask --oneshot --verbose \">=mail-client/thunderbird-10.0.11\"\n \n\nThe \u201cmail-client/mozilla-thunderbird-bin\u201d package has been merged into the \u201cmail-client/thunderbird-bin\u201d package. To upgrade, please unmerge \u201cmail-client/mozilla-thunderbird-bin\u201d and then emerge the latest \u201cmail-client/thunderbird-bin\u201d package: \n \n \n # emerge --sync\n # emerge --unmerge \"mail-client/mozilla-thunderbird-bin\"\n # emerge --ask --oneshot --verbose\n \">=mail-client/thunderbird-bin-10.0.11\"\n \n\nGentoo discontinued support for GNU IceCat. We recommend that users unmerge GNU IceCat: \n \n \n # emerge --unmerge \"www-client/icecat\"\n \n\nGentoo discontinued support for XULRunner. We recommend that users unmerge XULRunner: \n \n \n # emerge --unmerge \"net-libs/xulrunner\"\n \n\nGentoo discontinued support for the XULRunner binary package. We recommend that users unmerge XULRunner: \n \n \n # emerge --unmerge \"net-libs/xulrunner-bin\"", "published": "2013-01-08T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "https://security.gentoo.org/glsa/201301-01", "cvelist": ["CVE-2012-1945", "CVE-2011-3648", "CVE-2009-0355", "CVE-2011-0061", "CVE-2011-0077", "CVE-2012-0478", "CVE-2012-4193", "CVE-2011-1202", "CVE-2012-0442", "CVE-2010-3772", "CVE-2011-0071", "CVE-2009-2470", "CVE-2010-0654", "CVE-2009-3388", "CVE-2012-1962", "CVE-2012-0443", "CVE-2011-3866", "CVE-2011-0068", "CVE-2012-5842", "CVE-2012-4212", "CVE-2009-2477", "CVE-2009-1563", "CVE-2010-0176", "CVE-2011-3640", "CVE-2011-0083", "CVE-2010-1203", "CVE-2009-3076", "CVE-2012-1970", "CVE-2009-3389", "CVE-2008-3835", "CVE-2012-3989", "CVE-2010-2762", "CVE-2012-5830", "CVE-2012-4210", "CVE-2009-1305", "CVE-2011-3026", "CVE-2009-3979", "CVE-2011-2370", "CVE-2012-0460", "CVE-2012-1973", "CVE-2009-3376", "CVE-2011-2369", "CVE-2011-2998", "CVE-2011-3654", "CVE-2011-2605", "CVE-2009-1833", "CVE-2010-0165", "CVE-2012-1974", "CVE-2010-0220", "CVE-2010-2766", "CVE-2011-2993", "CVE-2012-4195", "CVE-2010-0168", "CVE-2012-3986", "CVE-2010-0160", "CVE-2009-1169", "CVE-2011-2371", "CVE-2009-3379", "CVE-2012-4185", "CVE-2010-3777", "CVE-2012-3991", "CVE-2012-5354", "CVE-2012-4206", "CVE-2009-3071", "CVE-2012-3968", "CVE-2010-1214", "CVE-2012-3963", "CVE-2010-0174", "CVE-2010-0172", "CVE-2009-2535", "CVE-2012-0452", "CVE-2009-1312", "CVE-2012-1956", "CVE-2012-3978", "CVE-2012-3985", "CVE-2011-2995", "CVE-2012-5829", "CVE-2009-1571", "CVE-2008-5505", "CVE-2012-5838", "CVE-2011-2986", "CVE-2010-1205", "CVE-2009-2210", "CVE-2009-2478", "CVE-2008-6961", "CVE-2012-0479", "CVE-2012-0450", "CVE-2012-1940", "CVE-2012-3993", "CVE-2008-5500", "CVE-2012-5836", "CVE-2009-3274", "CVE-2010-1125", "CVE-2009-0772", "CVE-2012-3995", "CVE-2012-4201", "CVE-2010-0159", "CVE-2009-0773", "CVE-2011-3659", "CVE-2011-3663", "CVE-2010-3131", "CVE-2012-0470", "CVE-2012-0446", "CVE-2008-4063", "CVE-2012-3976", "CVE-2012-1972", "CVE-2010-1200", "CVE-2010-0175", "CVE-2010-0170", "CVE-2012-3988", "CVE-2012-0457", "CVE-2010-3778", "CVE-2012-3994", "CVE-2007-2436", "CVE-2012-3962", "CVE-2010-2770", "CVE-2010-3774", "CVE-2012-0459", "CVE-2011-2362", "CVE-2009-1304", "CVE-2010-1213", "CVE-2010-3177", "CVE-2012-5843", "CVE-2009-1835", "CVE-2011-0085", "CVE-2009-0352", "CVE-2009-3984", "CVE-2009-3380", "CVE-2008-5510", "CVE-2011-0080", "CVE-2012-1950", "CVE