{"centos": [{"lastseen": "2019-12-20T18:25:24", "bulletinFamily": "unix", "description": "**CentOS Errata and Security Advisory** CESA-2009:1531\n\n\nSeaMonkey is an open source Web browser, email and newsgroup client, IRC\nchat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file SeaMonkey is\ngoing to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary code\nwith the privileges of the user running SeaMonkey. (CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A malicious\nwebsite may be able to read highlighted text in a different domain (e.g.\nanother website the user is viewing), bypassing the same-origin policy.\n(CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differs from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that differs from what the user expected.\n(CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause SeaMonkey to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which correct\nthese issues. After installing the update, SeaMonkey must be restarted for\nthe changes to take effect.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2009-October/028240.html\nhttp://lists.centos.org/pipermail/centos-announce/2009-October/028241.html\nhttp://lists.centos.org/pipermail/centos-announce/2009-October/028242.html\nhttp://lists.centos.org/pipermail/centos-announce/2009-October/028243.html\n\n**Affected packages:**\nseamonkey\nseamonkey-chat\nseamonkey-devel\nseamonkey-dom-inspector\nseamonkey-js-debugger\nseamonkey-mail\nseamonkey-nspr\nseamonkey-nspr-devel\nseamonkey-nss\nseamonkey-nss-devel\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2009-1531.html", "modified": "2009-10-28T13:22:24", "published": "2009-10-28T13:15:48", "href": "http://lists.centos.org/pipermail/centos-announce/2009-October/028240.html", "id": "CESA-2009:1531", "title": "seamonkey security update", "type": "centos", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-12-20T18:27:41", "bulletinFamily": "unix", "description": "**CentOS Errata and Security Advisory** CESA-2009:1530\n\n\nMozilla Firefox is an open source Web browser. XULRunner provides the XUL\nRuntime environment for Mozilla Firefox. nspr provides the Netscape\nPortable Runtime (NSPR).\n\nA flaw was found in the way Firefox handles form history. A malicious web\npage could steal saved form data by synthesizing input events, causing the\nbrowser to auto-fill form fields (which could then be read by an attacker).\n(CVE-2009-3370)\n\nA flaw was found in the way Firefox creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file Firefox is\ngoing to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA flaw was found in the Firefox Proxy Auto-Configuration (PAC) file\nprocessor. If Firefox loads a malicious PAC file, it could crash Firefox\nor, potentially, execute arbitrary code with the privileges of the user\nrunning Firefox. (CVE-2009-3372)\n\nA heap-based buffer overflow flaw was found in the Firefox GIF image\nprocessor. A malicious GIF image could crash Firefox or, potentially,\nexecute arbitrary code with the privileges of the user running Firefox.\n(CVE-2009-3373)\n\nA heap-based buffer overflow flaw was found in the Firefox string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash Firefox or, potentially, execute arbitrary code with\nthe privileges of the user running Firefox. (CVE-2009-1563)\n\nA flaw was found in the way Firefox handles text selection. A malicious\nwebsite may be able to read highlighted text in a different domain (e.g.\nanother website the user is viewing), bypassing the same-origin policy.\n(CVE-2009-3375)\n\nA flaw was found in the way Firefox displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differs from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that differs from what the user expected.\n(CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nFirefox. (CVE-2009-3374, CVE-2009-3380, CVE-2009-3382)\n\nFor technical details regarding these flaws, refer to the Mozilla security\nadvisories for Firefox 3.0.15. You can find a link to the Mozilla\nadvisories in the References section of this errata.\n\nAll Firefox users should upgrade to these updated packages, which contain\nFirefox version 3.0.15, which corrects these issues. After installing the\nupdate, Firefox must be restarted for the changes to take effect.\n\n**Merged security bulletin from advisories:**\nhttp://lists.centos.org/pipermail/centos-announce/2009-October/028244.html\nhttp://lists.centos.org/pipermail/centos-announce/2009-October/028245.html\n\n**Affected packages:**\nfirefox\nnspr\nnspr-devel\n\n**Upstream details at:**\nhttps://rhn.redhat.com/errata/RHSA-2009-1530.html", "modified": "2009-10-28T13:45:18", "published": "2009-10-28T13:44:04", "href": "http://lists.centos.org/pipermail/centos-announce/2009-October/028244.html", "id": "CESA-2009:1530", "title": "firefox, nspr security update", "type": "centos", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "redhat": [{"lastseen": "2019-12-11T13:32:24", "bulletinFamily": "unix", "description": "SeaMonkey is an open source Web browser, email and newsgroup client, IRC\nchat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file SeaMonkey is\ngoing to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary code\nwith the privileges of the user running SeaMonkey. (CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A malicious\nwebsite may be able to read highlighted text in a different domain (e.g.\nanother website the user is viewing), bypassing the same-origin policy.\n(CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differs from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that differs from what the user expected.\n(CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause SeaMonkey to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which correct\nthese issues. After installing the update, SeaMonkey must be restarted for\nthe changes to take effect.", "modified": "2019-03-22T23:42:56", "published": "2009-10-27T04:00:00", "id": "RHSA-2009:1531", "href": "https://access.redhat.com/errata/RHSA-2009:1531", "type": "redhat", "title": "(RHSA-2009:1531) Critical: seamonkey security update", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-12-11T13:32:02", "bulletinFamily": "unix", "description": "Mozilla Firefox is an open source Web browser. XULRunner provides the XUL\nRuntime environment for Mozilla Firefox. nspr provides the Netscape\nPortable Runtime (NSPR).\n\nA flaw was found in the way Firefox handles form history. A malicious web\npage could steal saved form data by synthesizing input events, causing the\nbrowser to auto-fill form fields (which could then be read by an attacker).\n(CVE-2009-3370)\n\nA flaw was found in the way Firefox creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file Firefox is\ngoing to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA flaw was found in the Firefox Proxy Auto-Configuration (PAC) file\nprocessor. If Firefox loads a malicious PAC file, it could crash Firefox\nor, potentially, execute arbitrary code with the privileges of the user\nrunning Firefox. (CVE-2009-3372)\n\nA heap-based buffer overflow flaw was found in the Firefox GIF image\nprocessor. A malicious GIF image could crash Firefox or, potentially,\nexecute arbitrary code with the privileges of the user running Firefox.\n(CVE-2009-3373)\n\nA heap-based buffer overflow flaw was found in the Firefox string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash Firefox or, potentially, execute arbitrary code with\nthe privileges of the user running Firefox. (CVE-2009-1563)\n\nA flaw was found in the way Firefox handles text selection. A malicious\nwebsite may be able to read highlighted text in a different domain (e.g.\nanother website the user is viewing), bypassing the same-origin policy.\n(CVE-2009-3375)\n\nA flaw was found in the way Firefox displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differs from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that differs from what the user expected.\n(CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nFirefox. (CVE-2009-3374, CVE-2009-3380, CVE-2009-3382)\n\nFor technical details regarding these flaws, refer to the Mozilla security\nadvisories for Firefox 3.0.15. You can find a link to the Mozilla\nadvisories in the References section of this errata.\n\nAll Firefox users should upgrade to these updated packages, which contain\nFirefox version 3.0.15, which corrects these issues. After installing the\nupdate, Firefox must be restarted for the changes to take effect.", "modified": "2017-09-08T12:17:25", "published": "2009-10-27T04:00:00", "id": "RHSA-2009:1530", "href": "https://access.redhat.com/errata/RHSA-2009:1530", "type": "redhat", "title": "(RHSA-2009:1530) Critical: firefox security update", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-12-11T13:31:31", "bulletinFamily": "unix", "description": "Mozilla Thunderbird is a standalone mail and newsgroup client.\n\nSeveral flaws were found in the processing of malformed HTML mail content.\nAn HTML mail message containing malicious content could cause Thunderbird\nto crash or, potentially, execute arbitrary code with the privileges of the\nuser running Thunderbird. (CVE-2009-2462, CVE-2009-2463, CVE-2009-2466,\nCVE-2009-3072, CVE-2009-3075, CVE-2009-3380, CVE-2009-3979, CVE-2010-0159)\n\nA use-after-free flaw was found in Thunderbird. An attacker could use this\nflaw to crash Thunderbird or, potentially, execute arbitrary code with the\nprivileges of the user running Thunderbird. (CVE-2009-3077)\n\nA heap-based buffer overflow flaw was found in the Thunderbird string to\nfloating point conversion routines. An HTML mail message containing\nmalicious JavaScript could crash Thunderbird or, potentially, execute\narbitrary code with the privileges of the user running Thunderbird.\n(CVE-2009-0689)\n\nA use-after-free flaw was found in Thunderbird. Under low memory\nconditions, viewing an HTML mail message containing malicious content could\nresult in Thunderbird executing arbitrary code with the privileges of the\nuser running Thunderbird. (CVE-2009-1571)\n\nA flaw was found in the way Thunderbird created temporary file names for\ndownloaded files. If a local attacker knows the name of a file Thunderbird\nis going to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA flaw was found in the way Thunderbird displayed a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differed from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that is different from what the user expected.\n(CVE-2009-3376)\n\nA flaw was found in the way Thunderbird processed SOCKS5 proxy replies. A\nmalicious SOCKS5 server could send a specially-crafted reply that would\ncause Thunderbird to crash. (CVE-2009-2470)\n\nDescriptions in the dialogs when adding and removing PKCS #11 modules were\nnot informative. An attacker able to trick a user into installing a\nmalicious PKCS #11 module could use this flaw to install their own\nCertificate Authority certificates on a user's machine, making it possible\nto trick the user into believing they are viewing trusted content or,\npotentially, execute arbitrary code with the privileges of the user running\nThunderbird. (CVE-2009-3076)\n\nAll Thunderbird users should upgrade to this updated package, which\nresolves these issues. All running instances of Thunderbird must be\nrestarted for the update to take effect.", "modified": "2017-09-08T11:54:16", "published": "2010-03-17T04:00:00", "id": "RHSA-2010:0153", "href": "https://access.redhat.com/errata/RHSA-2010:0153", "type": "redhat", "title": "(RHSA-2010:0153) Moderate: thunderbird security update", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "openvas": [{"lastseen": "2019-05-29T18:39:58", "bulletinFamily": "scanner", "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2011-08-09T00:00:00", "id": "OPENVAS:1361412562310880851", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310880851", "title": "CentOS Update for seamonkey CESA-2009:1531 centos3 i386", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for seamonkey CESA-2009:1531 centos3 i386\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2011 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_xref(name:\"URL\", value:\"http://lists.centos.org/pipermail/centos-announce/2009-October/016202.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.880851\");\n script_version(\"$Revision: 14222 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 13:50:48 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2011-08-09 08:20:34 +0200 (Tue, 09 Aug 2011)\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_xref(name:\"CESA\", value:\"2009:1531\");\n script_cve_id(\"CVE-2009-3380\", \"CVE-2009-3375\", \"CVE-2009-3274\", \"CVE-2009-0689\", \"CVE-2009-3376\");\n script_name(\"CentOS Update for seamonkey CESA-2009:1531 centos3 i386\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'seamonkey'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2011 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\", re:\"ssh/login/release=CentOS3\");\n script_tag(name:\"affected\", value:\"seamonkey on CentOS 3\");\n script_tag(name:\"insight\", value:\"SeaMonkey is an open source Web browser, email and newsgroup client, IRC\n chat client, and HTML editor.\n\n A flaw was found in the way SeaMonkey creates temporary file names for\n downloaded files. If a local attacker knows the name of a file SeaMonkey is\n going to download, they can replace the contents of that file with\n arbitrary contents. (CVE-2009-3274)\n\n A heap-based buffer overflow flaw was found in the SeaMonkey string to\n floating point conversion routines. A web page containing malicious\n JavaScript could crash SeaMonkey or, potentially, execute arbitrary code\n with the privileges of the user running SeaMonkey. (CVE-2009-1563)\n\n A flaw was found in the way SeaMonkey handles text selection. A malicious\n website may be able to read highlighted text in a different domain (e.g.\n another website the user is viewing), bypassing the same-origin policy.\n (CVE-2009-3375)\n\n A flaw was found in the way SeaMonkey displays a right-to-left override\n character when downloading a file. In these cases, the name displayed in\n the title bar differs from the name displayed in the dialog body. An\n attacker could use this flaw to trick a user into downloading a file that\n has a file name or extension that differs from what the user expected.\n (CVE-2009-3376)\n\n Several flaws were found in the processing of malformed web content. A web\n page containing malicious content could cause SeaMonkey to crash or,\n potentially, execute arbitrary code with the privileges of the user running\n SeaMonkey. (CVE-2009-3380)\n\n All SeaMonkey users should upgrade to these updated packages, which correct\n these issues. After installing the update, SeaMonkey must be restarted for\n the changes to take effect.\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"CentOS3\")\n{\n\n if ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-nspr\", rpm:\"seamonkey-nspr~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-nspr-devel\", rpm:\"seamonkey-nspr-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-nss\", rpm:\"seamonkey-nss~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-nss-devel\", rpm:\"seamonkey-nss-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2018-04-06T11:38:21", "bulletinFamily": "scanner", "description": "The remote host is missing updates announced in\nadvisory RHSA-2009:1531.\n\nSeaMonkey is an open source Web browser, email and newsgroup client, IRC\nchat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file SeaMonkey is\ngoing to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary code\nwith the privileges of the user running SeaMonkey. (CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A malicious\nwebsite may be able to read highlighted text in a different domain (e.g.\nanother website the user is viewing), bypassing the same-origin policy.\n(CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differs from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that differs from what the user expected.\n(CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause SeaMonkey to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which correct\nthese issues. After installing the update, SeaMonkey must be restarted for\nthe changes to take effect.", "modified": "2018-04-06T00:00:00", "published": "2009-11-11T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=136141256231066121", "id": "OPENVAS:136141256231066121", "type": "openvas", "title": "RedHat Security Advisory RHSA-2009:1531", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: RHSA_2009_1531.nasl 9350 2018-04-06 07:03:33Z cfischer $\n# Description: Auto-generated from advisory RHSA-2009:1531 ()\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_summary = \"The remote host is missing updates announced in\nadvisory RHSA-2009:1531.\n\nSeaMonkey is an open source Web browser, email and newsgroup client, IRC\nchat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file SeaMonkey is\ngoing to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary code\nwith the privileges of the user running SeaMonkey. (CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A malicious\nwebsite may be able to read highlighted text in a different domain (e.g.\nanother website the user is viewing), bypassing the same-origin policy.\n(CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differs from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that differs from what the user expected.\n(CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause SeaMonkey to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which correct\nthese issues. After installing the update, SeaMonkey must be restarted for\nthe changes to take effect.\";\n\ntag_solution = \"Please note that this update is available via\nRed Hat Network. To use Red Hat Network, launch the Red\nHat Update Agent with the following command: up2date\";\n\n\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.66121\");\n script_version(\"$Revision: 9350 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 09:03:33 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2009-11-11 15:56:44 +0100 (Wed, 11 Nov 2009)\");\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_name(\"RedHat Security Advisory RHSA-2009:1531\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name : \"URL\" , value : \"http://rhn.redhat.com/errata/RHSA-2009-1531.html\");\n script_xref(name : \"URL\" , value : \"http://www.redhat.com/security/updates/classification/#critical\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-rpm.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-debuginfo\", rpm:\"seamonkey-debuginfo~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nspr\", rpm:\"seamonkey-nspr~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nspr-devel\", rpm:\"seamonkey-nspr-devel~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nss\", rpm:\"seamonkey-nss~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nss-devel\", rpm:\"seamonkey-nss-devel~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-debuginfo\", rpm:\"seamonkey-debuginfo~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2017-07-25T10:55:36", "bulletinFamily": "scanner", "description": "Check for the Version of seamonkey", "modified": "2017-07-10T00:00:00", "published": "2011-08-09T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=880851", "id": "OPENVAS:880851", "title": "CentOS Update for seamonkey CESA-2009:1531 centos3 i386", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for seamonkey CESA-2009:1531 centos3 i386\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2011 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"SeaMonkey is an open source Web browser, email and newsgroup client, IRC\n chat client, and HTML editor.\n\n A flaw was found in the way SeaMonkey creates temporary file names for\n downloaded files. If a local attacker knows the name of a file SeaMonkey is\n going to download, they can replace the contents of that file with\n arbitrary contents. (CVE-2009-3274)\n \n A heap-based buffer overflow flaw was found in the SeaMonkey string to\n floating point conversion routines. A web page containing malicious\n JavaScript could crash SeaMonkey or, potentially, execute arbitrary code\n with the privileges of the user running SeaMonkey. (CVE-2009-1563)\n \n A flaw was found in the way SeaMonkey handles text selection. A malicious\n website may be able to read highlighted text in a different domain (e.g.\n another website the user is viewing), bypassing the same-origin policy.\n (CVE-2009-3375)\n \n A flaw was found in the way SeaMonkey displays a right-to-left override\n character when downloading a file. In these cases, the name displayed in\n the title bar differs from the name displayed in the dialog body. An\n attacker could use this flaw to trick a user into downloading a file that\n has a file name or extension that differs from what the user expected.\n (CVE-2009-3376)\n \n Several flaws were found in the processing of malformed web content. A web\n page containing malicious content could cause SeaMonkey to crash or,\n potentially, execute arbitrary code with the privileges of the user running\n SeaMonkey. (CVE-2009-3380)\n \n All SeaMonkey users should upgrade to these updated packages, which correct\n these issues. After installing the update, SeaMonkey must be restarted for\n the changes to take effect.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\ntag_affected = \"seamonkey on CentOS 3\";\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2009-October/016202.html\");\n script_id(880851);\n script_version(\"$Revision: 6653 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-10 13:46:53 +0200 (Mon, 10 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2011-08-09 08:20:34 +0200 (Tue, 09 Aug 2011)\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"CESA\", value: \"2009:1531\");\n script_cve_id(\"CVE-2009-3380\", \"CVE-2009-3375\", \"CVE-2009-3274\", \"CVE-2009-0689\", \"CVE-2009-3376\");\n script_name(\"CentOS Update for seamonkey CESA-2009:1531 centos3 i386\");\n\n script_summary(\"Check for the Version of seamonkey\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2011 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS3\")\n{\n\n if ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-nspr\", rpm:\"seamonkey-nspr~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-nspr-devel\", rpm:\"seamonkey-nspr-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-nss\", rpm:\"seamonkey-nss~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-nss-devel\", rpm:\"seamonkey-nss-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2017-07-27T10:56:02", "bulletinFamily": "scanner", "description": "The remote host is missing updates announced in\nadvisory RHSA-2009:1531.\n\nSeaMonkey is an open source Web browser, email and newsgroup client, IRC\nchat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file SeaMonkey is\ngoing to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary code\nwith the privileges of the user running SeaMonkey. (CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A malicious\nwebsite may be able to read highlighted text in a different domain (e.g.\nanother website the user is viewing), bypassing the same-origin policy.\n(CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differs from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that differs from what the user expected.\n(CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause SeaMonkey to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which correct\nthese issues. After installing the update, SeaMonkey must be restarted for\nthe changes to take effect.", "modified": "2017-07-12T00:00:00", "published": "2009-11-11T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=66121", "id": "OPENVAS:66121", "title": "RedHat Security Advisory RHSA-2009:1531", "type": "openvas", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: RHSA_2009_1531.nasl 6683 2017-07-12 09:41:57Z cfischer $\n# Description: Auto-generated from advisory RHSA-2009:1531 ()\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_summary = \"The remote host is missing updates announced in\nadvisory RHSA-2009:1531.\n\nSeaMonkey is an open source Web browser, email and newsgroup client, IRC\nchat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file SeaMonkey is\ngoing to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary code\nwith the privileges of the user running SeaMonkey. (CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A malicious\nwebsite may be able to read highlighted text in a different domain (e.g.\nanother website the user is viewing), bypassing the same-origin policy.\n(CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed in\nthe title bar differs from the name displayed in the dialog body. An\nattacker could use this flaw to trick a user into downloading a file that\nhas a file name or extension that differs from what the user expected.\n(CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A web\npage containing malicious content could cause SeaMonkey to crash or,\npotentially, execute arbitrary code with the privileges of the user running\nSeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which correct\nthese issues. After installing the update, SeaMonkey must be restarted for\nthe changes to take effect.\";\n\ntag_solution = \"Please note that this update is available via\nRed Hat Network. To use Red Hat Network, launch the Red\nHat Update Agent with the following command: up2date\";\n\n\n\nif(description)\n{\n script_id(66121);\n script_version(\"$Revision: 6683 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-12 11:41:57 +0200 (Wed, 12 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-11-11 15:56:44 +0100 (Wed, 11 Nov 2009)\");\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_name(\"RedHat Security Advisory RHSA-2009:1531\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"Red Hat Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/rhel\", \"ssh/login/rpms\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_xref(name : \"URL\" , value : \"http://rhn.redhat.com/errata/RHSA-2009-1531.html\");\n script_xref(name : \"URL\" , value : \"http://www.redhat.com/security/updates/classification/#critical\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-rpm.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-debuginfo\", rpm:\"seamonkey-debuginfo~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nspr\", rpm:\"seamonkey-nspr~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nspr-devel\", rpm:\"seamonkey-nspr-devel~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nss\", rpm:\"seamonkey-nss~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nss-devel\", rpm:\"seamonkey-nss-devel~1.0.9~0.47.el3\", rls:\"RHENT_3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-debuginfo\", rpm:\"seamonkey-debuginfo~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~50.el4_8\", rls:\"RHENT_4\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2017-07-25T10:55:38", "bulletinFamily": "scanner", "description": "Check for the Version of seamonkey", "modified": "2017-07-10T00:00:00", "published": "2011-08-09T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=880670", "id": "OPENVAS:880670", "title": "CentOS Update for seamonkey CESA-2009:1531 centos4 i386", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for seamonkey CESA-2009:1531 centos4 i386\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2011 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"SeaMonkey is an open source Web browser, email and newsgroup client, IRC\n chat client, and HTML editor.\n\n A flaw was found in the way SeaMonkey creates temporary file names for\n downloaded files. If a local attacker knows the name of a file SeaMonkey is\n going to download, they can replace the contents of that file with\n arbitrary contents. (CVE-2009-3274)\n \n A heap-based buffer overflow flaw was found in the SeaMonkey string to\n floating point conversion routines. A web page containing malicious\n JavaScript could crash SeaMonkey or, potentially, execute arbitrary code\n with the privileges of the user running SeaMonkey. (CVE-2009-1563)\n \n A flaw was found in the way SeaMonkey handles text selection. A malicious\n website may be able to read highlighted text in a different domain (e.g.\n another website the user is viewing), bypassing the same-origin policy.\n (CVE-2009-3375)\n \n A flaw was found in the way SeaMonkey displays a right-to-left override\n character when downloading a file. In these cases, the name displayed in\n the title bar differs from the name displayed in the dialog body. An\n attacker could use this flaw to trick a user into downloading a file that\n has a file name or extension that differs from what the user expected.\n (CVE-2009-3376)\n \n Several flaws were found in the processing of malformed web content. A web\n page containing malicious content could cause SeaMonkey to crash or,\n potentially, execute arbitrary code with the privileges of the user running\n SeaMonkey. (CVE-2009-3380)\n \n All SeaMonkey users should upgrade to these updated packages, which correct\n these issues. After installing the update, SeaMonkey must be restarted for\n the changes to take effect.\";\ntag_solution = \"Please Install the Updated Packages.\";\n\ntag_affected = \"seamonkey on CentOS 4\";\n\n\nif(description)\n{\n script_xref(name : \"URL\" , value : \"http://lists.centos.org/pipermail/centos-announce/2009-October/016204.html\");\n script_id(880670);\n script_version(\"$Revision: 6653 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-10 13:46:53 +0200 (Mon, 10 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2011-08-09 08:20:34 +0200 (Tue, 09 Aug 2011)\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_xref(name: \"CESA\", value: \"2009:1531\");\n script_cve_id(\"CVE-2009-3380\", \"CVE-2009-3375\", \"CVE-2009-3274\", \"CVE-2009-0689\", \"CVE-2009-3376\");\n script_name(\"CentOS Update for seamonkey CESA-2009:1531 centos4 i386\");\n\n script_summary(\"Check for the Version of seamonkey\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2011 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"affected\" , value : tag_affected);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = get_kb_item(\"ssh/login/release\");\n\n\nres = \"\";\nif(release == NULL){\n exit(0);\n}\n\nif(release == \"CentOS4\")\n{\n\n if ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99); # Not vulnerable.\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2019-05-29T18:39:50", "bulletinFamily": "scanner", "description": "The remote host is missing an update for the ", "modified": "2019-03-15T00:00:00", "published": "2011-08-09T00:00:00", "id": "OPENVAS:1361412562310880670", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310880670", "title": "CentOS Update for seamonkey CESA-2009:1531 centos4 i386", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n#\n# CentOS Update for seamonkey CESA-2009:1531 centos4 i386\n#\n# Authors:\n# System Generated Check\n#\n# Copyright:\n# Copyright (c) 2011 Greenbone Networks GmbH, http://www.greenbone.net\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_xref(name:\"URL\", value:\"http://lists.centos.org/pipermail/centos-announce/2009-October/016204.html\");\n script_oid(\"1.3.6.1.4.1.25623.1.0.880670\");\n script_version(\"$Revision: 14222 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2019-03-15 13:50:48 +0100 (Fri, 15 Mar 2019) $\");\n script_tag(name:\"creation_date\", value:\"2011-08-09 08:20:34 +0200 (Tue, 09 Aug 2011)\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_xref(name:\"CESA\", value:\"2009:1531\");\n script_cve_id(\"CVE-2009-3380\", \"CVE-2009-3375\", \"CVE-2009-3274\", \"CVE-2009-0689\", \"CVE-2009-3376\");\n script_name(\"CentOS Update for seamonkey CESA-2009:1531 centos4 i386\");\n\n script_tag(name:\"summary\", value:\"The remote host is missing an update for the 'seamonkey'\n package(s) announced via the referenced advisory.\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Copyright (c) 2011 Greenbone Networks GmbH\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\", re:\"ssh/login/release=CentOS4\");\n script_tag(name:\"affected\", value:\"seamonkey on CentOS 4\");\n script_tag(name:\"insight\", value:\"SeaMonkey is an open source Web browser, email and newsgroup client, IRC\n chat client, and HTML editor.\n\n A flaw was found in the way SeaMonkey creates temporary file names for\n downloaded files. If a local attacker knows the name of a file SeaMonkey is\n going to download, they can replace the contents of that file with\n arbitrary contents. (CVE-2009-3274)\n\n A heap-based buffer overflow flaw was found in the SeaMonkey string to\n floating point conversion routines. A web page containing malicious\n JavaScript could crash SeaMonkey or, potentially, execute arbitrary code\n with the privileges of the user running SeaMonkey. (CVE-2009-1563)\n\n A flaw was found in the way SeaMonkey handles text selection. A malicious\n website may be able to read highlighted text in a different domain (e.g.\n another website the user is viewing), bypassing the same-origin policy.\n (CVE-2009-3375)\n\n A flaw was found in the way SeaMonkey displays a right-to-left override\n character when downloading a file. In these cases, the name displayed in\n the title bar differs from the name displayed in the dialog body. An\n attacker could use this flaw to trick a user into downloading a file that\n has a file name or extension that differs from what the user expected.\n (CVE-2009-3376)\n\n Several flaws were found in the processing of malformed web content. A web\n page containing malicious content could cause SeaMonkey to crash or,\n potentially, execute arbitrary code with the privileges of the user running\n SeaMonkey. (CVE-2009-3380)\n\n All SeaMonkey users should upgrade to these updated packages, which correct\n these issues. After installing the update, SeaMonkey must be restarted for\n the changes to take effect.\");\n script_tag(name:\"solution\", value:\"Please install the updated packages.\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release)\n exit(0);\n\nres = \"\";\n\nif(release == \"CentOS4\")\n{\n\n if ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL)\n {\n security_message(data:res);\n exit(0);\n }\n\n if (__pkg_match) exit(99);\n exit(0);\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2017-07-25T10:57:17", "bulletinFamily": "scanner", "description": "The remote host is missing updates to seamonkey announced in\nadvisory CESA-2009:1531.", "modified": "2017-07-10T00:00:00", "published": "2009-11-11T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=66162", "id": "OPENVAS:66162", "title": "CentOS Security Advisory CESA-2009:1531 (seamonkey)", "type": "openvas", "sourceData": "#CESA-2009:1531 66162 4\n# $Id: ovcesa2009_1531.nasl 6650 2017-07-10 11:43:12Z cfischer $\n# Description: Auto-generated from advisory CESA-2009:1531 (seamonkey)\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"For details on the issues addressed in this update,\nplease visit the referenced security advisories.\";\ntag_solution = \"Update the appropriate packages on your system.\n\nhttp://www.securityspace.com/smysecure/catid.html?in=CESA-2009:1531\nhttp://www.securityspace.com/smysecure/catid.html?in=RHSA-2009:1531\nhttps://rhn.redhat.com/errata/RHSA-2009-1531.html\";\ntag_summary = \"The remote host is missing updates to seamonkey announced in\nadvisory CESA-2009:1531.\";\n\n\n\nif(description)\n{\n script_id(66162);\n script_version(\"$Revision: 6650 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-07-10 13:43:12 +0200 (Mon, 10 Jul 2017) $\");\n script_tag(name:\"creation_date\", value:\"2009-11-11 15:56:44 +0100 (Wed, 11 Nov 2009)\");\n script_cve_id(\"CVE-2009-3380\", \"CVE-2009-3375\", \"CVE-2009-3274\", \"CVE-2009-0689\", \"CVE-2009-3376\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_name(\"CentOS Security Advisory CESA-2009:1531 (seamonkey)\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-rpm.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nspr\", rpm:\"seamonkey-nspr~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nspr-devel\", rpm:\"seamonkey-nspr-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nss\", rpm:\"seamonkey-nss~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nss-devel\", rpm:\"seamonkey-nss-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-04-06T11:40:49", "bulletinFamily": "scanner", "description": "The remote host is missing updates to seamonkey announced in\nadvisory CESA-2009:1531.", "modified": "2018-04-06T00:00:00", "published": "2009-11-11T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=136141256231066162", "id": "OPENVAS:136141256231066162", "title": "CentOS Security Advisory CESA-2009:1531 (seamonkey)", "type": "openvas", "sourceData": "#CESA-2009:1531 66162 4\n# $Id: ovcesa2009_1531.nasl 9350 2018-04-06 07:03:33Z cfischer $\n# Description: Auto-generated from advisory CESA-2009:1531 (seamonkey)\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"For details on the issues addressed in this update,\nplease visit the referenced security advisories.\";\ntag_solution = \"Update the appropriate packages on your system.\n\nhttp://www.securityspace.com/smysecure/catid.html?in=CESA-2009:1531\nhttp://www.securityspace.com/smysecure/catid.html?in=RHSA-2009:1531\nhttps://rhn.redhat.com/errata/RHSA-2009-1531.html\";\ntag_summary = \"The remote host is missing updates to seamonkey announced in\nadvisory CESA-2009:1531.\";\n\n\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.66162\");\n script_version(\"$Revision: 9350 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 09:03:33 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2009-11-11 15:56:44 +0100 (Wed, 11 Nov 2009)\");\n script_cve_id(\"CVE-2009-3380\", \"CVE-2009-3375\", \"CVE-2009-3274\", \"CVE-2009-0689\", \"CVE-2009-3376\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_name(\"CentOS Security Advisory CESA-2009:1531 (seamonkey)\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"CentOS Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/centos\", \"ssh/login/rpms\");\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-rpm.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nspr\", rpm:\"seamonkey-nspr~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nspr-devel\", rpm:\"seamonkey-nspr-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nss\", rpm:\"seamonkey-nss~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-nss-devel\", rpm:\"seamonkey-nss-devel~1.0.9~0.47.el3.centos3\", rls:\"CentOS3\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey\", rpm:\"seamonkey~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-chat\", rpm:\"seamonkey-chat~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-devel\", rpm:\"seamonkey-devel~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-dom-inspector\", rpm:\"seamonkey-dom-inspector~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-js-debugger\", rpm:\"seamonkey-js-debugger~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\nif ((res = isrpmvuln(pkg:\"seamonkey-mail\", rpm:\"seamonkey-mail~1.0.9~50.el4.centos\", rls:\"CentOS4\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2019-05-29T18:36:28", "bulletinFamily": "scanner", "description": "Oracle Linux Local Security Checks ELSA-2009-1530", "modified": "2018-09-28T00:00:00", "published": "2015-10-08T00:00:00", "id": "OPENVAS:1361412562310122424", "href": "http://plugins.openvas.org/nasl.php?oid=1361412562310122424", "title": "Oracle Linux Local Check: ELSA-2009-1530", "type": "openvas", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: ELSA-2009-1530.nasl 11688 2018-09-28 13:36:28Z cfischer $\n#\n# Oracle Linux Local Check\n#\n# Authors:\n# Eero Volotinen <eero.volotinen@solinor.com>\n#\n# Copyright:\n# Copyright (c) 2015 Eero Volotinen, http://solinor.com\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.122424\");\n script_version(\"$Revision: 11688 $\");\n script_tag(name:\"creation_date\", value:\"2015-10-08 14:45:06 +0300 (Thu, 08 Oct 2015)\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-09-28 15:36:28 +0200 (Fri, 28 Sep 2018) $\");\n script_name(\"Oracle Linux Local Check: ELSA-2009-1530\");\n script_tag(name:\"insight\", value:\"ELSA-2009-1530 - firefox security update. Please see the references for more insight.\");\n script_tag(name:\"solution\", value:\"Update the affected packages to the latest available version.\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n script_tag(name:\"summary\", value:\"Oracle Linux Local Security Checks ELSA-2009-1530\");\n script_xref(name:\"URL\", value:\"http://linux.oracle.com/errata/ELSA-2009-1530.html\");\n script_cve_id(\"CVE-2009-1563\", \"CVE-2009-3274\", \"CVE-2009-3370\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3374\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\", \"CVE-2009-3382\", \"CVE-2009-3384\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_tag(name:\"qod_type\", value:\"package\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/oracle_linux\", \"ssh/login/release\", re:\"ssh/login/release=OracleLinux5\");\n script_category(ACT_GATHER_INFO);\n script_copyright(\"Eero Volotinen\");\n script_family(\"Oracle Linux Local Security Checks\");\n\n exit(0);\n}\n\ninclude(\"revisions-lib.inc\");\ninclude(\"pkg-lib-rpm.inc\");\n\nrelease = rpm_get_ssh_release();\nif(!release) exit(0);\n\nres = \"\";\n\nif(release == \"OracleLinux5\")\n{\n if ((res = isrpmvuln(pkg:\"firefox\", rpm:\"firefox~3.0.15~3.0.1.el5_4\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"nspr\", rpm:\"nspr~4.7.6~1.el5_4\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"nspr-devel\", rpm:\"nspr-devel~4.7.6~1.el5_4\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"xulrunner\", rpm:\"xulrunner~1.9.0.15~3.0.1.el5_4\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"xulrunner-devel\", rpm:\"xulrunner-devel~1.9.0.15~3.0.1.el5_4\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n if ((res = isrpmvuln(pkg:\"xulrunner-devel-unstable\", rpm:\"xulrunner-devel-unstable~1.9.0.15~3.0.1.el5_4\", rls:\"OracleLinux5\")) != NULL) {\n security_message(data:res);\n exit(0);\n }\n\n}\nif (__pkg_match) exit(99);\n exit(0);\n\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2018-04-06T11:38:17", "bulletinFamily": "scanner", "description": "The remote host is missing an update to xulrunner\nannounced via advisory DSA 1922-1.", "modified": "2018-04-06T00:00:00", "published": "2009-11-11T00:00:00", "href": "http://plugins.openvas.org/nasl.php?oid=136141256231066146", "id": "OPENVAS:136141256231066146", "type": "openvas", "title": "Debian Security Advisory DSA 1922-1 (xulrunner)", "sourceData": "# OpenVAS Vulnerability Test\n# $Id: deb_1922_1.nasl 9350 2018-04-06 07:03:33Z cfischer $\n# Description: Auto-generated from advisory DSA 1922-1 (xulrunner)\n#\n# Authors:\n# Thomas Reinke <reinke@securityspace.com>\n#\n# Copyright:\n# Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\n# Text descriptions are largely excerpted from the referenced\n# advisory, and are Copyright (c) the respective author(s)\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2,\n# or at your option, GNU General Public License version 3,\n# as published by the Free Software Foundation\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n#\n\ninclude(\"revisions-lib.inc\");\ntag_insight = \"Several remote vulnerabilities have been discovered in Xulrunner, a\nruntime environment for XUL applications, such as the Iceweasel web\nbrowser. The Common Vulnerabilities and Exposures project identifies\nthe following problems:\n\nCVE-2009-3380\n\nVladimir Vukicevic, Jesse Ruderman, Martijn Wargers, Daniel\nBanchero, David Keeler and Boris Zbarsky reported crashes in\nlayout engine, which might allow the execution of arbitrary code.\n\nCVE-2009-3382\n\nCarsten Book reported a crash in the layout engine, which might\nallow the execution of arbitrary code.\n\nCVE-2009-3376\n\nJesse Ruderman and Sid Stamm discovered spoofing vulnerability\nin the file download dialog.\n\nCVE-2009-3375\n\nGregory Fleischer discovered a bypass of the same-origin policy\nusing the document.getSelection() function.\n\nCVE-2009-3374\n\nmoz_bug_r_a4 discovered a privilege escalation to Chrome status\nin the XPCOM utility XPCVariant::VariantDataToJS.\n\nCVE-2009-3373\n\nregenrecht discovered a buffer overflow in the GIF parser, which\nmight lead to the execution of arbitrary code.\n\nCVE-2009-3372\n\nMarco C. discovered that a programming error in the proxy auto\nconfiguration code might lead to denial of service or the\nexecution of arbitrary code.\n\nCVE-2009-3274\n\nJeremy Brown discovered that the filename of a downloaded file\nwhich is opened by the user is predictable, which might lead to\ntricking the user into a malicious file if the attacker has local\naccess to the system.\n\nCVE-2009-3370\n\nPaul Stone discovered that history information from web forms\ncould be stolen.\n\n\nFor the stable distribution (lenny), these problems have been fixed\nin version 1.9.0.15-0lenny1.\n\nAs indicated in the Etch release notes, security support for the\nMozilla products in the oldstable distribution needed to be stopped\nbefore the end of the regular Etch security maintenance life cycle.\nYou are strongly encouraged to upgrade to stable or switch to a still\nsupported browser.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1.9.1.4-1.\n\nWe recommend that you upgrade your xulrunner packages.\";\ntag_summary = \"The remote host is missing an update to xulrunner\nannounced via advisory DSA 1922-1.\";\n\ntag_solution = \"https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201922-1\";\n\n\nif(description)\n{\n script_oid(\"1.3.6.1.4.1.25623.1.0.66146\");\n script_version(\"$Revision: 9350 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2018-04-06 09:03:33 +0200 (Fri, 06 Apr 2018) $\");\n script_tag(name:\"creation_date\", value:\"2009-11-11 15:56:44 +0100 (Wed, 11 Nov 2009)\");\n script_cve_id(\"CVE-2009-3274\", \"CVE-2009-3370\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3374\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\", \"CVE-2009-3382\");\n script_tag(name:\"cvss_base\", value:\"10.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_name(\"Debian Security Advisory DSA 1922-1 (xulrunner)\");\n\n\n\n script_category(ACT_GATHER_INFO);\n\n script_copyright(\"Copyright (c) 2009 E-Soft Inc. http://www.securityspace.com\");\n script_family(\"Debian Local Security Checks\");\n script_dependencies(\"gather-package-list.nasl\");\n script_mandatory_keys(\"ssh/login/debian_linux\", \"ssh/login/packages\");\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"insight\" , value : tag_insight);\n script_tag(name : \"summary\" , value : tag_summary);\n script_tag(name:\"qod_type\", value:\"package\");\n script_tag(name:\"solution_type\", value:\"VendorFix\");\n exit(0);\n}\n\n#\n# The script code starts here\n#\n\ninclude(\"pkg-lib-deb.inc\");\n\nres = \"\";\nreport = \"\";\nif ((res = isdpkgvuln(pkg:\"libmozillainterfaces-java\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"xulrunner-1.9\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libmozjs1d-dbg\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libmozjs-dev\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"libmozjs1d\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"xulrunner-dev\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"xulrunner-1.9-dbg\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"python-xpcom\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"xulrunner-1.9-gnome-support\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\nif ((res = isdpkgvuln(pkg:\"spidermonkey-bin\", ver:\"1.9.0.15-0lenny1\", rls:\"DEB5.0\")) != NULL) {\n report += res;\n}\n\nif (report != \"\") {\n security_message(data:report);\n} else if (__pkg_match) {\n exit(99); # Not vulnerable.\n}\n", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "cve": [{"lastseen": "2019-05-29T18:10:00", "bulletinFamily": "NVD", "description": "The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.", "modified": "2017-09-19T01:29:00", "id": "CVE-2009-3385", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3385", "published": "2010-03-23T00:53:00", "title": "CVE-2009-3385", "type": "cve", "cvss": {"score": 7.1, "vector": "AV:N/AC:M/Au:N/C:C/I:N/A:N"}}, {"lastseen": "2019-05-29T18:10:00", "bulletinFamily": "NVD", "description": "Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.", "modified": "2017-09-19T01:29:00", "id": "CVE-2009-3380", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3380", "published": "2009-10-29T14:30:00", "title": "CVE-2009-3380", "type": "cve", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:10:00", "bulletinFamily": "NVD", "description": "Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information via a crafted directory listing in a reply.", "modified": "2017-09-19T01:29:00", "id": "CVE-2009-3384", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3384", "published": "2009-11-13T15:30:00", "title": "CVE-2009-3384", "type": "cve", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:10:00", "bulletinFamily": "NVD", "description": "Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attackers to spoof file extensions via a crafted filename, as demonstrated by displaying a non-executable extension for an executable file.", "modified": "2018-10-30T16:25:00", "id": "CVE-2009-3376", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3376", "published": "2009-10-29T14:30:00", "title": "CVE-2009-3376", "type": "cve", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2019-05-29T18:10:00", "bulletinFamily": "NVD", "description": "Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local users to replace an arbitrary downloaded file by placing a file in a /tmp location before the download occurs, related to the Download Manager component. NOTE: some of these details are obtained from third party information.", "modified": "2018-08-13T21:47:00", "id": "CVE-2009-3274", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3274", "published": "2009-09-21T19:30:00", "title": "CVE-2009-3274", "type": "cve", "cvss": {"score": 4.4, "vector": "AV:L/AC:M/Au:N/C:P/I:P/A:P"}}, {"lastseen": "2019-05-29T18:10:00", "bulletinFamily": "NVD", "description": "content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function.", "modified": "2017-09-19T01:29:00", "id": "CVE-2009-3375", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-3375", "published": "2009-10-29T14:30:00", "title": "CVE-2009-3375", "type": "cve", "cvss": {"score": 4.3, "vector": "AV:N/AC:M/Au:N/C:P/I:N/A:N"}}, {"lastseen": "2019-05-29T18:09:58", "bulletinFamily": "NVD", "description": "** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-0689. Reason: This candidate is a duplicate of CVE-2009-0689. Certain codebase relationships were not originally clear. Notes: All CVE users should reference CVE-2009-0689 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage.", "modified": "2009-12-19T06:54:00", "id": "CVE-2009-1563", "href": "https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2009-1563", "published": "2009-10-29T14:30:00", "title": "CVE-2009-1563", "type": "cve", "cvss": {"score": 0.0, "vector": "NONE"}}], "nessus": [{"lastseen": "2020-08-01T04:51:33", "bulletinFamily": "scanner", "description": "A flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file\nSeaMonkey is going to download, they can replace the contents of that\nfile with arbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary\ncode with the privileges of the user running SeaMonkey.