-2008-5502", "CVE-2009-3981", "CVE-2010-3765", "CVE-2010-0167", "CVE-2009-3373", "CVE-2009-3980", "CVE-2008-4070", "CVE-2012-4183", "CVE-2010-3178", "CVE-2012-1994", "CVE-2011-3661", "CVE-2009-3383", "CVE-2012-4181", "CVE-2011-3652", "CVE-2009-1311", "CVE-2011-1712", "CVE-2008-4067", "CVE-2010-1210", "CVE-2011-2364", "CVE-2009-2469", "CVE-2011-0073", "CVE-2010-1197", "CVE-2010-1207", "CVE-2009-0652", "CVE-2012-4186", "CVE-2012-1948", "CVE-2008-5012", "CVE-2011-2982", "CVE-2012-1938", "CVE-2012-0449", "CVE-2010-3769", "CVE-2012-3969", "CVE-2009-1838", "CVE-2012-1953", "CVE-2008-5013", "CVE-2012-1949", "CVE-2012-0456", "CVE-2011-2372", "CVE-2010-3773", "CVE-2009-1309", "CVE-2011-0079", "CVE-2010-3169", "CVE-2009-2662", "CVE-2012-3970", "CVE-2011-2997", "CVE-2011-0053", "CVE-2009-1832", "CVE-2012-5840", "CVE-2010-3176", "CVE-2012-4191", "CVE-2010-3174", "CVE-2012-1966", "CVE-2010-3768", "CVE-2009-3372", "CVE-2010-2763", "CVE-2011-0066", "CVE-2010-1212", "CVE-2009-1837", "CVE-2010-1206", "CVE-2010-1211", "CVE-2009-2464", "CVE-2011-2990", "CVE-2010-1121", "CVE-2009-0356", "CVE-2011-3389", "CVE-2010-0164", "CVE-2008-3836", "CVE-2010-3167", "CVE-2012-4202", "CVE-2007-2671", "CVE-2011-2984", "CVE-2010-3180", "CVE-2012-3957", "CVE-2011-3660", "CVE-2009-3986", "CVE-2012-1941", "CVE-2009-2408", "CVE-2010-3399", "CVE-2009-2665", "CVE-2008-4066", "CVE-2008-5018", "CVE-2009-3978", "CVE-2012-3984", "CVE-2009-0354", "CVE-2009-3079", "CVE-2011-0056", "CVE-2012-0444", "CVE-2011-3650", "CVE-2010-2753", "CVE-2012-1946", "CVE-2010-3776", "CVE-2010-1215", "CVE-2012-4182", "CVE-2011-2980", "CVE-2012-4187", "CVE-2008-4069", "CVE-2010-0166", "CVE-2011-3647", "CVE-2011-0065", "CVE-2011-0062", "CVE-2008-0016", "CVE-2009-0358", "CVE-2011-3101", "CVE-2010-3168", "CVE-2010-0173", "CVE-2009-1044", "CVE-2008-5513", "CVE-2008-4059", "CVE-2010-2764", "CVE-2011-0081", "CVE-2009-0771", "CVE-2009-1392", "CVE-2008-5504", "CVE-2008-5019", "CVE-2012-1954", "CVE-2009-0774", "CVE-2009-3375", "CVE-2012-0461", "CVE-2011-2376", "CVE-2009-2472", "CVE-2012-3958", "CVE-2009-0071", "CVE-2008-5023", "CVE-2012-0469", "CVE-2010-3171", "CVE-2009-3072", "CVE-2012-3973", "CVE-2008-5822", "CVE-2012-1975", "CVE-2011-0075", "CVE-2012-0464", "CVE-2012-1967", "CVE-2011-3653", "CVE-2010-0648", "CVE-2010-0178", "CVE-2010-3166", "CVE-2010-0177", "CVE-2011-0074", "CVE-2012-3956", "CVE-2010-2769", "CVE-2011-3649", "CVE-2012-3982", "CVE-2009-3555", "CVE-2011-2989", "CVE-2010-1196", "CVE-2008-3837", "CVE-2009-0357", "CVE-2008-5021", "CVE-2008-5017", "CVE-2012-3966", "CVE-2012-5839", "CVE-2011-2378", "CVE-2009-1308", "CVE-2010-3775", "CVE-2009-2467", "CVE-2012-1961", "CVE-2010-5074", "CVE-2011-2996", "CVE-2010-3173", "CVE-2012-4216", "CVE-2008-4062", "CVE-2010-3179", "CVE-2010-0182", "CVE-2012-3967", "CVE-2011-3651", "CVE-2008-4060", "CVE-2010-0181", "CVE-2012-1951", "CVE-2012-0475", "CVE-2012-3965", "CVE-2012-1952", "CVE-2010-1201", "CVE-2011-4688", "CVE-2009-1306", "CVE-2010-1585", "CVE-2009-2479", "CVE-2012-3959", "CVE-2012-0455", "CVE-2009-0777", "CVE-2010-2755", "CVE-2011-0084", "CVE-2011-0051", "CVE-2010-3767", "CVE-2012-1939", "CVE-2009-1834", "CVE-2010-3771", "CVE-2010-0183", "CVE-2012-0474", "CVE-2012-3975", "CVE-2010-2768", "CVE-2008-5014", "CVE-2008-0367", "CVE-2008-4058", "CVE-2011-3002", "CVE-2012-4184", "CVE-2011-0057", "CVE-2012-0447", "CVE-2011-3232", "CVE-2008-5913", "CVE-2007-3073", "CVE-2012-4205", "CVE-2010-2751", "CVE-2009-1836", "CVE-2011-0069", "CVE-2008-5022", "CVE-2008-5512", "CVE-2012-3992", "CVE-2009-3374", "CVE-2008-5501", "CVE-2008-4068", "CVE-2008-5016", "CVE-2011-3004", "CVE-2012-3980", "CVE-2008-5503", "CVE-2011-2374", "CVE-2012-1955", "CVE-2009-1839", "CVE-2012-1960", "CVE-2012-0445", "CVE-2009-3074", "CVE-2012-1965", "CVE-2011-3670", "CVE-2012-0462", "CVE-2010-1028", "CVE-2010-0162", "CVE-2011-2377", "CVE-2009-2463", "CVE-2009-2061", "CVE-2009-3070", "CVE-2012-3977", "CVE-2011-3000", "CVE-2010-2765", "CVE-2009-3069", "CVE-2010-0171", "CVE-2010-2767", "CVE-2009-0353", "CVE-2011-0078", "CVE-2012-3960", "CVE-2010-3175", "CVE-2009-0775", "CVE-2012-0451", "CVE-2011-3655", "CVE-2012-4180", "CVE-2009-2044", "CVE-2010-3182", "CVE-2009-0776", "CVE-2009-3371", "CVE-2009-3377", "CVE-2012-1959", "CVE-2011-2363", "CVE-2009-3075", "CVE-2010-0163", "CVE-2010-1208", "CVE-2011-0070", "CVE-2012-1947", "CVE-2009-1841", "CVE-2010-3170", "CVE-2011-3005", "CVE-2011-0059", "CVE-2012-1971", "CVE-2009-3983", "CVE-2012-4208", "CVE-2009-3987", "CVE-2011-3658", "CVE-2011-2373", "CVE-2008-5511", "CVE-2012-1957", "CVE-2012-1958", "CVE-2011-0054", "CVE-2012-4190", "CVE-2008-4064", "CVE-2012-1976", "CVE-2011-1187", "CVE-2012-5835", "CVE-2010-3183", "CVE-2009-2654", "CVE-2010-1202", "CVE-2012-0468", "CVE-2009-3982", "CVE-2009-3985", "CVE-2009-2065", "CVE-2009-1313", "CVE-2009-3382", "CVE-2008-5508", "CVE-2012-3972", "CVE-2012-4207", "CVE-2011-2988", "CVE-2010-3770", "CVE-2008-4061", "CVE-2010-1199", "CVE-2012-4204", "CVE-2008-0017", "CVE-2009-3988", "CVE-2010-3400", "CVE-2009-1302", "CVE-2011-2985", "CVE-2009-2466", "CVE-2012-4192", "CVE-2011-0058", "CVE-2011-2987", "CVE-2012-4188", "CVE-2012-0441", "CVE-2008-5024", "CVE-2011-0076", "CVE-2007-2437", "CVE-2012-5833", "CVE-2011-2999", "CVE-2012-3964", "CVE-2012-5841", "CVE-2010-0179", "CVE-2010-1209", "CVE-2010-2754", "CVE-2008-5507", "CVE-2009-2471", "CVE-2012-3990", "CVE-2011-2375", "CVE-2010-1198", "CVE-2008-4065", "CVE-2009-1840", "CVE-2011-3665", "CVE-2009-3381", "CVE-2011-0067", "CVE-2010-2760", "CVE-2012-1937", "CVE-2012-4215", "CVE-2009-2043", "CVE-2009-1307", "CVE-2009-2664", "CVE-2012-0463", "CVE-2010-4508", "CVE-2009-1310", "CVE-2009-3077", "CVE-2011-3003", "CVE-2011-2991", "CVE-2008-5015", "CVE-2011-0082", "CVE-2011-2983", "CVE-2012-4179", "CVE-2008-4582", "CVE-2011-3001", "CVE-2012-1964", "CVE-2009-2462", "CVE-2009-3378", "CVE-2011-3062", "CVE-2009-1303", "CVE-2012-0477", "CVE-2012-0473", "CVE-2012-4194", "CVE-2011-2365", "CVE-2012-4209", "CVE-2012-1963", "CVE-2012-4196", "CVE-2008-5506", "CVE-2009-2404", "CVE-2009-2465", "CVE-2012-0467", "CVE-2011-2981", "CVE-2012-0458", "CVE-2010-0169", "CVE-2010-2752", "CVE-2009-3078", "CVE-2012-0471", "CVE-2012-3961", "CVE-2010-3766", "CVE-2012-3971", "CVE-2008-5052", "CVE-2011-0055", "CVE-2009-1828", "CVE-2011-0072"], "lastseen": "2016-09-06T19:46:13"}], "debian": [{"id": "DSA-2186", "type": "debian", "title": "iceweasel -- several vulnerabilities", "description": "Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian.\n\n * [CVE-2010-1585](<https://security-tracker.debian.org/tracker/CVE-2010-1585>)\n\nRoberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete.\n\n * [CVE-2011-0051](<https://security-tracker.debian.org/tracker/CVE-2011-0051>)\n\nZach Hoffmann discovered that incorrect parsing of recursive eval() calls could lead to attackers forcing acceptance of a confirmation dialogue.\n\n * [CVE-2011-0053](<https://security-tracker.debian.org/tracker/CVE-2011-0053>)\n\nCrashes in the layout engine may lead to the execution of arbitrary code.\n\n * [CVE-2011-0054](<https://security-tracker.debian.org/tracker/CVE-2011-0054>), [CVE-2010-0056](<https://security-tracker.debian.org/tracker/CVE-2010-0056>)\n\nChristian Holler discovered buffer overflows in the Javascript engine, which could allow the execution of arbitrary code.\n\n * [CVE-2011-0055](<https://security-tracker.debian.org/tracker/CVE-2011-0055>)\n\nregenrecht and Igor Bukanov discovered a use-after-free error in the JSON-Implementation, which could lead to the execution of arbitrary code.\n\n * [CVE-2011-0057](<https://security-tracker.debian.org/tracker/CVE-2011-0057>)\n\nDaniel Kozlowski discovered that incorrect memory handling the web workers implementation could lead to the execution of arbitrary code.\n\n * [CVE-2011-0059](<https://security-tracker.debian.org/tracker/CVE-2011-0059>)\n\nPeleus Uhley discovered a cross-site request forgery risk in the plugin code.\n\nFor the oldstable distribution (lenny), this problem has been fixed in version 1.9.0.19-8 of the xulrunner source package.\n\nFor the stable distribution (squeeze), this problem has been fixed in version 3.5.16-5.\n\nFor the unstable distribution (sid), this problem has been fixed in version 3.5.17-1.\n\nWe recommend that you upgrade your iceweasel packages.", "published": "2011-03-09T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://www.debian.org/security/dsa-2186", "cvelist": ["CVE-2011-0053", "CVE-2011-0056", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0055"], "lastseen": "2016-09-02T18:29:05"}, {"id": "DSA-2187", "type": "debian", "title": "icedove -- several vulnerabilities", "description": "Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client.\n\n * [CVE-2010-1585](<https://security-tracker.debian.org/tracker/CVE-2010-1585>)\n\nRoberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete.\n\n * [CVE-2011-0051](<https://security-tracker.debian.org/tracker/CVE-2011-0051>)\n\nZach Hoffmann discovered that incorrect parsing of recursive eval() calls could lead to attackers forcing acceptance of a confirmation dialogue.\n\n * [CVE-2011-0053](<https://security-tracker.debian.org/tracker/CVE-2011-0053>)\n\nCrashes in the layout engine may lead to the execution of arbitrary code.\n\n * [CVE-2011-0054](<https://security-tracker.debian.org/tracker/CVE-2011-0054>), [CVE-2010-0056](<https://security-tracker.debian.org/tracker/CVE-2010-0056>)\n\nChristian Holler discovered buffer overflows in the Javascript engine, which could allow the execution of arbitrary code.\n\n * [CVE-2011-0055](<https://security-tracker.debian.org/tracker/CVE-2011-0055>)\n\nregenrecht and Igor Bukanov discovered a use-after-free error in the JSON-Implementation, which could lead to the execution of arbitrary code.\n\n * [CVE-2011-0057](<https://security-tracker.debian.org/tracker/CVE-2011-0057>)\n\nDaniel Kozlowski discovered that incorrect memory handling the web workers implementation could lead to the execution of arbitrary code.