\n(CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left\noverride character when downloading a file. In these cases, the name\ndisplayed in the title bar differs from the name displayed in the\ndialog body. An attacker could use this flaw to trick a user into\ndownloading a file that has a file name or extension that differs from\nwhat the user expected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause SeaMonkey to crash\nor, potentially, execute arbitrary code with the privileges of the\nuser running SeaMonkey. (CVE-2009-3380)\n\nAfter installing the update, SeaMonkey must be restarted for the\nchanges to take effect.", "modified": "2020-08-02T00:00:00", "id": "SL_20091027_SEAMONKEY_ON_SL3_X.NASL", "href": "https://www.tenable.com/plugins/nessus/60685", "published": "2012-08-01T00:00:00", "title": "Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 80502\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(60685);\n script_version(\"1.6\");\n script_cvs_date(\"Date: 2019/10/25 13:36:18\");\n\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\");\n\n script_name(english:\"Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"A flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file\nSeaMonkey is going to download, they can replace the contents of that\nfile with arbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary\ncode with the privileges of the user running SeaMonkey.\n(CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left\noverride character when downloading a file. In these cases, the name\ndisplayed in the title bar differs from the name displayed in the\ndialog body. An attacker could use this flaw to trick a user into\ndownloading a file that has a file name or extension that differs from\nwhat the user expected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause SeaMonkey to crash\nor, potentially, execute arbitrary code with the privileges of the\nuser running SeaMonkey. (CVE-2009-3380)\n\nAfter installing the update, SeaMonkey must be restarted for the\nchanges to take effect.\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind0910&L=scientific-linux-errata&T=0&P=2336\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?66db570c\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_cwe_id(16, 119, 264);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2009/10/27\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/08/01\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-1.0.9-0.47.el3\")) flag++;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-chat-1.0.9-0.47.el3\")) flag++;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-devel-1.0.9-0.47.el3\")) flag++;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-dom-inspector-1.0.9-0.47.el3\")) flag++;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-js-debugger-1.0.9-0.47.el3\")) flag++;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-mail-1.0.9-0.47.el3\")) flag++;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-nspr-1.0.9-0.47.el3\")) flag++;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-nspr-devel-1.0.9-0.47.el3\")) flag++;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-nss-1.0.9-0.47.el3\")) flag++;\nif (rpm_check(release:\"SL3\", reference:\"seamonkey-nss-devel-1.0.9-0.47.el3\")) flag++;\n\nif (rpm_check(release:\"SL4\", reference:\"seamonkey-1.0.9-50.el4_8\")) flag++;\nif (rpm_check(release:\"SL4\", reference:\"seamonkey-chat-1.0.9-50.el4_8\")) flag++;\nif (rpm_check(release:\"SL4\", reference:\"seamonkey-devel-1.0.9-50.el4_8\")) flag++;\nif (rpm_check(release:\"SL4\", reference:\"seamonkey-dom-inspector-1.0.9-50.el4_8\")) flag++;\nif (rpm_check(release:\"SL4\", reference:\"seamonkey-js-debugger-1.0.9-50.el4_8\")) flag++;\nif (rpm_check(release:\"SL4\", reference:\"seamonkey-mail-1.0.9-50.el4_8\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-08-01T04:11:04", "bulletinFamily": "scanner", "description": "From Red Hat Security Advisory 2009:1531 :\n\nUpdated SeaMonkey packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 3 and 4.\n\nThis update has been rated as having critical security impact by the\nRed Hat Security Response Team.\n\nSeaMonkey is an open source Web browser, email and newsgroup client,\nIRC chat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file\nSeaMonkey is going to download, they can replace the contents of that\nfile with arbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary\ncode with the privileges of the user running SeaMonkey.\n(CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left\noverride character when downloading a file. In these cases, the name\ndisplayed in the title bar differs from the name displayed in the\ndialog body. An attacker could use this flaw to trick a user into\ndownloading a file that has a file name or extension that differs from\nwhat the user expected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause SeaMonkey to crash\nor, potentially, execute arbitrary code with the privileges of the\nuser running SeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which\ncorrect these issues. After installing the update, SeaMonkey must be\nrestarted for the changes to take effect.", "modified": "2020-08-02T00:00:00", "id": "ORACLELINUX_ELSA-2009-1531.NASL", "href": "https://www.tenable.com/plugins/nessus/67949", "published": "2013-07-12T00:00:00", "title": "Oracle Linux 3 / 4 : seamonkey (ELSA-2009-1531)", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 80502\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2009:1531 and \n# Oracle Linux Security Advisory ELSA-2009-1531 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(67949);\n script_version(\"1.9\");\n script_cvs_date(\"Date: 2019/10/25 13:36:08\");\n\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\", \"CVE-2009-3384\", \"CVE-2009-3385\");\n script_xref(name:\"RHSA\", value:\"2009:1531\");\n\n script_name(english:\"Oracle Linux 3 / 4 : seamonkey (ELSA-2009-1531)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2009:1531 :\n\nUpdated SeaMonkey packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 3 and 4.\n\nThis update has been rated as having critical security impact by the\nRed Hat Security Response Team.\n\nSeaMonkey is an open source Web browser, email and newsgroup client,\nIRC chat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file\nSeaMonkey is going to download, they can replace the contents of that\nfile with arbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary\ncode with the privileges of the user running SeaMonkey.\n(CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left\noverride character when downloading a file. In these cases, the name\ndisplayed in the title bar differs from the name displayed in the\ndialog body. An attacker could use this flaw to trick a user into\ndownloading a file that has a file name or extension that differs from\nwhat the user expected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause SeaMonkey to crash\nor, potentially, execute arbitrary code with the privileges of the\nuser running SeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which\ncorrect these issues. After installing the update, SeaMonkey must be\nrestarted for the changes to take effect.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2009-October/001221.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2009-October/001222.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected seamonkey packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_cwe_id(16, 119, 264);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey-chat\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey-dom-inspector\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey-js-debugger\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey-mail\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey-nspr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey-nspr-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey-nss\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:seamonkey-nss-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:3\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:4\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2009/07/01\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2009/10/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/07/12\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(3|4)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 3 / 4\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-chat-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-chat-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-devel-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-devel-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-dom-inspector-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-dom-inspector-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-js-debugger-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-js-debugger-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-mail-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-mail-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-nspr-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-nspr-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-nspr-devel-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-nspr-devel-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-nss-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-nss-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"i386\", reference:\"seamonkey-nss-devel-1.0.9-0.47.0.1.el3\")) flag++;\nif (rpm_check(release:\"EL3\", cpu:\"x86_64\", reference:\"seamonkey-nss-devel-1.0.9-0.47.0.1.el3\")) flag++;\n\nif (rpm_check(release:\"EL4\", reference:\"seamonkey-1.0.9-50.0.1.el4_8\")) flag++;\nif (rpm_check(release:\"EL4\", reference:\"seamonkey-chat-1.0.9-50.0.1.el4_8\")) flag++;\nif (rpm_check(release:\"EL4\", reference:\"seamonkey-devel-1.0.9-50.0.1.el4_8\")) flag++;\nif (rpm_check(release:\"EL4\", reference:\"seamonkey-dom-inspector-1.0.9-50.0.1.el4_8\")) flag++;\nif (rpm_check(release:\"EL4\", reference:\"seamonkey-js-debugger-1.0.9-50.0.1.el4_8\")) flag++;\nif (rpm_check(release:\"EL4\", reference:\"seamonkey-mail-1.0.9-50.0.1.el4_8\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"seamonkey / seamonkey-chat / seamonkey-devel / etc\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-08-01T01:06:48", "bulletinFamily": "scanner", "description": "Updated SeaMonkey packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 3 and 4.\n\nThis update has been rated as having critical security impact by the\nRed Hat Security Response Team.\n\nSeaMonkey is an open source Web browser, email and newsgroup client,\nIRC chat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file\nSeaMonkey is going to download, they can replace the contents of that\nfile with arbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary\ncode with the privileges of the user running SeaMonkey.\n(CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left\noverride character when downloading a file. In these cases, the name\ndisplayed in the title bar differs from the name displayed in the\ndialog body. An attacker could use this flaw to trick a user into\ndownloading a file that has a file name or extension that differs from\nwhat the user expected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause SeaMonkey to crash\nor, potentially, execute arbitrary code with the privileges of the\nuser running SeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which\ncorrect these issues. After installing the update, SeaMonkey must be\nrestarted for the changes to take effect.", "modified": "2020-08-02T00:00:00", "id": "CENTOS_RHSA-2009-1531.NASL", "href": "https://www.tenable.com/plugins/nessus/42296", "published": "2009-10-29T00:00:00", "title": "CentOS 3 / 4 : seamonkey (CESA-2009:1531)", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 80502\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2009:1531 and \n# CentOS Errata and Security Advisory 2009:1531 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(42296);\n script_version(\"1.18\");\n script_cvs_date(\"Date: 2019/10/25 13:36:05\");\n\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\", \"CVE-2009-3384\", \"CVE-2009-3385\");\n script_xref(name:\"RHSA\", value:\"2009:1531\");\n\n script_name(english:\"CentOS 3 / 4 : seamonkey (CESA-2009:1531)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote CentOS host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated SeaMonkey packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 3 and 4.\n\nThis update has been rated as having critical security impact by the\nRed Hat Security Response Team.\n\nSeaMonkey is an open source Web browser, email and newsgroup client,\nIRC chat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file\nSeaMonkey is going to download, they can replace the contents of that\nfile with arbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary\ncode with the privileges of the user running SeaMonkey.\n(CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left\noverride character when downloading a file. In these cases, the name\ndisplayed in the title bar differs from the name displayed in the\ndialog body. An attacker could use this flaw to trick a user into\ndownloading a file that has a file name or extension that differs from\nwhat the user expected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause SeaMonkey to crash\nor, potentially, execute arbitrary code with the privileges of the\nuser running SeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which\ncorrect these issues. After installing the update, SeaMonkey must be\nrestarted for the changes to take effect.\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2009-October/016202.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?764074b1\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2009-October/016203.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9065c174\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2009-October/016204.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?954a4b55\"\n );\n # https://lists.centos.org/pipermail/centos-announce/2009-October/016205.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?59331fd5\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected seamonkey packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_cwe_id(16, 119, 264);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey-chat\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey-dom-inspector\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey-js-debugger\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey-mail\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey-nspr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey-nspr-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey-nss\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:centos:centos:seamonkey-nss-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:3\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:centos:centos:4\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2009/07/01\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2009/10/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2009/10/29\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"CentOS Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/CentOS/release\", \"Host/CentOS/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/CentOS/release\");\nif (isnull(release) || \"CentOS\" >!< release) audit(AUDIT_OS_NOT, \"CentOS\");\nos_ver = pregmatch(pattern: \"CentOS(?: Linux)? release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"CentOS\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(3|4)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"CentOS 3.x / 4.x\", \"CentOS \" + os_ver);\n\nif (!get_kb_item(\"Host/CentOS/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"CentOS\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-chat-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-chat-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-devel-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-devel-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-dom-inspector-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-dom-inspector-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-js-debugger-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-js-debugger-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-mail-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-mail-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-nspr-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-nspr-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-nspr-devel-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-nspr-devel-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-nss-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-nss-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"i386\", reference:\"seamonkey-nss-devel-1.0.9-0.47.el3.centos3\")) flag++;\nif (rpm_check(release:\"CentOS-3\", cpu:\"x86_64\", reference:\"seamonkey-nss-devel-1.0.9-0.47.el3.centos3\")) flag++;\n\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"seamonkey-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"seamonkey-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"seamonkey-chat-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"seamonkey-chat-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"seamonkey-devel-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"seamonkey-devel-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"seamonkey-dom-inspector-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"seamonkey-dom-inspector-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"seamonkey-js-debugger-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"seamonkey-js-debugger-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"i386\", reference:\"seamonkey-mail-1.0.9-50.el4.centos\")) flag++;\nif (rpm_check(release:\"CentOS-4\", cpu:\"x86_64\", reference:\"seamonkey-mail-1.0.9-50.el4.centos\")) flag++;\n\n\nif (flag)\n{\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get()\n );\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"seamonkey / seamonkey-chat / seamonkey-devel / etc\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-08-01T04:22:44", "bulletinFamily": "scanner", "description": "Updated SeaMonkey packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 3 and 4.\n\nThis update has been rated as having critical security impact by the\nRed Hat Security Response Team.\n\nSeaMonkey is an open source Web browser, email and newsgroup client,\nIRC chat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file\nSeaMonkey is going to download, they can replace the contents of that\nfile with arbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary\ncode with the privileges of the user running SeaMonkey.\n(CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left\noverride character when downloading a file. In these cases, the name\ndisplayed in the title bar differs from the name displayed in the\ndialog body. An attacker could use this flaw to trick a user into\ndownloading a file that has a file name or extension that differs from\nwhat the user expected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause SeaMonkey to crash\nor, potentially, execute arbitrary code with the privileges of the\nuser running SeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which\ncorrect these issues. After installing the update, SeaMonkey must be\nrestarted for the changes to take effect.", "modified": "2020-08-02T00:00:00", "id": "REDHAT-RHSA-2009-1531.NASL", "href": "https://www.tenable.com/plugins/nessus/42288", "published": "2009-10-28T00:00:00", "title": "RHEL 3 / 4 : seamonkey (RHSA-2009:1531)", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 80502\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Red Hat Security Advisory RHSA-2009:1531. The text \n# itself is copyright (C) Red Hat, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(42288);\n script_version (\"1.24\");\n script_cvs_date(\"Date: 2019/10/25 13:36:14\");\n\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\", \"CVE-2009-3384\", \"CVE-2009-3385\");\n script_xref(name:\"RHSA\", value:\"2009:1531\");\n\n script_name(english:\"RHEL 3 / 4 : seamonkey (RHSA-2009:1531)\");\n script_summary(english:\"Checks the rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Red Hat host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Updated SeaMonkey packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 3 and 4.\n\nThis update has been rated as having critical security impact by the\nRed Hat Security Response Team.\n\nSeaMonkey is an open source Web browser, email and newsgroup client,\nIRC chat client, and HTML editor.\n\nA flaw was found in the way SeaMonkey creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file\nSeaMonkey is going to download, they can replace the contents of that\nfile with arbitrary contents. (CVE-2009-3274)\n\nA heap-based buffer overflow flaw was found in the SeaMonkey string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash SeaMonkey or, potentially, execute arbitrary\ncode with the privileges of the user running SeaMonkey.\n(CVE-2009-1563)\n\nA flaw was found in the way SeaMonkey handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way SeaMonkey displays a right-to-left\noverride character when downloading a file. In these cases, the name\ndisplayed in the title bar differs from the name displayed in the\ndialog body. An attacker could use this flaw to trick a user into\ndownloading a file that has a file name or extension that differs from\nwhat the user expected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause SeaMonkey to crash\nor, potentially, execute arbitrary code with the privileges of the\nuser running SeaMonkey. (CVE-2009-3380)\n\nAll SeaMonkey users should upgrade to these updated packages, which\ncorrect these issues. After installing the update, SeaMonkey must be\nrestarted for the changes to take effect.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2009-1563\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2009-3274\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2009-3375\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2009-3376\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2009-3380\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2009-3384\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/security/cve/cve-2009-3385\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://access.redhat.com/errata/RHSA-2009:1531\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_cwe_id(16, 119, 264);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey-chat\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey-dom-inspector\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey-js-debugger\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey-mail\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey-nspr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey-nspr-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey-nss\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:redhat:enterprise_linux:seamonkey-nss-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:3\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:redhat:enterprise_linux:4.8\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2009/09/21\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2009/10/27\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2009/10/28\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Red Hat Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\", \"Host/cpu\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"misc_func.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Red Hat\" >!< release) audit(AUDIT_OS_NOT, \"Red Hat\");\nos_ver = pregmatch(pattern: \"Red Hat Enterprise Linux.*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Red Hat\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(3|4)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Red Hat 3.x / 4.x\", \"Red Hat \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\" && \"s390\" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Red Hat\", cpu);\n\nyum_updateinfo = get_kb_item(\"Host/RedHat/yum-updateinfo\");\nif (!empty_or_null(yum_updateinfo)) \n{\n rhsa = \"RHSA-2009:1531\";\n yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);\n if (!empty_or_null(yum_report))\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : yum_report \n );\n exit(0);\n }\n else\n {\n audit_message = \"affected by Red Hat security advisory \" + rhsa;\n audit(AUDIT_OS_NOT, audit_message);\n }\n}\nelse\n{\n flag = 0;\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-1.0.9-0.47.el3\")) flag++;\n\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-chat-1.0.9-0.47.el3\")) flag++;\n\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-devel-1.0.9-0.47.el3\")) flag++;\n\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-dom-inspector-1.0.9-0.47.el3\")) flag++;\n\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-js-debugger-1.0.9-0.47.el3\")) flag++;\n\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-mail-1.0.9-0.47.el3\")) flag++;\n\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-nspr-1.0.9-0.47.el3\")) flag++;\n\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-nspr-devel-1.0.9-0.47.el3\")) flag++;\n\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-nss-1.0.9-0.47.el3\")) flag++;\n\n if (rpm_check(release:\"RHEL3\", reference:\"seamonkey-nss-devel-1.0.9-0.47.el3\")) flag++;\n\n\n if (rpm_check(release:\"RHEL4\", reference:\"seamonkey-1.0.9-50.el4_8\")) flag++;\n\n if (rpm_check(release:\"RHEL4\", reference:\"seamonkey-chat-1.0.9-50.el4_8\")) flag++;\n\n if (rpm_check(release:\"RHEL4\", reference:\"seamonkey-devel-1.0.9-50.el4_8\")) flag++;\n\n if (rpm_check(release:\"RHEL4\", reference:\"seamonkey-dom-inspector-1.0.9-50.el4_8\")) flag++;\n\n if (rpm_check(release:\"RHEL4\", reference:\"seamonkey-js-debugger-1.0.9-50.el4_8\")) flag++;\n\n if (rpm_check(release:\"RHEL4\", reference:\"seamonkey-mail-1.0.9-50.el4_8\")) flag++;\n\n\n if (flag)\n {\n security_report_v4(\n port : 0,\n severity : SECURITY_HOLE,\n extra : rpm_report_get() + redhat_report_package_caveat()\n );\n exit(0);\n }\n else\n {\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"seamonkey / seamonkey-chat / seamonkey-devel / etc\");\n }\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-08-01T01:35:30", "bulletinFamily": "scanner", "description": "Update to new upstream Firefox version 3.5.4, fixing multiple security\nissues detailed in the upstream advisories:\nhttp://www.mozilla.org/security/known-\nvulnerabilities/firefox35.html#firefox3.5.4 Update also includes all\npackages depending on gecko-libs rebuilt against new version of\nFirefox / XULRunner.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.", "modified": "2020-08-02T00:00:00", "id": "FEDORA_2009-10878.NASL", "href": "https://www.tenable.com/plugins/nessus/42297", "published": "2009-10-29T00:00:00", "title": "Fedora 11 : Miro-2.5.2-5.fc11 / blam-1.8.5-15.fc11 / chmsee-1.0.1-12.fc11 / eclipse-3.4.2-17.fc11 / etc (2009-10878)", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 80502\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Fedora Security Advisory 2009-10878.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(42297);\n script_version(\"1.19\");\n script_cvs_date(\"Date: 2019/08/02 13:32:29\");\n\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3370\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3374\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\");\n script_xref(name:\"FEDORA\", value:\"2009-10878\");\n\n script_name(english:\"Fedora 11 : Miro-2.5.2-5.fc11 / blam-1.8.5-15.fc11 / chmsee-1.0.1-12.fc11 / eclipse-3.4.2-17.fc11 / etc (2009-10878)\");\n script_summary(english:\"Checks rpm output for the updated packages.\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Fedora host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Update to new upstream Firefox version 3.5.4, fixing multiple security\nissues detailed in the upstream advisories:\nhttp://www.mozilla.org/security/known-\nvulnerabilities/firefox35.html#firefox3.5.4 Update also includes all\npackages depending on gecko-libs rebuilt against new version of\nFirefox / XULRunner.\n\nNote that Tenable Network Security has extracted the preceding\ndescription block directly from the Fedora security advisory. Tenable\nhas attempted to automatically clean and format it as much as possible\nwithout introducing additional issues.\"\n );\n # http://www.mozilla.org/security/known-\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/known-\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=524815\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=530151\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=530155\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=530156\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=530157\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=530162\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=530167\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=530168\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://bugzilla.redhat.com/show_bug.cgi?id=530567\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030460.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9990574d\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030461.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?0ea3a660\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030462.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9da39c92\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030463.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?01e7b130\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030464.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?bca2e40b\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030465.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?4fcf2516\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030466.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9d11e095\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030467.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?2d24099d\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030468.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?d0e62233\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030469.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?005d9ce7\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030470.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?ebff9bdb\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030471.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?3106a132\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030472.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?d37b51fd\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030473.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?7e8cbc12\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030474.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?1246cf37\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030475.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?f9e52713\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030476.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?b0a35cb7\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030477.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?33574a8b\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030478.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?89a1035d\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030479.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?8dd7f9f7\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030480.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?a908698f\"\n );\n # https://lists.fedoraproject.org/pipermail/package-announce/2009-October/030481.html\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?9b58cb4d\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_cwe_id(16, 119, 264);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:Miro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:blam\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:chmsee\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:eclipse\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:epiphany\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:epiphany-extensions\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:evolution-rss\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:firefox\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:galeon\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:gnome-python2-extras\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:gnome-web-photo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:google-gadgets\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:hulahop\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:kazehakase\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:monodevelop\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:mozvoikko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:pcmanx-gtk2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:perl-Gtk2-MozEmbed\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:ruby-gnome2\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:seahorse-plugins\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:xulrunner\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:fedoraproject:fedora:yelp\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:fedoraproject:fedora:11\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2009/09/21\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2009/10/29\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2009/10/29\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Fedora Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Fedora\" >!< release) audit(AUDIT_OS_NOT, \"Fedora\");\nos_ver = eregmatch(pattern: \"Fedora.*release ([0-9]+)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Fedora\");\nos_ver = os_ver[1];\nif (! ereg(pattern:\"^11([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Fedora 11.x\", \"Fedora \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Fedora\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"FC11\", reference:\"Miro-2.5.2-5.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"blam-1.8.5-15.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"chmsee-1.0.1-12.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"eclipse-3.4.2-17.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"epiphany-2.26.3-5.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"epiphany-extensions-2.26.1-7.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"evolution-rss-0.1.4-5.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"firefox-3.5.4-1.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"galeon-2.0.7-17.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"gnome-python2-extras-2.25.3-8.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"gnome-web-photo-0.7-7.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"google-gadgets-0.11.1-2.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"hulahop-0.4.9-9.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"kazehakase-0.5.8-2.fc11.1\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"monodevelop-2.0-6.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"mozvoikko-0.9.7-0.8.rc1.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"pcmanx-gtk2-0.3.8-9.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"perl-Gtk2-MozEmbed-0.08-6.fc11.6\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"ruby-gnome2-0.19.3-3.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"seahorse-plugins-2.26.2-7.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"xulrunner-1.9.1.4-1.fc11\")) flag++;\nif (rpm_check(release:\"FC11\", reference:\"yelp-2.26.0-8.fc11\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"Miro / blam / chmsee / eclipse / epiphany / epiphany-extensions / etc\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-08-01T01:17:33", "bulletinFamily": "scanner", "description": "Several remote vulnerabilities have been discovered in Xulrunner, a\nruntime environment for XUL applications, such as the Iceweasel web\nbrowser. The Common Vulnerabilities and Exposures project identifies\nthe following problems :\n\n - CVE-2009-3380\n Vladimir Vukicevic, Jesse Ruderman, Martijn Wargers,\n Daniel Banchero, David Keeler and Boris Zbarsky reported\n crashes in layout engine, which might allow the\n execution of arbitrary code.\n\n - CVE-2009-3382\n Carsten Book reported a crash in the layout engine,\n which might allow the execution of arbitrary code.\n\n - CVE-2009-3376\n Jesse Ruderman and Sid Stamm discovered spoofing\n vulnerability in the file download dialog.\n\n - CVE-2009-3375\n Gregory Fleischer discovered a bypass of the same-origin\n policy using the document.getSelection() function.\n\n - CVE-2009-3374\n ", "modified": "2020-08-02T00:00:00", "id": "DEBIAN_DSA-1922.NASL", "href": "https://www.tenable.com/plugins/nessus/44787", "published": "2010-02-24T00:00:00", "title": "Debian DSA-1922-1 : xulrunner - several vulnerabilities", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 80502\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Debian Security Advisory DSA-1922. The text \n# itself is copyright (C) Software in the Public Interest, Inc.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(44787);\n script_version(\"1.19\");\n script_cvs_date(\"Date: 2019/08/02 13:32:22\");\n\n script_cve_id(\"CVE-2009-3274\", \"CVE-2009-3370\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3374\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\", \"CVE-2009-3382\");\n script_bugtraq_id(36852, 36853, 36855);\n script_xref(name:\"DSA\", value:\"1922\");\n\n script_name(english:\"Debian DSA-1922-1 : xulrunner - several vulnerabilities\");\n script_summary(english:\"Checks dpkg output for the updated package\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Debian host is missing a security-related update.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Several remote vulnerabilities have been discovered in Xulrunner, a\nruntime environment for XUL applications, such as the Iceweasel web\nbrowser. The Common Vulnerabilities and Exposures project identifies\nthe following problems :\n\n - CVE-2009-3380\n Vladimir Vukicevic, Jesse Ruderman, Martijn Wargers,\n Daniel Banchero, David Keeler and Boris Zbarsky reported\n crashes in layout engine, which might allow the\n execution of arbitrary code.\n\n - CVE-2009-3382\n Carsten Book reported a crash in the layout engine,\n which might allow the execution of arbitrary code.\n\n - CVE-2009-3376\n Jesse Ruderman and Sid Stamm discovered spoofing\n vulnerability in the file download dialog.\n\n - CVE-2009-3375\n Gregory Fleischer discovered a bypass of the same-origin\n policy using the document.getSelection() function.\n\n - CVE-2009-3374\n 'moz_bug_r_a4' discovered a privilege escalation to\n Chrome status in the XPCOM utility\n XPCVariant::VariantDataToJS.\n\n - CVE-2009-3373\n 'regenrecht' discovered a buffer overflow in the GIF\n parser, which might lead to the execution of arbitrary\n code.\n\n - CVE-2009-3372\n Marco C. discovered that a programming error in the\n proxy auto configuration code might lead to denial of\n service or the execution of arbitrary code.\n\n - CVE-2009-3274\n Jeremy Brown discovered that the filename of a\n downloaded file which is opened by the user is\n predictable, which might lead to tricking the user into\n a malicious file if the attacker has local access to the\n system.\n\n - CVE-2009-3370\n Paul Stone discovered that history information from web\n forms could be stolen.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2009-3380\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2009-3382\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2009-3376\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2009-3375\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2009-3374\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2009-3373\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2009-3372\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2009-3274\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://security-tracker.debian.org/tracker/CVE-2009-3370\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.debian.org/security/2009/dsa-1922\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\n\"Upgrade the xulrunner packages.\n\nFor the stable distribution (lenny), these problems have been fixed in\nversion 1.9.0.15-0lenny1.\n\nAs indicated in the Etch release notes, security support for the\nMozilla products in the oldstable distribution needed to be stopped\nbefore the end of the regular Etch security maintenance life cycle.\nYou are strongly encouraged to upgrade to stable or switch to a still\nsupported browser.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_cwe_id(16, 119, 264);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:debian:debian_linux:xulrunner\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:debian:debian_linux:5.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2009/10/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2010/02/24\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2010-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Debian Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/Debian/release\", \"Host/Debian/dpkg-l\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"debian_package.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Debian/release\")) audit(AUDIT_OS_NOT, \"Debian\");\nif (!get_kb_item(\"Host/Debian/dpkg-l\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\n\nflag = 0;\nif (deb_check(release:\"5.0\", prefix:\"libmozillainterfaces-java\", reference:\"1.9.0.15-0lenny1\")) flag++;\nif (deb_check(release:\"5.0\", prefix:\"libmozjs-dev\", reference:\"1.9.0.15-0lenny1\")) flag++;\nif (deb_check(release:\"5.0\", prefix:\"libmozjs1d\", reference:\"1.9.0.15-0lenny1\")) flag++;\nif (deb_check(release:\"5.0\", prefix:\"libmozjs1d-dbg\", reference:\"1.9.0.15-0lenny1\")) flag++;\nif (deb_check(release:\"5.0\", prefix:\"python-xpcom\", reference:\"1.9.0.15-0lenny1\")) flag++;\nif (deb_check(release:\"5.0\", prefix:\"spidermonkey-bin\", reference:\"1.9.0.15-0lenny1\")) flag++;\nif (deb_check(release:\"5.0\", prefix:\"xulrunner-1.9\", reference:\"1.9.0.15-0lenny1\")) flag++;\nif (deb_check(release:\"5.0\", prefix:\"xulrunner-1.9-dbg\", reference:\"1.9.0.15-0lenny1\")) flag++;\nif (deb_check(release:\"5.0\", prefix:\"xulrunner-1.9-gnome-support\", reference:\"1.9.0.15-0lenny1\")) flag++;\nif (deb_check(release:\"5.0\", prefix:\"xulrunner-dev\", reference:\"1.9.0.15-0lenny1\")) flag++;\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-08-01T03:22:55", "bulletinFamily": "scanner", "description": "Security issues were identified and fixed in firefox 3.0.x :\n\nSecurity researcher Alin Rad Pop of Secunia Research reported a\nheap-based buffer overflow in Mozilla", "modified": "2020-08-02T00:00:00", "id": "MANDRIVA_MDVSA-2009-290.NASL", "href": "https://www.tenable.com/plugins/nessus/42992", "published": "2009-12-04T00:00:00", "title": "Mandriva Linux Security Advisory : firefox (MDVSA-2009:290-1)", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 80502\n\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were \n# extracted from Mandriva Linux Security Advisory MDVSA-2009:290. \n# The text itself is copyright (C) Mandriva S.A.\n#\n\nif (NASL_LEVEL < 3000) exit(0);\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(42992);\n script_version(\"1.21\");\n script_cvs_date(\"Date: 2019/08/02 13:32:52\");\n\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3370\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3374\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\", \"CVE-2009-3382\");\n script_bugtraq_id(36851, 36852, 36853, 36855, 36856, 36857, 36858, 36866, 36867, 36871);\n script_xref(name:\"MDVSA\", value:\"2009:290-1\");\n\n script_name(english:\"Mandriva Linux Security Advisory : firefox (MDVSA-2009:290-1)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Mandriva Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"Security issues were identified and fixed in firefox 3.0.x :\n\nSecurity researcher Alin Rad Pop of Secunia Research reported a\nheap-based buffer overflow in Mozilla's string to floating point\nnumber conversion routines. Using this vulnerability an attacker could\ncraft some malicious JavaScript code containing a very long string to\nbe converted to a floating point number which would result in improper\nmemory allocation and the execution of an arbitrary memory location.\nThis vulnerability could thus be leveraged by the attacker to run\narbitrary code on a victim's computer (CVE-2009-1563).\n\nSecurity researcher Jeremy Brown reported that the file naming scheme\nused for downloading a file which already exists in the downloads\nfolder is predictable. If an attacker had local access to a victim's\ncomputer and knew the name of a file the victim intended to open\nthrough the Download Manager, he could use this vulnerability to place\na malicious file in the world-writable directory used to save\ntemporary downloaded files and cause the browser to choose the\nincorrect file when opening it. Since this attack requires local\naccess to the victim's machine, the severity of this vulnerability was\ndetermined to be low (CVE-2009-3274).\n\nSecurity researcher Paul Stone reported that a user's form history,\nboth from web content as well as the smart location bar, was\nvulnerable to theft. A malicious web page could synthesize events such\nas mouse focus and key presses on behalf of the victim and trick the\nbrowser into auto-filling the form fields with history entries and\nthen reading the entries (CVE-2009-3370).\n\nSecurity researcher Marco C. reported a flaw in the parsing of regular\nexpressions used in Proxy Auto-configuration (PAC) files. In certain\ncases this flaw could be used by an attacker to crash a victim's\nbrowser and run arbitrary code on their computer. Since this\nvulnerability requires the victim to have PAC configured in their\nenvironment with specific regular expresssions which can trigger the\ncrash, the severity of the issue was determined to be moderate\n(CVE-2009-3372).\n\nSecurity research firm iDefense reported that researcher regenrecht\ndiscovered a heap-based buffer overflow in Mozilla's GIF image parser.\nThis vulnerability could potentially be used by an attacker to crash a\nvictim's browser and run arbitrary code on their computer\n(CVE-2009-3373).\n\nMozilla security researcher moz_bug_r_a4 reported that the XPCOM\nutility XPCVariant::VariantDataToJS unwrapped doubly-wrapped objects\nbefore returning them to chrome callers. This could result in chrome\nprivileged code calling methods on an object which had previously been\ncreated or modified by web content, potentially executing malicious\nJavaScript code with chrome privileges (CVE-2009-3374).\n\nSecurity researcher Gregory Fleischer reported that text within a\nselection on a web page can be read by JavaScript in a different\ndomain using the document.getSelection function, violating the\nsame-origin policy. Since this vulnerability requires user interaction\nto exploit, its severity was determined to be moderate\n(CVE-2009-3375).\n\nMozilla security researchers Jesse Ruderman and Sid Stamm reported\nthat when downloading a file containing a right-to-left override\ncharacter (RTL) in the filename, the name displayed in the dialog\ntitle bar conflicts with the name of the file shown in the dialog\nbody. An attacker could use this vulnerability to obfuscate the name\nand file extension of a file to be downloaded and opened, potentially\ncausing a user to run an executable file when they expected to open a\nnon-executable file (CVE-2009-3376).\n\nMozilla developers and community members identified and fixed several\nstability bugs in the browser engine used in Firefox and other\nMozilla-based products. Some of these crashes showed evidence of\nmemory corruption under certain circumstances and we presume that with\nenough effort at least some of these could be exploited to run\narbitrary code. Vladimir Vukicevic, Jesse Ruderman, Martijn Wargers,\nDaniel Banchero, David Keeler, and Boris Zbarsky reported crashes in\nthe browser engine which affected both Firefox 3 and Firefox 3.5\n(CVE-2009-3380). Carsten Book reported a crash in the browser engine\nwhich affected only Firefox 3 (CVE-2009-3382).\n\nThis update provides the latest Mozilla Firefox 3.0.x to correct these\nissues.\n\nAdditionally, some packages which require so, have been rebuilt and\nare being provided as updates.