\n\n * [CVE-2011-0059](<https://security-tracker.debian.org/tracker/CVE-2011-0059>)\n\nPeleus Uhley discovered a cross-site request forgery risk in the plugin code.\n\nAs indicated in the Lenny (oldstable) release notes, security support for the Icedove packages in the oldstable needed to be stopped before the end of the regular Lenny security maintenance life cycle. You are strongly encouraged to upgrade to stable or switch to a different mail client.\n\nFor the stable distribution (squeeze), this problem has been fixed in version 3.0.11-1+squeeze1.\n\nFor the unstable distribution (sid), this problem has been fixed in version 3.0.11-2.\n\nWe recommend that you upgrade your icedove packages.", "published": "2011-03-09T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://www.debian.org/security/dsa-2187", "cvelist": ["CVE-2011-0053", "CVE-2011-0056", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0055"], "lastseen": "2016-09-02T18:36:11"}, {"id": "DSA-2180", "type": "debian", "title": "iceape -- several vulnerabilities", "description": "Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of Seamonkey:\n\n * [CVE-2010-1585](<https://security-tracker.debian.org/tracker/CVE-2010-1585>)\n\nRoberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete.\n\n * [CVE-2011-0051](<https://security-tracker.debian.org/tracker/CVE-2011-0051>)\n\nZach Hoffmann discovered that incorrect parsing of recursive eval() calls could lead to attackers forcing acceptance of a confirmation dialogue.\n\n * [CVE-2011-0053](<https://security-tracker.debian.org/tracker/CVE-2011-0053>)\n\nCrashes in the layout engine may lead to the execution of arbitrary code.\n\n * [CVE-2011-0054](<https://security-tracker.debian.org/tracker/CVE-2011-0054>)\n\nChristian Holler discovered buffer overflows in the JavaScript engine, which could allow the execution of arbitrary code.\n\n * [CVE-2011-0055](<https://security-tracker.debian.org/tracker/CVE-2011-0055>)\n\nregenrecht and Igor Bukanov discovered a use-after-free error in the JSON-Implementation, which could lead to the execution of arbitrary code.\n\n * [CVE-2011-0056](<https://security-tracker.debian.org/tracker/CVE-2011-0056>)\n\nChristian Holler discovered buffer overflows in the JavaScript engine, which could allow the execution of arbitrary code.\n\n * [CVE-2011-0057](<https://security-tracker.debian.org/tracker/CVE-2011-0057>)\n\nDaniel Kozlowski discovered that incorrect memory handling the web workers implementation could lead to the execution of arbitrary code.\n\n * [CVE-2011-0059](<https://security-tracker.debian.org/tracker/CVE-2011-0059>)\n\nPeleus Uhley discovered a cross-site request forgery risk in the plugin code.\n\nThe oldstable distribution (lenny) is not affected. The iceape package only provides the XPCOM code.\n\nFor the stable distribution (squeeze), this problem has been fixed in version 2.0.11-3.\n\nFor the unstable distribution (sid), this problem has been fixed in version 2.0.12-1.\n\nWe recommend that you upgrade your iceape packages.", "published": "2011-03-03T00:00:00", "cvss": {"score": 10, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "href": "http://www.debian.org/security/dsa-2180", "cvelist": ["CVE-2011-0053", "CVE-2011-0056", "CVE-2010-1585", "CVE-2011-0051", "CVE-2011-0057", "CVE-2011-0059", "CVE-2011-0054", "CVE-2011-0055"], "lastseen": "2016-09-02T18:25:41"}]}}