\n\nUpdate :\n\nPackages for 2008.0 are provided for Corporate Desktop 2008.0\ncustomers\"\n );\n # https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-3.0/#firefox3.0.15\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?7388c9ba\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_cwe_id(16, 119, 264);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-af\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-ar\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-be\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-bg\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-bn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-ca\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-cs\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-cy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-da\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-de\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-el\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-en_GB\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-eo\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-es_AR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-es_ES\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-et\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-eu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-fi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-fr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-fy\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-ga_IE\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-gl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-gu_IN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-he\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-hi\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-hu\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-id\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-is\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-it\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-ja\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-ka\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-kn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-ko\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-ku\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-lt\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-lv\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-mk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-mn\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-mr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-nb_NO\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-nl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-nn_NO\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-oc\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-pa_IN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-pl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-pt_BR\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-pt_PT\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-ro\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-ru\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-si\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-sk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-sl\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-sq\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-sr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-sv_SE\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-te\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-th\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-tr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-uk\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-zh_CN\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:firefox-zh_TW\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64rarian-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64rarian0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64totem-plparser-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64totem-plparser7\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64xulrunner-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64xulrunner-unstable-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:lib64xulrunner1.9\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:librarian-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:librarian0\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libtotem-plparser-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libtotem-plparser7\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libxulrunner-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libxulrunner-unstable-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:libxulrunner1.9\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:mozilla-firefox-ext-blogrovr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:mozilla-firefox-ext-foxmarks\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:mozilla-firefox-ext-scribefire\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:rarian\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:totem\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:totem-common\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:totem-gstreamer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:totem-mozilla\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:totem-mozilla-gstreamer\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:xulrunner\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:mandriva:linux:yelp\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:mandriva:linux:2008.0\");\n\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2009/12/02\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2009/12/04\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2009-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Mandriva Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/Mandrake/release\", \"Host/Mandrake/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/Mandrake/release\")) audit(AUDIT_OS_NOT, \"Mandriva / Mandake Linux\");\nif (!get_kb_item(\"Host/Mandrake/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu !~ \"^(amd64|i[3-6]86|x86_64)$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Mandriva / Mandrake Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-af-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-ar-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-be-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-bg-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-bn-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-ca-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-cs-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-cy-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-da-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-de-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-el-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-en_GB-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-eo-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-es_AR-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-es_ES-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-et-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-eu-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-fi-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-fr-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-fy-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-ga_IE-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-gl-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-gu_IN-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-he-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-hi-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-hu-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-id-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-is-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-it-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-ja-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-ka-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-kn-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-ko-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-ku-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-lt-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-lv-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-mk-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-mn-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-mr-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-nb_NO-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-nl-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-nn_NO-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-oc-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-pa_IN-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-pl-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-pt_BR-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-pt_PT-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-ro-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-ru-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-si-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-sk-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-sl-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-sq-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-sr-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-sv_SE-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-te-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-th-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-tr-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-uk-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-zh_CN-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"firefox-zh_TW-3.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"x86_64\", reference:\"lib64rarian-devel-0.8.0-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"x86_64\", reference:\"lib64rarian0-0.8.0-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"x86_64\", reference:\"lib64totem-plparser-devel-2.20.1-1.9mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"x86_64\", reference:\"lib64totem-plparser7-2.20.1-1.9mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"x86_64\", reference:\"lib64xulrunner-devel-1.9.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"x86_64\", reference:\"lib64xulrunner-unstable-devel-1.9.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"x86_64\", reference:\"lib64xulrunner1.9-1.9.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"i386\", reference:\"librarian-devel-0.8.0-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"i386\", reference:\"librarian0-0.8.0-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"i386\", reference:\"libtotem-plparser-devel-2.20.1-1.9mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"i386\", reference:\"libtotem-plparser7-2.20.1-1.9mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"i386\", reference:\"libxulrunner-devel-1.9.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"i386\", reference:\"libxulrunner-unstable-devel-1.9.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", cpu:\"i386\", reference:\"libxulrunner1.9-1.9.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"mozilla-firefox-ext-blogrovr-1.1.798-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"mozilla-firefox-ext-foxmarks-2.7.2-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"mozilla-firefox-ext-scribefire-3.2.3-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"rarian-0.8.0-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"totem-2.20.1-1.9mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"totem-common-2.20.1-1.9mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"totem-gstreamer-2.20.1-1.9mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"totem-mozilla-2.20.1-1.9mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"totem-mozilla-gstreamer-2.20.1-1.9mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"xulrunner-1.9.0.15-0.1mdv2008.0\", yank:\"mdv\")) flag++;\nif (rpm_check(release:\"MDK2008.0\", reference:\"yelp-2.22.1-0.1mdv2008.0\", yank:\"mdv\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-08-01T04:51:33", "bulletinFamily": "scanner", "description": "A flaw was found in the way Firefox handles form history. A malicious\nweb page could steal saved form data by synthesizing input events,\ncausing the browser to auto-fill form fields (which could then be read\nby an attacker). (CVE-2009-3370)\n\nA flaw was found in the way Firefox creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file Firefox\nis going to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA flaw was found in the Firefox Proxy Auto-Configuration (PAC) file\nprocessor. If Firefox loads a malicious PAC file, it could crash\nFirefox or, potentially, execute arbitrary code with the privileges of\nthe user running Firefox. (CVE-2009-3372)\n\nA heap-based buffer overflow flaw was found in the Firefox GIF image\nprocessor. A malicious GIF image could crash Firefox or, potentially,\nexecute arbitrary code with the privileges of the user running\nFirefox. (CVE-2009-3373)\n\nA heap-based buffer overflow flaw was found in the Firefox string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash Firefox or, potentially, execute arbitrary code\nwith the privileges of the user running Firefox. (CVE-2009-1563)\n\nA flaw was found in the way Firefox handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way Firefox displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed\nin the title bar differs from the name displayed in the dialog body.\nAn attacker could use this flaw to trick a user into downloading a\nfile that has a file name or extension that differs from what the user\nexpected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning Firefox. (CVE-2009-3374, CVE-2009-3380, CVE-2009-3382)\n\nAfter installing the update, Firefox must be restarted for the changes\nto take effect.", "modified": "2020-08-02T00:00:00", "id": "SL_20091027_FIREFOX_ON_SL4_X.NASL", "href": "https://www.tenable.com/plugins/nessus/60683", "published": "2012-08-01T00:00:00", "title": "Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 80502\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text is (C) Scientific Linux.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(60683);\n script_version(\"1.7\");\n script_cvs_date(\"Date: 2019/10/25 13:36:18\");\n\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3370\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3374\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3380\", \"CVE-2009-3382\");\n\n script_name(english:\"Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\n\"The remote Scientific Linux host is missing one or more security\nupdates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"A flaw was found in the way Firefox handles form history. A malicious\nweb page could steal saved form data by synthesizing input events,\ncausing the browser to auto-fill form fields (which could then be read\nby an attacker). (CVE-2009-3370)\n\nA flaw was found in the way Firefox creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file Firefox\nis going to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA flaw was found in the Firefox Proxy Auto-Configuration (PAC) file\nprocessor. If Firefox loads a malicious PAC file, it could crash\nFirefox or, potentially, execute arbitrary code with the privileges of\nthe user running Firefox. (CVE-2009-3372)\n\nA heap-based buffer overflow flaw was found in the Firefox GIF image\nprocessor. A malicious GIF image could crash Firefox or, potentially,\nexecute arbitrary code with the privileges of the user running\nFirefox. (CVE-2009-3373)\n\nA heap-based buffer overflow flaw was found in the Firefox string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash Firefox or, potentially, execute arbitrary code\nwith the privileges of the user running Firefox. (CVE-2009-1563)\n\nA flaw was found in the way Firefox handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way Firefox displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed\nin the title bar differs from the name displayed in the dialog body.\nAn attacker could use this flaw to trick a user into downloading a\nfile that has a file name or extension that differs from what the user\nexpected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning Firefox. (CVE-2009-3374, CVE-2009-3380, CVE-2009-3382)\n\nAfter installing the update, Firefox must be restarted for the changes\nto take effect.\"\n );\n # https://listserv.fnal.gov/scripts/wa.exe?A2=ind0910&L=scientific-linux-errata&T=0&P=2204\n script_set_attribute(\n attribute:\"see_also\",\n value:\"http://www.nessus.org/u?583d7ae4\"\n );\n script_set_attribute(attribute:\"solution\", value:\"Update the affected packages.\");\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_cwe_id(16, 119, 264);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"x-cpe:/o:fermilab:scientific_linux\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2009/09/21\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2009/10/27\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2012/08/01\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2012-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Scientific Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/cpu\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || \"Scientific Linux \" >!< release) audit(AUDIT_HOST_NOT, \"running Scientific Linux\");\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (cpu >!< \"x86_64\" && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Scientific Linux\", cpu);\n\n\nflag = 0;\nif (rpm_check(release:\"SL4\", reference:\"firefox-3.0.15-3.el4\")) flag++;\nif (rpm_check(release:\"SL4\", reference:\"nspr-4.7.6-1.el4_8\")) flag++;\nif (rpm_check(release:\"SL4\", reference:\"nspr-devel-4.7.6-1.el4_8\")) flag++;\n\nif (rpm_check(release:\"SL5\", reference:\"firefox-3.0.15-3.el5_4\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"nspr-4.7.6-1.el5_4\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"nspr-devel-4.7.6-1.el5_4\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"xulrunner-1.9.0.15-3.el5_4\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"xulrunner-devel-1.9.0.15-3.el5_4\")) flag++;\nif (rpm_check(release:\"SL5\", reference:\"xulrunner-devel-unstable-1.9.0.15-3.el5_4\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse audit(AUDIT_HOST_NOT, \"affected\");\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-08-01T04:11:04", "bulletinFamily": "scanner", "description": "From Red Hat Security Advisory 2009:1530 :\n\nUpdated firefox packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 4 and 5.\n\nThis update has been rated as having critical security impact by the\nRed Hat Security Response Team.\n\nMozilla Firefox is an open source Web browser. XULRunner provides the\nXUL Runtime environment for Mozilla Firefox. nspr provides the\nNetscape Portable Runtime (NSPR).\n\nA flaw was found in the way Firefox handles form history. A malicious\nweb page could steal saved form data by synthesizing input events,\ncausing the browser to auto-fill form fields (which could then be read\nby an attacker). (CVE-2009-3370)\n\nA flaw was found in the way Firefox creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file Firefox\nis going to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA flaw was found in the Firefox Proxy Auto-Configuration (PAC) file\nprocessor. If Firefox loads a malicious PAC file, it could crash\nFirefox or, potentially, execute arbitrary code with the privileges of\nthe user running Firefox. (CVE-2009-3372)\n\nA heap-based buffer overflow flaw was found in the Firefox GIF image\nprocessor. A malicious GIF image could crash Firefox or, potentially,\nexecute arbitrary code with the privileges of the user running\nFirefox. (CVE-2009-3373)\n\nA heap-based buffer overflow flaw was found in the Firefox string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash Firefox or, potentially, execute arbitrary code\nwith the privileges of the user running Firefox. (CVE-2009-1563)\n\nA flaw was found in the way Firefox handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way Firefox displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed\nin the title bar differs from the name displayed in the dialog body.\nAn attacker could use this flaw to trick a user into downloading a\nfile that has a file name or extension that differs from what the user\nexpected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning Firefox. (CVE-2009-3374, CVE-2009-3380, CVE-2009-3382)\n\nFor technical details regarding these flaws, refer to the Mozilla\nsecurity advisories for Firefox 3.0.15. You can find a link to the\nMozilla advisories in the References section of this errata.\n\nAll Firefox users should upgrade to these updated packages, which\ncontain Firefox version 3.0.15, which corrects these issues. After\ninstalling the update, Firefox must be restarted for the changes to\ntake effect.", "modified": "2020-08-02T00:00:00", "id": "ORACLELINUX_ELSA-2009-1530.NASL", "href": "https://www.tenable.com/plugins/nessus/67948", "published": "2013-07-12T00:00:00", "title": "Oracle Linux 4 / 5 : firefox (ELSA-2009-1530)", "type": "nessus", "sourceData": "#%NASL_MIN_LEVEL 80502\n#\n# (C) Tenable Network Security, Inc.\n#\n# The descriptive text and package checks in this plugin were\n# extracted from Red Hat Security Advisory RHSA-2009:1530 and \n# Oracle Linux Security Advisory ELSA-2009-1530 respectively.\n#\n\ninclude(\"compat.inc\");\n\nif (description)\n{\n script_id(67948);\n script_version(\"1.11\");\n script_cvs_date(\"Date: 2019/10/25 13:36:08\");\n\n script_cve_id(\"CVE-2009-0689\", \"CVE-2009-3274\", \"CVE-2009-3370\", \"CVE-2009-3371\", \"CVE-2009-3372\", \"CVE-2009-3373\", \"CVE-2009-3374\", \"CVE-2009-3375\", \"CVE-2009-3376\", \"CVE-2009-3377\", \"CVE-2009-3378\", \"CVE-2009-3379\", \"CVE-2009-3380\", \"CVE-2009-3381\", \"CVE-2009-3382\", \"CVE-2009-3383\", \"CVE-2009-3384\");\n script_xref(name:\"RHSA\", value:\"2009:1530\");\n\n script_name(english:\"Oracle Linux 4 / 5 : firefox (ELSA-2009-1530)\");\n script_summary(english:\"Checks rpm output for the updated packages\");\n\n script_set_attribute(\n attribute:\"synopsis\", \n value:\"The remote Oracle Linux host is missing one or more security updates.\"\n );\n script_set_attribute(\n attribute:\"description\", \n value:\n\"From Red Hat Security Advisory 2009:1530 :\n\nUpdated firefox packages that fix several security issues are now\navailable for Red Hat Enterprise Linux 4 and 5.\n\nThis update has been rated as having critical security impact by the\nRed Hat Security Response Team.\n\nMozilla Firefox is an open source Web browser. XULRunner provides the\nXUL Runtime environment for Mozilla Firefox. nspr provides the\nNetscape Portable Runtime (NSPR).\n\nA flaw was found in the way Firefox handles form history. A malicious\nweb page could steal saved form data by synthesizing input events,\ncausing the browser to auto-fill form fields (which could then be read\nby an attacker). (CVE-2009-3370)\n\nA flaw was found in the way Firefox creates temporary file names for\ndownloaded files. If a local attacker knows the name of a file Firefox\nis going to download, they can replace the contents of that file with\narbitrary contents. (CVE-2009-3274)\n\nA flaw was found in the Firefox Proxy Auto-Configuration (PAC) file\nprocessor. If Firefox loads a malicious PAC file, it could crash\nFirefox or, potentially, execute arbitrary code with the privileges of\nthe user running Firefox. (CVE-2009-3372)\n\nA heap-based buffer overflow flaw was found in the Firefox GIF image\nprocessor. A malicious GIF image could crash Firefox or, potentially,\nexecute arbitrary code with the privileges of the user running\nFirefox. (CVE-2009-3373)\n\nA heap-based buffer overflow flaw was found in the Firefox string to\nfloating point conversion routines. A web page containing malicious\nJavaScript could crash Firefox or, potentially, execute arbitrary code\nwith the privileges of the user running Firefox. (CVE-2009-1563)\n\nA flaw was found in the way Firefox handles text selection. A\nmalicious website may be able to read highlighted text in a different\ndomain (e.g. another website the user is viewing), bypassing the\nsame-origin policy. (CVE-2009-3375)\n\nA flaw was found in the way Firefox displays a right-to-left override\ncharacter when downloading a file. In these cases, the name displayed\nin the title bar differs from the name displayed in the dialog body.\nAn attacker could use this flaw to trick a user into downloading a\nfile that has a file name or extension that differs from what the user\nexpected. (CVE-2009-3376)\n\nSeveral flaws were found in the processing of malformed web content. A\nweb page containing malicious content could cause Firefox to crash or,\npotentially, execute arbitrary code with the privileges of the user\nrunning Firefox. (CVE-2009-3374, CVE-2009-3380, CVE-2009-3382)\n\nFor technical details regarding these flaws, refer to the Mozilla\nsecurity advisories for Firefox 3.0.15. You can find a link to the\nMozilla advisories in the References section of this errata.\n\nAll Firefox users should upgrade to these updated packages, which\ncontain Firefox version 3.0.15, which corrects these issues. After\ninstalling the update, Firefox must be restarted for the changes to\ntake effect.\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2009-October/001219.html\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://oss.oracle.com/pipermail/el-errata/2009-October/001220.html\"\n );\n script_set_attribute(\n attribute:\"solution\", \n value:\"Update the affected firefox packages.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_cwe_id(16, 119, 264, 399);\n\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:firefox\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:nspr\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:nspr-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:xulrunner\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:xulrunner-devel\");\n script_set_attribute(attribute:\"cpe\", value:\"p-cpe:/a:oracle:linux:xulrunner-devel-unstable\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:4\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/o:oracle:linux:5\");\n\n script_set_attribute(attribute:\"vuln_publication_date\", value:\"2009/07/01\");\n script_set_attribute(attribute:\"patch_publication_date\", value:\"2009/10/28\");\n script_set_attribute(attribute:\"plugin_publication_date\", value:\"2013/07/12\");\n script_set_attribute(attribute:\"generated_plugin\", value:\"current\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_copyright(english:\"This script is Copyright (C) 2013-2019 and is owned by Tenable, Inc. or an Affiliate thereof.\");\n script_family(english:\"Oracle Linux Local Security Checks\");\n\n script_dependencies(\"ssh_get_info.nasl\");\n script_require_keys(\"Host/local_checks_enabled\", \"Host/OracleLinux\", \"Host/RedHat/release\", \"Host/RedHat/rpm-list\");\n\n exit(0);\n}\n\n\ninclude(\"audit.inc\");\ninclude(\"global_settings.inc\");\ninclude(\"rpm.inc\");\n\n\nif (!get_kb_item(\"Host/local_checks_enabled\")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);\nif (!get_kb_item(\"Host/OracleLinux\")) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nrelease = get_kb_item(\"Host/RedHat/release\");\nif (isnull(release) || !pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux)\", string:release)) audit(AUDIT_OS_NOT, \"Oracle Linux\");\nos_ver = pregmatch(pattern: \"Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\\.[0-9]+)?)\", string:release);\nif (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, \"Oracle Linux\");\nos_ver = os_ver[1];\nif (! preg(pattern:\"^(4|5)([^0-9]|$)\", string:os_ver)) audit(AUDIT_OS_NOT, \"Oracle Linux 4 / 5\", \"Oracle Linux \" + os_ver);\n\nif (!get_kb_item(\"Host/RedHat/rpm-list\")) audit(AUDIT_PACKAGE_LIST_MISSING);\n\ncpu = get_kb_item(\"Host/cpu\");\nif (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);\nif (\"x86_64\" >!< cpu && \"ia64\" >!< cpu && cpu !~ \"^i[3-6]86$\") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, \"Oracle Linux\", cpu);\n\nflag = 0;\nif (rpm_check(release:\"EL4\", reference:\"firefox-3.0.15-3.0.1.el4\")) flag++;\nif (rpm_check(release:\"EL4\", reference:\"nspr-4.7.6-1.el4_8\")) flag++;\nif (rpm_check(release:\"EL4\", reference:\"nspr-devel-4.7.6-1.el4_8\")) flag++;\n\nif (rpm_check(release:\"EL5\", reference:\"firefox-3.0.15-3.0.1.el5_4\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"nspr-4.7.6-1.el5_4\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"nspr-devel-4.7.6-1.el5_4\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"xulrunner-1.9.0.15-3.0.1.el5_4\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"xulrunner-devel-1.9.0.15-3.0.1.el5_4\")) flag++;\nif (rpm_check(release:\"EL5\", reference:\"xulrunner-devel-unstable-1.9.0.15-3.0.1.el5_4\")) flag++;\n\n\nif (flag)\n{\n if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());\n else security_hole(0);\n exit(0);\n}\nelse\n{\n tested = pkg_tests_get();\n if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);\n else audit(AUDIT_PACKAGE_NOT_INSTALLED, \"firefox / nspr / nspr-devel / xulrunner / xulrunner-devel / etc\");\n}\n", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-08-01T03:25:53", "bulletinFamily": "scanner", "description": "The installed version of Firefox is earlier than 3.0.15. Such\nversions are potentially affected by the following security issues :\n\n - It may be possible for a malicious web page to \n steal form history. (MFSA 2009-52)\n\n - By predicting the filename of an already \n downloaded file in the downloads directory, a \n local attacker may be able to trick the browser\n into opening an incorrect file. (MFSA 2009-53)\n\n - Provided the browser is configured to use Proxy\n Auto-configuration it may be possible for an \n attacker to crash the browser or execute arbitrary\n code. (MFSA 2009-55)\n\n - Mozilla", "modified": "2020-08-02T00:00:00", "id": "MOZILLA_FIREFOX_3015.NASL", "href": "https://www.tenable.com/plugins/nessus/42305", "published": "2009-10-29T00:00:00", "title": "Firefox < 3.0.15 Multiple Vulnerabilities", "type": "nessus", "sourceData": "#\n# (C) Tenable Network Security, Inc.\n#\n\n\nif (NASL_LEVEL < 3000) exit(0);\n\ninclude(\"compat.inc\");\n\n\nif (description)\n{\n script_id(42305);\n script_version(\"1.20\");\n\n script_cve_id(\n \"CVE-2009-0689\",\n # \"CVE-2009-3274\", # applies to Linux only.\n \"CVE-2009-3370\",\n \"CVE-2009-3372\",\n \"CVE-2009-3373\",\n \"CVE-2009-3374\",\n \"CVE-2009-3375\",\n \"CVE-2009-3376\",\n \"CVE-2009-3380\",\n \"CVE-2009-3381\",\n \"CVE-2009-3382\",\n \"CVE-2009-3383\"\n );\n script_bugtraq_id(\n 36851,\n # 36852, # nb: applies to Linux only.\n 36853,\n 36855,\n 36856,\n 36857,\n 36858,\n 36866,\n 36867,\n 36869,\n 36870,\n 36871,\n 36873\n );\n script_xref(name:\"Secunia\", value:\"36711\");\n\n script_name(english:\"Firefox < 3.0.15 Multiple Vulnerabilities\");\n script_summary(english:\"Checks version of Firefox\");\n\n script_set_attribute( attribute:\"synopsis\", value:\n\"The remote Windows host contains a web browser that is affected by\nmultiple vulnerabilities.\" );\n script_set_attribute( attribute:\"description\", value:\n\"The installed version of Firefox is earlier than 3.0.15. Such\nversions are potentially affected by the following security issues :\n\n - It may be possible for a malicious web page to \n steal form history. (MFSA 2009-52)\n\n - By predicting the filename of an already \n downloaded file in the downloads directory, a \n local attacker may be able to trick the browser\n into opening an incorrect file. (MFSA 2009-53)\n\n - Provided the browser is configured to use Proxy\n Auto-configuration it may be possible for an \n attacker to crash the browser or execute arbitrary\n code. (MFSA 2009-55)\n\n - Mozilla's GIF image parser is affected by a \n heap-based buffer overflow. (MFSA 2009-56)\n\n - A vulnerability in XPCOM utility \n 'XPCVariant::VariantDataToJS' could allow \n executing arbitrary JavaScript code with chrome \n privileges. (MFSA 2009-57)\n\n - A vulnerability in Mozilla's string to floating\n point number conversion routine could allow \n arbitrary code execution on the remote system. \n (MFSA 2009-59)\n\n - It may be possible to read text from a web page \n using JavaScript function 'document.getSelection()\n from a different domain. (MFSA 2009-61)\n\n - If a file contains right-to-left override character\n (RTL) in the filename it may be possible for an \n attacker to obfuscate the filename and extension \n of the file being downloaded. (MFSA 2009-62)\n\n - Multiple memory corruption vulnerabilities could\n potentially allow arbitrary code execution.\n (MFSA 2009-64)\n\" );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/advisories/mfsa2009-52/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/advisories/mfsa2009-53/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/advisories/mfsa2009-55/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/advisories/mfsa2009-56/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/advisories/mfsa2009-57/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/advisories/mfsa2009-59/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/advisories/mfsa2009-61/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/advisories/mfsa2009-62/\"\n );\n script_set_attribute(\n attribute:\"see_also\",\n value:\"https://www.mozilla.org/en-US/security/advisories/mfsa2009-64/\"\n );\n script_set_attribute(\n attribute:\"solution\",\n value:\"Upgrade to Firefox 3.0.15 or later.\"\n );\n script_set_cvss_base_vector(\"CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C\");\n script_set_cvss_temporal_vector(\"CVSS2#E:POC/RL:OF/RC:C\");\n script_set_attribute(attribute:\"exploitability_ease\", value:\"Exploits are available\");\n script_set_attribute(attribute:\"exploit_available\", value:\"true\");\n script_cwe_id(16, 119, 264);\n script_set_attribute(\n attribute:\"vuln_publication_date\",\n value:\"2009/10/27\"\n );\n script_set_attribute(\n attribute:\"patch_publication_date\",\n value:\"2009/10/27\"\n );\n script_set_attribute(\n attribute:\"plugin_publication_date\",\n value:\"2009/10/29\"\n );\n script_cvs_date(\"Date: 2018/07/16 14:09:14\");\n script_set_attribute(attribute:\"plugin_type\", value:\"local\");\n script_set_attribute(attribute:\"cpe\", value:\"cpe:/a:mozilla:firefox\");\n script_end_attributes();\n\n script_category(ACT_GATHER_INFO);\n script_family(english:\"Windows\");\n script_copyright(english:\"This script is Copyright (C) 2009-2018 Tenable Network Security, Inc.\");\n script_dependencies(\"mozilla_org_installed.nasl\");\n script_require_keys(\"Mozilla/Firefox/Version\");\n exit(0);\n}\n\ninclude(\"mozilla_version.inc\");\nport = get_kb_item_or_exit(\"SMB/transport\"); \n\ninstalls = get_kb_list(\"SMB/Mozilla/Firefox/*\");\nif (isnull(installs)) audit(AUDIT_NOT_INST, \"Firefox\");\n\nmozilla_check_version(installs:installs, product:'firefox', esr:FALSE, fix:'3.0.15', severity:SECURITY_HOLE);", "cvss": {"score": 9.3, "vector": "AV:N/AC:M/Au:N/C:C/I:C/A:C"}}], "oraclelinux": [{"lastseen": "2019-05-29T18:37:41", "bulletinFamily": "unix", "description": "firefox:\n[3.0.15-3.0.1.el5_4]\n- Update firstrun and homepage URLs in specfile\n- Added patch oracle-firefox-branding.patch\n- Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html\n and removed the corresponding Red Hat ones\n[3.0.15-3]\n- Rebuild due to Mozilla's respin\n[3.0.15-2]\n- Rebuild due to xulrunner changes\n[3.0.15-1]\n- Update to 3.0.15\nnspr:\n[4.7.6-1]\n- update to 4.7.6\nxulrunner:\n[1.9.0.15-3.0.1.el5_4]\n- Added xulrunner-oracle-default-prefs.js and removed the corresponding\n RedHat one.\n[1.9.0.15-3]\n- Rebuild due to Mozilla's respin\n[1.9.0.15-2]\n- Added remedy patch\n[1.9.0.15-1]\n- Update to 1.9.0.15 ", "modified": "2009-10-28T00:00:00", "published": "2009-10-28T00:00:00", "id": "ELSA-2009-1530", "href": "http://linux.oracle.com/errata/ELSA-2009-1530.html", "title": "firefox security update", "type": "oraclelinux", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "debian": [{"lastseen": "2019-05-30T02:22:24", "bulletinFamily": "unix", "description": "- ------------------------------------------------------------------------\nDebian Security Advisory DSA-1922-1 security@debian.org\nhttp://www.debian.org/security/ Moritz Muehlenhoff\nOctober 28, 2009 http://www.debian.org/security/faq\n- ------------------------------------------------------------------------\n\nPackage : xulrunner\nVulnerability : several\nProblem type : remote\nDebian-specific: no\nCVE Id(s) : CVE-2009-3274 CVE-2009-3370 CVE-2009-3372 CVE-2009-3373 CVE-2009-3374 CVE-2009-3375 CVE-2009-3376 CVE-2009-3380 CVE-2009-3382\n\nSeveral remote vulnerabilities have been discovered in Xulrunner, a\nruntime environment for XUL applications, such as the Iceweasel web\nbrowser. The Common Vulnerabilities and Exposures project identifies\nthe following problems:\n\nCVE-2009-3380\n\n Vladimir Vukicevic, Jesse Ruderman, Martijn Wargers, Daniel\n Banchero, David Keeler and Boris Zbarsky reported crashes in\n layout engine, which might allow the execution of arbitrary code.\n\nCVE-2009-3382\n\n Carsten Book reported a crash in the layout engine, which might\n allow the execution of arbitrary code.\n\nCVE-2009-3376\n\n Jesse Ruderman and Sid Stamm discovered spoofing vulnerability\n in the file download dialog.\n\nCVE-2009-3375\n\n Gregory Fleischer discovered a bypass of the same-origin policy\n using the document.getSelection() function.\n\nCVE-2009-3374\n\n "moz_bug_r_a4" discovered a privilege escalation to Chrome status\n in the XPCOM utility XPCVariant::VariantDataToJS.\n\nCVE-2009-3373\n\n "regenrecht" discovered a buffer overflow in the GIF parser, which\n might lead to the execution of arbitrary code.\n\nCVE-2009-3372\n\n Marco C. discovered that a programming error in the proxy auto\n configuration code might lead to denial of service or the\n execution of arbitrary code.\n\nCVE-2009-3274\n\n Jeremy Brown discovered that the filename of a downloaded file\n which is opened by the user is predictable, which might lead to\n tricking the user into a malicious file if the attacker has local\n access to the system.\n\nCVE-2009-3370\n\n Paul Stone discovered that history information from web forms\n could be stolen.\n\n\nFor the stable distribution (lenny), these problems have been fixed\nin version 1.9.0.15-0lenny1.\n\nAs indicated in the Etch release notes, security support for the\nMozilla products in the oldstable distribution needed to be stopped\nbefore the end of the regular Etch security maintenance life cycle.\nYou are strongly encouraged to upgrade to stable or switch to a still\nsupported browser.\n\nFor the unstable distribution (sid), these problems have been fixed in\nversion 1.9.1.4-1.\n\nWe recommend that you upgrade your xulrunner packages.\n\nUpgrade instructions\n- --------------------\n\nwget url\n will fetch the file for you\ndpkg -i file.deb\n will install the referenced file.\n\nIf you are using the apt-get package manager, use the line for\nsources.list as given below:\n\napt-get update\n will update the internal database\napt-get upgrade\n will install corrected packages\n\nYou may use an automated update by adding the resources from the\nfooter to the proper configuration.\n\n\nDebian GNU/Linux 5.0 alias lenny\n- --------------------------------\n\nStable updates are available for alpha, amd64, arm, armel, hppa, i386, ia64, mips, mipsel, powerpc, s390 and sparc.\n\nSource archives:\n\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15-0lenny1.diff.gz\n Size/MD5 checksum: 116164 3d995b59ffe890d36117f3103f38b9b1\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15-0lenny1.dsc\n Size/MD5 checksum: 1779 7e8392a8b59ef9064df564ee03c23b14\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15.orig.tar.gz\n Size/MD5 checksum: 44085950 49aa2aee64997f9e802cf386d038d2d7\n\nArchitecture independent packages:\n\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozillainterfaces-java_1.9.0.15-0lenny1_all.deb\n Size/MD5 checksum: 1464278 ea66718b41a4c282284d37672d0e7078\n\nalpha architecture (DEC Alpha)\n\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_alpha.deb\n Size/MD5 checksum: 9494314 8cd7366b90d39c5c64064d1fb17c1022\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_alpha.deb\n Size/MD5 checksum: 938304 bf39af51a378ed039c545730664857aa\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_alpha.deb\n Size/MD5 checksum: 221588 1dd219c2812ca8d23fff415c9555d3db\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_alpha.deb\n Size/MD5 checksum: 432182 5d32bfa9665c32fb1738f416f739b3ae\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_alpha.deb\n Size/MD5 checksum: 3651374 14dd5f555695db43b94ceab3260c680d\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_alpha.deb\n Size/MD5 checksum: 51089582 fa7f8faad8460d1049e9fb8f6fd1f7bb\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_alpha.deb\n Size/MD5 checksum: 163912 d488634f9d36f6d0afcc7b27ee6699a0\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_alpha.deb\n Size/MD5 checksum: 112022 9666fd74cd00bc0643993acc22d40c91\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_alpha.deb\n Size/MD5 checksum: 71980 602c6780c2328141871f5d94b8a163f4\n\namd64 architecture (AMD x86_64 (AMD64))\n\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_amd64.deb\n Size/MD5 checksum: 69898 c0295f0b7e6957f236d769dc8bdfd2ca\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_amd64.deb\n Size/MD5 checksum: 890260 2d4cb08b3e886e06be04ec7e43a82b0f\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_amd64.deb\n Size/MD5 checksum: 151952 3e20640a2f4eb68a58731bba532aedb0\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_amd64.deb\n Size/MD5 checksum: 50327552 5779e5efb1f7b6612bf8a774a8e8cd6a\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_amd64.deb\n Size/MD5 checksum: 374218 86b4b4a30f5f30f4492fe11eca93dace\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_amd64.deb\n Size/MD5 checksum: 3287960 741031dbbba1f6c6e8fe045d71547905\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_amd64.deb\n Size/MD5 checksum: 222992 3e801bb57c442128512e599af5c9547e\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_amd64.deb\n Size/MD5 checksum: 7722556 cc9b8e7ac989143255cb6ad53ce84884\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_amd64.deb\n Size/MD5 checksum: 101512 396f03e0770dd73cf5820354a8b94a0f\n\narmel architecture (ARM EABI)\n\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_armel.deb\n Size/MD5 checksum: 223358 a881797fcf62521c0ab538e72b33bb70\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_armel.deb\n Size/MD5 checksum: 84272 1602bc59310724ee0f20d8f5a0ac0a8c\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_armel.deb\n Size/MD5 checksum: 821892 79baa048d939ac77273ac50237c7bfe3\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_armel.deb\n Size/MD5 checksum: 69726 cd5970b1776e5777686ce9208c074e79\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_armel.deb\n Size/MD5 checksum: 6954730 a8a092eab78826ef9ed0e98e8d7251bb\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_armel.deb\n Size/MD5 checksum: 141248 47668db41fd86750793bae3f59ff623e\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_armel.deb\n Size/MD5 checksum: 352870 99357abd251ccfe354b28ed441256eb4\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_armel.deb\n Size/MD5 checksum: 50116888 a19877e49d8d1037458d2531873181e0\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_armel.deb\n Size/MD5 checksum: 3579420 9091ebebb2d0b23a8f10300ff7340c16\n\nhppa architecture (HP PA RISC)\n\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_hppa.deb\n Size/MD5 checksum: 105902 14573c4144b48dfcdeadca11dbf28fd1\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_hppa.deb\n Size/MD5 checksum: 412252 703d501036427f18e6ffc3841c0434e7\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_hppa.deb\n Size/MD5 checksum: 158830 9c6c95e2c55a59adaa4314022adaba97\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_hppa.deb\n Size/MD5 checksum: 9512434 b479cbca6e9244681e8acf58afba706e\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_hppa.deb\n Size/MD5 checksum: 51210900 7b5ae111a77a354adadb9a019892970b\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_hppa.deb\n Size/MD5 checksum: 3621952 4a3cef66aa1b240f42c4c4c4de41ca64\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_hppa.deb\n Size/MD5 checksum: 222858 1f6d47dc993cbc9a068517a06492beb9\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_hppa.deb\n Size/MD5 checksum: 898430 c63b30f2604b2a08d9fed108253b6b5b\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_hppa.deb\n Size/MD5 checksum: 71384 50c3026bc0d90b912e74c0892ac3cd8c\n\ni386 architecture (Intel ia32)\n\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_i386.deb\n Size/MD5 checksum: 851844 28f3d2c286d83a90df609b21699baf97\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_i386.deb\n Size/MD5 checksum: 79142 61aff31316b603d03921eb89b5df073b\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_i386.deb\n Size/MD5 checksum: 3565362 fd8674b08b704e5f0f9ef790da65b7f8\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_i386.deb\n Size/MD5 checksum: 141410 0182fcff2acf3987fa15128659fe7b38\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_i386.deb\n Size/MD5 checksum: 6602586 03aed73b528a0e36cef99361ae9da656\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_i386.deb\n Size/MD5 checksum: 49492306 82d2789b64cedcbf2406a09131032764\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_i386.deb\n Size/MD5 checksum: 223182 1872e9d86b45cb1b29f20c4d75467200\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_i386.deb\n Size/MD5 checksum: 350814 4e647513b860210f0c1bc1caef893e9f\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_i386.deb\n Size/MD5 checksum: 68094 f9e97cd83f976afa8959ea9f774f1994\n\nia64 architecture (Intel ia64)\n\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_ia64.deb\n Size/MD5 checksum: 223134 2ae79c69711959cb6cd75026882abd60\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_ia64.deb\n Size/MD5 checksum: 542104 a8b314bf8ad3c48e1ab4ed231b83a450\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_ia64.deb\n Size/MD5 checksum: 121518 18ec63c6f78623b2c744d9362d4b2be6\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_ia64.deb\n Size/MD5 checksum: 76492 22f1645790b9540cc1a3b795573b3e46\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_ia64.deb\n Size/MD5 checksum: 49667940 d01b4ee9da9f802eb24749992dd14be2\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_ia64.deb\n Size/MD5 checksum: 180184 b26234c2f0d54a61e771ee478828c628\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_ia64.deb\n Size/MD5 checksum: 11301676 95599d73eb33ae7e9613d92304b8d813\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_ia64.deb\n Size/MD5 checksum: 811176 33ceb8965e9db8d79020777ab55e1838\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_ia64.deb\n Size/MD5 checksum: 3397550 7eff41c031481161dfab1bc83cfa8450\n\nmipsel architecture (MIPS (Little Endian))\n\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_mipsel.deb\n Size/MD5 checksum: 49965510 8997b286648f39786e86826b5045e69d\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_mipsel.deb\n Size/MD5 checksum: 223146 2bdf56823a2075c6bbd4fe3fc2e0646c\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_mipsel.deb\n Size/MD5 checksum: 7375092 29d842979cbc5ee6ad659cf13927788b\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_mipsel.deb\n Size/MD5 checksum: 96764 5fa81a5541ae261f0a72b91bb5bf6626\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_mipsel.deb\n Size/MD5 checksum: 144986 d3da343322c085f952511248e3a69345\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_mipsel.deb\n Size/MD5 checksum: 900210 b87e5f91341b390cb2f1603a1071aff7\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_mipsel.deb\n Size/MD5 checksum: 3308536 7c5f7065d8961c7fc0ca7fb974e6611c\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_mipsel.deb\n Size/MD5 checksum: 69836 ace8648bf416d4804db9644c487dcdf1\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_mipsel.deb\n Size/MD5 checksum: 378586 18fd2ced744197472973e2cae61d4d64\n\npowerpc architecture (PowerPC)\n\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_powerpc.deb\n Size/MD5 checksum: 362482 a0bf9d0ba7a4695378f7ea053cd9cc46\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_powerpc.deb\n Size/MD5 checksum: 3283604 b98767e9b18704a2482c731309eef892\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_powerpc.deb\n Size/MD5 checksum: 51378802 bed95771a8d00f88bedc12d480ed91f0\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_powerpc.deb\n Size/MD5 checksum: 94786 fb7b21596585931a6edda7e2bebae561\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_powerpc.deb\n Size/MD5 checksum: 152276 d83cf113d2600c6ca9e691dfd25a1466\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_powerpc.deb\n Size/MD5 checksum: 7275222 008f00164ecbc43c681f1743ba33c0e8\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_powerpc.deb\n Size/MD5 checksum: 72990 2982ec8818b1ae7b47241dcdb046c8e0\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_powerpc.deb\n Size/MD5 checksum: 887776 9853592dc50b738bd7b223fc78c030c3\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_powerpc.deb\n Size/MD5 checksum: 223140 96d915d392dbb2cdc3a09268d97a206f\n\ns390 architecture (IBM S/390)\n\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_s390.deb\n Size/MD5 checksum: 3306276 95d049eaa0c2b95b8f98f2295d984454\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_s390.deb\n Size/MD5 checksum: 406680 9efe79857bd5fc05bf567f4840109135\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_s390.deb\n Size/MD5 checksum: 223124 ee4ed0dc817d276cbe22bcb5ef6314af\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_s390.deb\n Size/MD5 checksum: 51172466 33aeec198869e5b92132775938f1dba6\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_s390.deb\n Size/MD5 checksum: 8387566 5cf074573a634121d0981d927bdf8dc5\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_s390.deb\n Size/MD5 checksum: 105540 ad95c071cf5d0f16301e004800626ab6\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_s390.deb\n Size/MD5 checksum: 156084 69c04262268e1b13ffac80f8827e5776\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_s390.deb\n Size/MD5 checksum: 909030 9d9a82bbaa3501f41dd810c3bf3e7b0b\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_s390.deb\n Size/MD5 checksum: 72868 738b9ff7dafce724b01f032e568d145d\n\nsparc architecture (Sun SPARC/UltraSPARC)\n\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_sparc.deb\n Size/MD5 checksum: 143228 8017cc9ebd542b69b5a33328e4db72fd\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_sparc.deb\n Size/MD5 checksum: 69342 2a626affc178cb0bed8bd8dc0302308b\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_sparc.deb\n Size/MD5 checksum: 821126 3107a47d82efbaf745b0a7355df82271\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_sparc.deb\n Size/MD5 checksum: 223230 41277488a9fbf77e3864848e36ad1040\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_sparc.deb\n Size/MD5 checksum: 7174794 ff98cd42b01c1b6da7f443a8513ec516\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_sparc.deb\n Size/MD5 checksum: 350084 53b49c566cc58af0976b24382a144a16\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_sparc.deb\n Size/MD5 checksum: 88202 d8ed5ea8a627c996c8890521551e14b3\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_sparc.deb\n Size/MD5 checksum: 49353618 3919a69140cbf1cc726b9142a7f33f23\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_sparc.deb\n Size/MD5 checksum: 3577270 0709623512ba6d57f6a475f8382b20a2\n\n\n These files will probably be moved into the stable distribution on\n its next update.\n\n- ---------------------------------------------------------------------------------\nFor apt-get: deb http://security.debian.org/ stable/updates main\nFor dpkg-ftp: ftp://security.debian.org/debian-security dists/stable/updates/main\nMailing list: debian-security-announce@lists.debian.org\nPackage info: `apt-cache show <pkg>' and http://packages.debian.org/<pkg>\n", "modified": "2009-10-28T21:13:52", "published": "2009-10-28T21:13:52", "id": "DEBIAN:DSA-1922-1:4C19A", "href": "https://lists.debian.org/debian-security-announce/debian-security-announce-2009/msg00245.html", "title": "[SECURITY] [DSA 1922-1] New xulrunner packages fix several vulnerabilities", "type": "debian", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "vmware": [{"lastseen": "2019-11-06T16:05:46", "bulletinFamily": "unix", "description": "a. Update for Service Console packages nss and nspr \nService console packages for Network Security Services (NSS) and NetScape Portable Runtime (NSPR) are updated to versions nss-3.12.3.99.3-1.2157 and nspr-4.7.6-1.2213 respectively. This patch fixes several security issues in the service console packages for NSS and NSPR. \nThe Common Vulnerabilities and Exposures Project (cve.mitre.org) has assigned the names CVE-2009-2409, CVE-2009-2408, CVE-2009-2404, CVE-2009-1563, CVE-2009-3274, CVE-2009-3370, CVE-2009-3372, CVE-2009-3373, CVE-2009-3374, CVE-2009-3375, CVE-2009-3376, CVE-2009-3380, and CVE-2009-3382 to these issues. \n\n", "modified": "2010-01-06T00:00:00", "published": "2010-03-03T00:00:00", "id": "VMSA-2010-0001", "href": "https://www.vmware.com/security/advisories/VMSA-2010-0001.html", "title": "ESX Service Console and vMA updates for nss and nspr", "type": "vmware", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "freebsd": [{"lastseen": "2019-05-29T18:34:11", "bulletinFamily": "unix", "description": "\nMozilla Foundation reports:\n\nMFSA 2009-64 Crashes with evidence of memory\n\t corruption (rv:1.9.1.4/ 1.9.0.15)\nMFSA 2009-63 Upgrade media libraries to fix memory\n\t safety bugs\nMFSA 2009-62 Download filename spoofing with RTL\n\t override\nMFSA 2009-61 Cross-origin data theft through\n\t document.getSelection()\nMFSA 2009-59 Heap buffer overflow in string to\n\t number conversion\nMFSA 2009-57 Chrome privilege escalation in\n\t XPCVariant::VariantDataToJS()\nMFSA 2009-56 Heap buffer overflow in GIF color map\n\t parser\nMFSA 2009-55 Crash in proxy auto-configuration\n\t regexp parsing\nMFSA 2009-54 Crash with recursive web-worker calls\nMFSA 2009-53 Local downloaded file tampering\nMFSA 2009-52 Form history vulnerable to stealing\n\n", "modified": "2009-12-14T00:00:00", "published": "2009-10-27T00:00:00", "id": "C87AA2D2-C3C4-11DE-AB08-000F20797EDE", "href": "https://vuxml.freebsd.org/freebsd/c87aa2d2-c3c4-11de-ab08-000f20797ede.html", "title": "mozilla -- multiple vulnerabilities", "type": "freebsd", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "ubuntu": [{"lastseen": "2020-07-09T01:40:13", "bulletinFamily": "unix", "description": "Alin Rad Pop discovered a heap-based buffer overflow in Firefox when it \nconverted strings to floating point numbers. If a user were tricked into \nviewing a malicious website, a remote attacker could cause a denial of service \nor possibly execute arbitrary code with the privileges of the user invoking the \nprogram. (CVE-2009-1563)\n\nJeremy Brown discovered that the Firefox Download Manager was vulnerable to \nsymlink attacks. A local attacker could exploit this to create or overwrite \nfiles with the privileges of the user invoking the program. (CVE-2009-3274)\n\nPaul Stone discovered a flaw in the Firefox form history. If a user were \ntricked into viewing a malicious website, a remote attacker could access this \ndata to steal confidential information. (CVE-2009-3370)\n\nOrlando Berrera discovered that Firefox did not properly free memory when using \nweb-workers. If a user were tricked into viewing a malicious website, a remote \nattacker could cause a denial of service or possibly execute arbitrary code \nwith the privileges of the user invoking the program. This issue only \naffected Ubuntu 9.10. (CVE-2009-3371)\n\nA flaw was discovered in the way Firefox processed Proxy Auto-configuration \n(PAC) files. If a user configured the browser to use PAC files with certain \nregular expressions, an attacker could cause a denial of service or possibly \nexecute arbitrary code with the privileges of the user invoking the program. \n(CVE-2009-3372)\n\nA heap-based buffer overflow was discovered in Mozilla's GIF image parser. If a \nuser were tricked into viewing a malicious website, a remote attacker could \ncause a denial of service or possibly execute arbitrary code with the \nprivileges of the user invoking the program. (CVE-2009-3373)\n\nA flaw was discovered in the JavaScript engine of Firefox. An attacker could \nexploit this to execute scripts from page content with chrome privileges. \n(CVE-2009-3374)\n\nGregory Fleischer discovered that the same-origin check in Firefox could be \nbypassed by utilizing the document.getSelection function. An attacker could \nexploit this to read data from other domains. (CVE-2009-3375)\n\nJesse Ruderman and Sid Stamm discovered that Firefox did not properly display \nfilenames containing right-to-left (RTL) override characters. If a user were \ntricked into downloading a malicious file with a crafted filename, an attacker \ncould exploit this to trick the user into opening a different file than the \nuser expected. (CVE-2009-3376)\n\nSeveral flaws were discovered in third party media libraries. If a user were \ntricked into opening a crafted media file, a remote attacker could cause a \ndenial of service or possibly execute arbitrary code with the privileges of the \nuser invoking the program. This issue only affected Ubuntu 9.10. \n(CVE-2009-3377)\n\nVladimir Vukicevic, Jesse Ruderman, Martijn Wargers, Daniel Banchero, David \nKeeler, Boris Zbarsky, Thomas Frederiksen, Marcia Knous, Carsten Book, Kevin \nBrosnan, David Anderson and Jeff Walden discovered various flaws in the browser \nand JavaScript engines of Firefox. If a user were tricked into viewing a \nmalicious website, a remote attacker could cause a denial of service or \npossibly execute arbitrary code with the privileges of the user invoking the \nprogram. (CVE-2009-3380, CVE-2009-3381, CVE-2009-3382, CVE-2009-3383)", "modified": "2009-10-31T00:00:00", "published": "2009-10-31T00:00:00", "id": "USN-853-1", "href": "https://ubuntu.com/security/notices/USN-853-1", "title": "Firefox and Xulrunner vulnerabilities", "type": "ubuntu", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}, {"lastseen": "2020-07-09T01:37:03", "bulletinFamily": "unix", "description": "USN-853-1 fixed vulnerabilities in Firefox and Xulrunner. The upstream \nchanges introduced regressions that could lead to crashes when processing \ncertain malformed GIF images, fonts and web pages. This update fixes the \nproblem.\n\nWe apologize for the inconvenience.\n\nOriginal advisory details:\n\nAlin Rad Pop discovered a heap-based buffer overflow in Firefox when it \nconverted strings to floating point numbers. If a user were tricked into \nviewing a malicious website, a remote attacker could cause a denial of service \nor possibly execute arbitrary code with the privileges of the user invoking the \nprogram. (CVE-2009-1563)\n\nJeremy Brown discovered that the Firefox Download Manager was vulnerable to \nsymlink attacks. A local attacker could exploit this to create or overwrite \nfiles with the privileges of the user invoking the program. (CVE-2009-3274)\n\nPaul Stone discovered a flaw in the Firefox form history. If a user were \ntricked into viewing a malicious website, a remote attacker could access this \ndata to steal confidential information. (CVE-2009-3370)\n\nOrlando Berrera discovered that Firefox did not properly free memory when using \nweb-workers. If a user were tricked into viewing a malicious website, a remote \nattacker could cause a denial of service or possibly execute arbitrary code \nwith the privileges of the user invoking the program. This issue only \naffected Ubuntu 9.10. (CVE-2009-3371)\n\nA flaw was discovered in the way Firefox processed Proxy Auto-configuration \n(PAC) files. If a user configured the browser to use PAC files with certain \nregular expressions, an attacker could cause a denial of service or possibly \nexecute arbitrary code with the privileges of the user invoking the program. \n(CVE-2009-3372)\n\nA heap-based buffer overflow was discovered in Mozilla's GIF image parser. If a \nuser were tricked into viewing a malicious website, a remote attacker could \ncause a denial of service or possibly execute arbitrary code with the \nprivileges of the user invoking the program. (CVE-2009-3373)\n\nA flaw was discovered in the JavaScript engine of Firefox. An attacker could \nexploit this to execute scripts from page content with chrome privileges. \n(CVE-2009-3374)\n\nGregory Fleischer discovered that the same-origin check in Firefox could be \nbypassed by utilizing the document.getSelection function. An attacker could \nexploit this to read data from other domains. (CVE-2009-3375)\n\nJesse Ruderman and Sid Stamm discovered that Firefox did not properly display \nfilenames containing right-to-left (RTL) override characters. If a user were \ntricked into downloading a malicious file with a crafted filename, an attacker \ncould exploit this to trick the user into opening a different file than the \nuser expected. (CVE-2009-3376)\n\nSeveral flaws were discovered in third party media libraries. If a user were \ntricked into opening a crafted media file, a remote attacker could cause a \ndenial of service or possibly execute arbitrary code with the privileges of the \nuser invoking the program. This issue only affected Ubuntu 9.10. \n(CVE-2009-3377)\n\nVladimir Vukicevic, Jesse Ruderman, Martijn Wargers, Daniel Banchero, David \nKeeler, Boris Zbarsky, Thomas Frederiksen, Marcia Knous, Carsten Book, Kevin \nBrosnan, David Anderson and Jeff Walden discovered various flaws in the browser \nand JavaScript engines of Firefox. If a user were tricked into viewing a \nmalicious website, a remote attacker could cause a denial of service or \npossibly execute arbitrary code with the privileges of the user invoking the \nprogram. (CVE-2009-3380, CVE-2009-3381, CVE-2009-3382, CVE-2009-3383)", "modified": "2009-11-11T00:00:00", "published": "2009-11-11T00:00:00", "id": "USN-853-2", "href": "https://ubuntu.com/security/notices/USN-853-2", "title": "Firefox and Xulrunner regression", "type": "ubuntu", "cvss": {"score": 10.0, "vector": "AV:N/AC:L/Au:N/C:C/I:C/A:C"}}], "suse": [{"lastseen": "2016-09-04T12:11:40", "bulletinFamily": "unix", "description": "The Mozilla Firefox browser was updated to fix various bugs and security issues.\n#### Solution\nThere is no known workaround, please install the update packages.", "modified": "2009-11-04T14:24:35", "published": "2009-11-04T14:24:35", "id": "SUSE-SA:2009:052", "href": "http://lists.opensuse.org/opensuse-security-announce/2009-11/msg00001.html", "type": "suse", "title": "remote code execution in MozillaFirefox", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}], "seebug": [{"lastseen": "2017-11-19T18:29:56", "bulletinFamily": "exploit", "description": "Bugraq ID: 36995\r\nCVE ID\uff1aCVE-2009-3384\r\n\r\nWebKit\u662f\u4e00\u6b3e\u5f00\u653e\u6e90\u4ee3\u7801\u7684web\u6d4f\u89c8\u5668\u5f15\u64ce\u3002\r\nWebKit\u5904\u7406FTP\u76ee\u5f55\u5217\u8868\u5b58\u5728\u591a\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8fdc\u7a0b\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u6f0f\u6d1e\u8fdb\u884c\u62d2\u7edd\u670d\u52a1\uff0c\u4fe1\u606f\u6cc4\u6f0f\u6216\u4efb\u610f\u4ee3\u7801\u6267\u884c\u653b\u51fb\u3002\r\n\u8bbf\u95ee\u6076\u610f\u7279\u6b8a\u6784\u5efa\u7684FTP\u670d\u52a1\u5668\u53ef\u89e6\u53d1\u6b64\u6f0f\u6d1e\u3002\u76ee\u524d\u6ca1\u6709\u8be6\u7ec6\u6f0f\u6d1e\u7ec6\u8282\u63d0\u4f9b\u3002\n\nWebKit Open Source Project WebKit r38566\r\nWebKit Open Source Project WebKit \r\nApple Safari 4.0.3 for Windows\r\nApple Safari 4.0.2 for Windows\r\nApple Safari 3.2.3 for Windows\r\nApple Safari 3.2.2 for Windows\r\nApple Safari 3.1.2 for Windows\r\nApple Safari 3.1.1 for Windows\r\nApple Safari 3.0.4 Beta for Windows\r\nApple Safari 3.0.3 \r\nApple Safari 3.0.2 Beta for Windows\r\nApple Safari 3.0.1 Beta for Windows\r\nApple Safari 4 for Windows\r\nApple Safari 3.1 for Windows\r\nApple Safari 3 Beta for Windows\n\u5382\u5546\u89e3\u51b3\u65b9\u6848\r\n\u7528\u6237\u53ef\u53c2\u8003\u5982\u4e0bApple\u4f9b\u5e94\u5546\u63d0\u4f9b\u7684\u89e3\u51b3\u65b9\u6848\uff1a\r\nApple Safari 4.0.3 for Windows\r\nApple APPLE-SA-2009-11-11-1 SafariQuickTimeSetup.exe\r\nSafari+QuickTime for Windows 7, Vista or XP\r\nhttp://www.apple.com/safari/download/\r\nApple APPLE-SA-2009-11-11-1 SafariSetup.exe\r\nSafari for Windows 7, Vista or XP\r\nhttp://www.apple.com/safari/download/", "modified": "2009-11-16T00:00:00", "published": "2009-11-16T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-12637", "id": "SSV:12637", "type": "seebug", "title": "WebKit\u591a\u4e2a\u8fdc\u7a0b\u4ee3\u7801\u6267\u884c\uff0c\u62d2\u7edd\u670d\u52a1\u548c\u4fe1\u606f\u6cc4\u6f0f\u6f0f\u6d1e", "sourceData": "", "sourceHref": "", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2017-11-19T18:13:49", "bulletinFamily": "exploit", "description": "CVE:CVE-2009-3376\r\n\r\n\r\nMozilla Firefox and SeaMonkey are prone to a spoofing vulnerability.\r\n\r\nAttackers can exploit this issue to spoof the filenames displayed in the download dialog box and trick a user into downloading executable files.\r\n\r\nNOTE: This issue was previously covered in BID 36843 (Mozilla Firefox and SeaMonkey MFSA 2009-52 through -64 Multiple Vulnerabilities), but has been assigned its own record to better document it. \n\nVMWare vMA 4.0\r\nVMWare ESX Server 4.0\r\nUbuntu Ubuntu Linux 9.10 sparc\r\nUbuntu Ubuntu Linux 9.10 powerpc\r\nUbuntu Ubuntu Linux 9.10 lpia\r\nUbuntu Ubuntu Linux 9.10 i386\r\nUbuntu Ubuntu Linux 9.10 amd64\r\nUbuntu Ubuntu Linux 9.04 sparc\r\nUbuntu Ubuntu Linux 9.04 powerpc\r\nUbuntu Ubuntu Linux 9.04 lpia\r\nUbuntu Ubuntu Linux 9.04 i386\r\nUbuntu Ubuntu Linux 9.04 amd64\r\nUbuntu Ubuntu Linux 8.10 sparc\r\nUbuntu Ubuntu Linux 8.10 powerpc\r\nUbuntu Ubuntu Linux 8.10 lpia\r\nUbuntu Ubuntu Linux 8.10 i386\r\nUbuntu Ubuntu Linux 8.10 amd64\r\nUbuntu Ubuntu Linux 8.04 LTS sparc\r\nUbuntu Ubuntu Linux 8.04 LTS powerpc\r\nUbuntu Ubuntu Linux 8.04 LTS lpia\r\nUbuntu Ubuntu Linux 8.04 LTS i386\r\nUbuntu Ubuntu Linux 8.04 LTS amd64\r\nSun OpenSolaris build snv_99\r\nSun OpenSolaris build snv_98\r\nSun OpenSolaris build snv_96\r\nSun OpenSolaris build snv_95\r\nSun OpenSolaris build snv_127\r\nSun OpenSolaris build snv_126\r\nSun OpenSolaris build snv_125\r\nSun OpenSolaris build snv_124\r\nSun OpenSolaris build snv_123\r\nSun OpenSolaris build snv_122\r\nSun OpenSolaris build snv_121\r\nSun OpenSolaris build snv_120\r\nSun OpenSolaris build snv_119\r\nSun OpenSolaris build snv_118\r\nSun OpenSolaris build snv_117\r\nSun OpenSolaris build snv_116\r\nSun OpenSolaris build snv_115\r\nSun OpenSolaris build snv_114\r\nSun OpenSolaris build snv_113\r\nSun OpenSolaris build snv_112\r\nSun OpenSolaris build snv_111a\r\nSun OpenSolaris build snv_111\r\nSun OpenSolaris build snv_110\r\nSun OpenSolaris build snv_109\r\nSun OpenSolaris build snv_108\r\nSun OpenSolaris build snv_107\r\nSun OpenSolaris build snv_106\r\nSun OpenSolaris build snv_105\r\nSun OpenSolaris build snv_104\r\nSun OpenSolaris build snv_103\r\nSun OpenSolaris build snv_102\r\nSun OpenSolaris build snv_101a\r\nSun OpenSolaris build snv_101\r\nSun OpenSolaris build snv_100\r\nSlackware Linux 13.0 x86_64\r\nSlackware Linux 13.0\r\nSlackware Linux 12.2\r\nSlackware Linux 12.0\r\nSlackware Linux 11.0\r\nSlackware Linux -current\r\nS.u.S.E. SUSE Linux Enterprise Server 10 SP3\r\nS.u.S.E. SUSE Linux Enterprise Server 10 SP2\r\nS.u.S.E. SUSE Linux Enterprise Desktop 10 SP3\r\nS.u.S.E. SUSE Linux Enterprise Desktop 10 SP2\r\nS.u.S.E. SUSE Linux Enterprise 10 SP3 DEBUGINFO\r\nS.u.S.E. SUSE Linux Enterprise 10 SP2 DEBUGINFO\r\nS.u.S.E. SLES 11 DEBUGINFO\r\nS.u.S.E. SLES 11\r\nS.u.S.E. SLED 11\r\nS.u.S.E. SLE SDK 10 SP3\r\nS.u.S.E. SLE SDK 10 SP2\r\nS.u.S.E. SLE 11\r\nS.u.S.E. openSUSE 11.1\r\nS.u.S.E. openSUSE 11.0\r\nRedHat Fedora 11\r\nRedHat Fedora 10\r\nRedHat Enterprise Linux WS 4\r\nRedHat Enterprise Linux WS 3\r\nRedHat Enterprise Linux Optional Productivity Application 5.4.z server\r\nRedHat Enterprise Linux Optional Productivity Application 5 server\r\nRedHat Enterprise Linux ES 4.8.z\r\nRedHat Enterprise Linux ES 4\r\nRedHat Enterprise Linux ES 3\r\nRedHat Enterprise Linux Desktop Workstation 5 client\r\nRedHat Enterprise Linux Desktop 5 client\r\nRedHat Enterprise Linux AS 4.8.z\r\nRedHat Enterprise Linux AS 4\r\nRedHat Enterprise Linux AS 3\r\nRedHat Enterprise Linux Desktop version 4\r\nRedHat Enterprise Linux 5 server\r\nRedHat Desktop 4.0\r\nRedHat Desktop 3.0\r\nPardus Linux 2009 0\r\nPardus Linux 2008 0\r\nMozilla SeaMonkey 1.1.17\r\nMozilla SeaMonkey 1.1.16\r\nMozilla SeaMonkey 1.1.15\r\nMozilla SeaMonkey 1.1.14\r\nMozilla SeaMonkey 1.1.13\r\nMozilla SeaMonkey 1.1.12\r\nMozilla SeaMonkey 1.1.11\r\nMozilla SeaMonkey 1.1.10\r\nMozilla SeaMonkey 1.1.9\r\nMozilla SeaMonkey 1.1.8\r\nMozilla SeaMonkey 1.1.7\r\nMozilla SeaMonkey 1.1.6\r\nMozilla SeaMonkey 1.1.5\r\nMozilla SeaMonkey 1.1.4\r\nMozilla SeaMonkey 1.1.3\r\nMozilla SeaMonkey 1.1.2\r\nMozilla SeaMonkey 1.1.1\r\nMozilla SeaMonkey 1.0.99\r\nMozilla SeaMonkey 1.0.9\r\nMozilla SeaMonkey 1.0.8\r\nMozilla SeaMonkey 1.0.7\r\nMozilla SeaMonkey 1.0.6\r\nMozilla SeaMonkey 1.0.5\r\nMozilla SeaMonkey 1.0.3\r\nMozilla SeaMonkey 1.0.2\r\nMozilla SeaMonkey 1.0.1\r\nMozilla SeaMonkey 1.1 beta\r\nMozilla SeaMonkey 1.0 dev\r\nMozilla SeaMonkey 1.0\r\nMozilla Firefox 3.5.3\r\nMozilla Firefox 3.5.2\r\nMozilla Firefox 3.5.1\r\nMozilla Firefox 3.5\r\nMozilla Firefox 3.0.14\r\nMozilla Firefox 3.0.13\r\nMozilla Firefox 3.0.12\r\nMozilla Firefox 3.0.11\r\nMozilla Firefox 3.0.10\r\nMozilla Firefox 3.0.9\r\nMozilla Firefox 3.0.8\r\nMozilla Firefox 3.0.7\r\nMozilla Firefox 3.0.6\r\nMozilla Firefox 3.0.5\r\nMozilla Firefox 3.0.4\r\nMozilla Firefox 3.0.3\r\nMozilla Firefox 3.0.2\r\nMozilla Firefox 3.0.1\r\nMozilla Firefox 3.0\r\nMandrakeSoft Linux Mandrake 2010.0 x86_64\r\nMandrakeSoft Linux Mandrake 2010.0\r\nMandrakeSoft Linux Mandrake 2009.1 x86_64\r\nMandrakeSoft Linux Mandrake 2009.1\r\nMandrakeSoft Linux Mandrake 2008.0 x86_64\r\nMandrakeSoft Linux Mandrake 2008.0\r\nMandrakeSoft Enterprise Server 5 x86_64\r\nMandrakeSoft Enterprise Server 5\r\nDebian Linux 5.0 sparc\r\nDebian Linux 5.0 s/390\r\nDebian Linux 5.0 powerpc\r\nDebian Linux 5.0 mipsel\r\nDebian Linux 5.0 mips\r\nDebian Linux 5.0 m68k\r\nDebian Linux 5.0 ia-64\r\nDebian Linux 5.0 ia-32\r\nDebian Linux 5.0 hppa\r\nDebian Linux 5.0 armel\r\nDebian Linux 5.0 arm\r\nDebian Linux 5.0 amd64\r\nDebian Linux 5.0 alpha\r\nDebian Linux 5.0\r\nAvaya Voice Portal 4.1\r\nAvaya Voice Portal 4.0\r\nAvaya Messaging Storage Server 5.0\r\nAvaya Messaging Storage Server 4.0\r\nAvaya Message Networking MN 3.1\r\nAvaya Message Networking 3.1\r\nAvaya Message Networking\r\nAvaya Intuity AUDIX LX 2.0 SP2\r\nAvaya Intuity AUDIX LX 2.0 SP1\r\nAvaya Intuity AUDIX LX 2.0\nUbuntu Ubuntu Linux 8.10 powerpc\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_powerpc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-supp ort_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_powerpc.deb\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_powerpc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0. 24+build1+nobinonly-0ubuntu0.8.10.1_powerpc.deb\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_powerpc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+b uild1+nobinonly-0ubuntu0.8.10.1_powerpc.deb\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n\r\n\r\nSlackware Linux 12.2\r\n\r\n * Slackware mozilla-firefox-3.0.15-i686-1.tgz\r\n ftp://ftp.slackware.com/pub/slackware/slackware-12.2/patches/packages/ mozilla-firefox-3.0.15-i686-1.tgz\r\n\r\n\r\nUbuntu Ubuntu Linux 9.10 powerpc\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_powerpc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0. 24+build1+nobinonly-0ubuntu0.9.10.1_powerpc.deb\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_powerpc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-supp ort_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_powerpc.deb\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_powerpc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+b uild1+nobinonly-0ubuntu0.9.10.1_powerpc.deb\r\n\r\n\r\nDebian Linux 5.0 alpha\r\n\r\n * Debian xulrunner-1.9-dbg_1.9.0.15-0lenny1_alpha.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -dbg_1.9.0.15-0lenny1_alpha.deb\r\n\r\n * Debian libmozjs1d_1.9.0.15-0lenny1_alpha.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1. 9.0.15-0lenny1_alpha.deb\r\n\r\n * Debian xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_alpha.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -gnome-support_1.9.0.15-0lenny1_alpha.deb\r\n\r\n * Debian libmozjs1d-dbg_1.9.0.15-0lenny1_alpha.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-db g_1.9.0.15-0lenny1_alpha.deb\r\n\r\n * Debian libmozjs-dev_1.9.0.15-0lenny1_alpha.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_ 1.9.0.15-0lenny1_alpha.deb\r\n\r\n * Debian spidermonkey-bin_1.9.0.15-0lenny1_alpha.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey- bin_1.9.0.15-0lenny1_alpha.deb\r\n\r\n * Debian xulrunner-dev_1.9.0.15-0lenny1_alpha.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev _1.9.0.15-0lenny1_alpha.deb\r\n\r\n * Debian xulrunner-1.9_1.9.0.15-0lenny1_alpha.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 _1.9.0.15-0lenny1_alpha.deb\r\n\r\n * Debian python-xpcom_1.9.0.15-0lenny1_alpha.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_ 1.9.0.15-0lenny1_alpha.deb\r\n\r\n\r\nMandrakeSoft Linux Mandrake 2008.0\r\n\r\n * Mandriva firefox-ka-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sv_SE-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ro-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ga_IE-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-bg-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-si-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-id-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-et-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-nn_NO-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ar-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva libxulrunner1.9-1.9.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-zh_TW-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva librarian-devel-0.8.0-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva totem-mozilla-2.20.1-1.9mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-cs-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-es_AR-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pt_PT-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva libxulrunner-unstable-devel-1.9.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pt_BR-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-el-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pl-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva yelp-2.22.1-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-af-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-mr-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-lv-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sr-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-mk-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sk-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-is-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ko-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-eo-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva totem-gstreamer-2.20.1-1.9mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-nl-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva totem-mozilla-gstreamer-2.20.1-1.9mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ca-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ja-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-hu-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pa_IN-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ru-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-mn-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-gu_IN-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-eu-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-de-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-bn-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva librarian0-0.8.0-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva xulrunner-1.9.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-lt-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva mozilla-firefox-ext-scribefire-3.2.3-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-oc-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-fr-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-kn-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva totem-common-2.20.1-1.9mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-da-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-be-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ku-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-he-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-te-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva mozilla-firefox-ext-foxmarks-2.7.2-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-cy-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-fi-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-th-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva libtotem-plparser7-2.20.1-1.9mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva totem-2.20.1-1.9mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-nb_NO-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva mozilla-firefox-ext-blogrovr-1.1.798-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-gl-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sq-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sl-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva libxulrunner-devel-1.9.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva libtotem-plparser-devel-2.20.1-1.9mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-hi-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-fy-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-it-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-tr-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-zh_CN-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-es_ES-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva rarian-0.8.0-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-en_GB-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-uk-3.0.15-0.1mdv2008.0.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n\r\nUbuntu Ubuntu Linux 9.10 lpia\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_lpia.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0. 24+build1+nobinonly-0ubuntu0.9.10.1_lpia.deb\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_lpia.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-supp ort_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_lpia.deb\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_lpia.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+b uild1+nobinonly-0ubuntu0.9.10.1_lpia.deb\r\n\r\n\r\nUbuntu Ubuntu Linux 9.04 sparc\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_sparc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-supp ort_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_sparc.deb\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_sparc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+b uild1+nobinonly-0ubuntu0.9.04.1_sparc.deb\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_sparc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0. 24+build1+nobinonly-0ubuntu0.9.04.1_sparc.deb\r\n\r\n\r\nUbuntu Ubuntu Linux 9.04 lpia\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_lpia.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-supp ort_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_lpia.deb\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_lpia.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0. 24+build1+nobinonly-0ubuntu0.9.04.1_lpia.deb\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_lpia.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+b uild1+nobinonly-0ubuntu0.9.04.1_lpia.deb\r\n\r\n\r\nUbuntu Ubuntu Linux 8.10 sparc\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_sparc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+b uild1+nobinonly-0ubuntu0.8.10.1_sparc.deb\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_sparc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0. 24+build1+nobinonly-0ubuntu0.8.10.1_sparc.deb\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_sparc.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-supp ort_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_sparc.deb\r\n\r\n\r\nDebian Linux 5.0 armel\r\n\r\n * Debian xulrunner-1.9-dbg_1.9.0.15-0lenny1_armel.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -dbg_1.9.0.15-0lenny1_armel.deb\r\n\r\n * Debian spidermonkey-bin_1.9.0.15-0lenny1_armel.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey- bin_1.9.0.15-0lenny1_armel.deb\r\n\r\n * Debian xulrunner-dev_1.9.0.15-0lenny1_armel.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev _1.9.0.15-0lenny1_armel.deb\r\n\r\n * Debian libmozjs1d-dbg_1.9.0.15-0lenny1_armel.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-db g_1.9.0.15-0lenny1_armel.deb\r\n\r\n * Debian xulrunner-1.9_1.9.0.15-0lenny1_armel.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 _1.9.0.15-0lenny1_armel.deb\r\n\r\n * Debian libmozjs-dev_1.9.0.15-0lenny1_armel.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_ 1.9.0.15-0lenny1_armel.deb\r\n\r\n * Debian libmozjs1d_1.9.0.15-0lenny1_armel.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1. 9.0.15-0lenny1_armel.deb\r\n\r\n * Debian xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_armel.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -gnome-support_1.9.0.15-0lenny1_armel.deb\r\n\r\n * Debian python-xpcom_1.9.0.15-0lenny1_armel.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_ 1.9.0.15-0lenny1_armel.deb\r\n\r\n\r\nS.u.S.E. openSUSE 11.0\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debuginfo-1.9.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/x86_64/mozilla-xulr unner190-debuginfo-1.9.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debuginfo-1.9.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/ppc/mozilla-xulrunn er190-debuginfo-1.9.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-translations-1.9.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/update/11.0/rpm/i586/mozilla-xulrunner190 -translations-1.9.0.15-0.1.i586.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debugsource-3.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/i586/MozillaFirefox -debugsource-3.0.15-0.1.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debuginfo-1.9.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/i586/mozilla-xulrun ner190-debuginfo-1.9.0.15-0.1.i586.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-3.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/update/11.0/rpm/x86_64/MozillaFirefox-3.0 .15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debugsource-1.9.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/x86_64/mozilla-xulr unner190-debugsource-1.9.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-devel-1.9.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- devel-1.9.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-gnomevfs-64bit-1.9.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- gnomevfs-64bit-1.9.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-devel-1.9.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/update/11.0/rpm/i586/mozilla-xulrunner190 -devel-1.9.0.15-0.1.i586.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debuginfo-3.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/ppc/MozillaFirefox- debuginfo-3.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-translations-3.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/update/11.0/rpm/i586/MozillaFirefox-trans lations-3.0.15-0.1.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-translations-32bit-1.9.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-translations-32bit-1.9.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-1.9.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-1.9.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-translations-1.9.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-translations-1.9.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-32bit-1.9.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-32bit-1.9.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-translations-3.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/update/11.0/rpm/x86_64/MozillaFirefox-tra nslations-3.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/update/11.0/rpm/i586/mozilla-xulrunner190 -gnomevfs-1.9.0.15-0.1.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-devel-1.9.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-devel-1.9.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debugsource-1.9.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/i586/mozilla-xulrun ner190-debugsource-1.9.0.15-0.1.i586.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debuginfo-3.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/i586/MozillaFirefox -debuginfo-3.0.15-0.1.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-64bit-1.9.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- 64bit-1.9.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-3.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/update/11.0/rpm/i586/MozillaFirefox-3.0.1 5-0.1.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-translations-1.9.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- translations-1.9.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debugsource-3.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/ppc/MozillaFirefox- debugsource-3.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-translations-64bit-1.9.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- translations-64bit-1.9.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-gnomevfs-32bit-1.9.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-gnomevfs-32bit-1.9.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-translations-3.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/update/11.0/rpm/ppc/MozillaFirefox-transl ations-3.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.15-0.1.x86_64.rpm\r\n http://download.opensuse.org/update/11.0/rpm/x86_64/mozilla-xulrunner1 90-gnomevfs-1.9.0.15-0.1.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debugsource-1.9.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/debug/update/11.0/rpm/ppc/mozilla-xulrunn er190-debugsource-1.9.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-1.9.0.15-0.1.i586.rpm\r\n http://download.opensuse.org/update/11.0/rpm/i586/mozilla-xulrunner190 -1.9.0.15-0.1.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- gnomevfs-1.9.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-1.9.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/update/11.0/rpm/ppc/mozilla-xulrunner190- 1.9.0.15-0.1.ppc.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-3.0.15-0.1.ppc.rpm\r\n http://download.opensuse.org/update/11.0/rpm/ppc/MozillaFirefox-3.0.15 -0.1.ppc.rpm\r\n\r\n\r\nUbuntu Ubuntu Linux 9.10 amd64\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_amd64.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird- gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_amd64.deb\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_all.deb\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_amd64.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_ 2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_amd64.deb\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_amd64.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird- dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.10.1_amd64.deb\r\n\r\n\r\nUbuntu Ubuntu Linux 9.04 amd64\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_amd64.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird- dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_amd64.deb\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_amd64.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_ 2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_amd64.deb\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_all.deb\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_amd64.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird- gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.9.04.1_amd64.deb\r\n\r\n\r\nDebian Linux 5.0 sparc\r\n\r\n * Debian xulrunner-dev_1.9.0.15-0lenny1_sparc.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev _1.9.0.15-0lenny1_sparc.deb\r\n\r\n * Debian xulrunner-1.9_1.9.0.15-0lenny1_sparc.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 _1.9.0.15-0lenny1_sparc.deb\r\n\r\n * Debian spidermonkey-bin_1.9.0.15-0lenny1_sparc.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey- bin_1.9.0.15-0lenny1_sparc.deb\r\n\r\n * Debian xulrunner-1.9-dbg_1.9.0.15-0lenny1_sparc.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -dbg_1.9.0.15-0lenny1_sparc.deb\r\n\r\n * Debian python-xpcom_1.9.0.15-0lenny1_sparc.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_ 1.9.0.15-0lenny1_sparc.deb\r\n\r\n * Debian libmozjs1d-dbg_1.9.0.15-0lenny1_sparc.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-db g_1.9.0.15-0lenny1_sparc.deb\r\n\r\n * Debian libmozjs-dev_1.9.0.15-0lenny1_sparc.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_ 1.9.0.15-0lenny1_sparc.deb\r\n\r\n * Debian xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_sparc.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -gnome-support_1.9.0.15-0lenny1_sparc.deb\r\n\r\n * Debian libmozjs1d_1.9.0.15-0lenny1_sparc.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1. 9.0.15-0lenny1_sparc.deb\r\n\r\n\r\nMandrakeSoft Linux Mandrake 2009.1 x86_64\r\n\r\n * Mandriva google-gadgets-common-0.10.5-8.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-el-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-fr-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-eo-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-th-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva beagle-doc-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ar-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ga_IE-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ka-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-nn_NO-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sr-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-gu_IN-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-fy-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ku-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva lib64opensc2-0.11.7-1.7mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-it-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ro-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-te-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-extras-2.25.3-3.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sl-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-en_GB-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-af-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva google-gadgets-qt-0.10.5-8.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-mn-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-nl-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gtkmozembed-2.25.3-3.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-zh_TW-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-tr-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva python-xpcom-1.9.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ru-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva mozilla-plugin-opensc-0.11.7-1.7mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-es_ES-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva lib64google-gadgets-devel-0.10.5-8.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva lib64ggadget-gtk1.0_0-0.10.5-8.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-mr-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ext-beagle-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gda-2.25.3-3.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-he-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva beagle-crawl-system-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva epiphany-2.26.1-1.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva xulrunner-1.9.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ja-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ext-r-kiosk-0.7.2-2.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gdl-2.25.3-3.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-cs-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-cy-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-fi-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva beagle-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pt_BR-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva lib64opensc-devel-0.11.7-1.7mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-bg-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pt_PT-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva mozilla-thunderbird-beagle-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva lib64xulrunner-unstable-devel-1.9.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva google-gadgets-xul-0.10.5-8.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva lib64ggadget-qt1.0_0-0.10.5-8.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gda-devel-2.25.3-3.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva epiphany-devel-2.26.1-1.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pl-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-lv-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva lib64xulrunner1.9-1.9.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-lt-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ca-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva lib64ggadget1.0_0-0.10.5-8.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva lib64xulrunner-devel-1.9.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sk-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva beagle-gui-qt-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ext-scribefire-3.2.3-2.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-et-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-oc-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-hi-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-be-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gtkhtml2-2.25.3-3.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva beagle-evolution-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-nb_NO-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gtkspell-2.25.3-3.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-is-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva beagle-gui-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-id-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-eu-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-de-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-gl-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-mk-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sq-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva opensc-0.11.7-1.7mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-uk-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ext-blogrovr-1.1.798-2.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-es_AR-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ext-foxmarks-2.7.2-2.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ko-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva google-gadgets-gtk-0.10.5-8.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-zh_CN-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sv_SE-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ext-mozvoikko-0.9.6-2.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-hu-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-da-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva yelp-2.26.0-3.5mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pa_IN-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-kn-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-theme-kde4ff-0.14-9.6mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva beagle-libs-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-si-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-bn-3.0.15-0.1mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva beagle-epiphany-0.3.9-9.8mdv2009.1.x86_64.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n\r\nUbuntu Ubuntu Linux 8.10 i386\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_i386.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird- dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_i386.deb\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_i386.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird- gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_i386.deb\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_i386.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/thunderbird_ 2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_i386.deb\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.10.1_all.deb\r\n\r\n\r\nS.u.S.E. openSUSE 11.1\r\n\r\n * S.u.S.E. mozilla-xulrunner190-1.9.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/update/11.1/rpm/i586/mozilla-xulrunner190 -1.9.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debuginfo-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/x86_64/mozilla-xulr unner190-debuginfo-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-branding-upstream-3.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/MozillaFirefox-bra nding-upstream-3.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-3.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/update/11.1/rpm/i586/MozillaFirefox-3.0.1 5-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-translations-3.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/update/11.1/rpm/i586/MozillaFirefox-trans lations-3.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-gnomevfs-32bit-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-gnomevfs-32bit-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. python-xpcom190-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/python-xpcom190-1. 9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debugsource-1.9.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/ppc/mozilla-xulrunn er190-debugsource-1.9.0.15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debugsource-3.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/ppc/MozillaFirefox- debugsource-3.0.15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-branding-upstream-3.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/update/11.1/rpm/ppc/MozillaFirefox-brandi ng-upstream-3.0.15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-translations-1.9.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/update/11.1/rpm/i586/mozilla-xulrunner190 -translations-1.9.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-translations-32bit-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-translations-32bit-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debuginfo-3.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/x86_64/MozillaFiref ox-debuginfo-3.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debuginfo-3.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/i586/MozillaFirefox -debuginfo-3.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-3.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/update/11.1/rpm/ppc/MozillaFirefox-3.0.15 -0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debugsource-3.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/i586/MozillaFirefox -debugsource-3.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debugsource-1.9.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/i586/mozilla-xulrun ner190-debugsource-1.9.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-1.9.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/update/11.1/rpm/ppc/mozilla-xulrunner190- 1.9.0.15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. python-xpcom190-1.9.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/update/11.1/rpm/ppc/python-xpcom190-1.9.0 .15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-devel-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-devel-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debuginfo-3.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/ppc/MozillaFirefox- debuginfo-3.0.15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-32bit-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-32bit-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-translations-3.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/update/11.1/rpm/ppc/MozillaFirefox-transl ations-3.0.15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/update/11.1/rpm/i586/mozilla-xulrunner190 -gnomevfs-1.9.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-debugsource-3.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/x86_64/MozillaFiref ox-debugsource-3.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debuginfo-1.9.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/i586/mozilla-xulrun ner190-debuginfo-1.9.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-3.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/MozillaFirefox-3.0 .15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debuginfo-32bit-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/x86_64/mozilla-xulr unner190-debuginfo-32bit-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-devel-1.9.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/update/11.1/rpm/ppc/mozilla-xulrunner190- devel-1.9.0.15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-gnomevfs-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-translations-1.9.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/update/11.1/rpm/ppc/mozilla-xulrunner190- translations-1.9.0.15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. python-xpcom190-1.9.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/update/11.1/rpm/i586/python-xpcom190-1.9. 0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-devel-1.9.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/update/11.1/rpm/i586/mozilla-xulrunner190 -devel-1.9.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-translations-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/mozilla-xulrunner1 90-translations-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debugsource-1.9.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/x86_64/mozilla-xulr unner190-debugsource-1.9.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-debuginfo-1.9.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/debug/update/11.1/rpm/ppc/mozilla-xulrunn er190-debuginfo-1.9.0.15-0.1.2.ppc.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-translations-3.0.15-0.1.2.x86_64.rpm\r\n http://download.opensuse.org/update/11.1/rpm/x86_64/MozillaFirefox-tra nslations-3.0.15-0.1.2.x86_64.rpm\r\n\r\n * S.u.S.E. MozillaFirefox-branding-upstream-3.0.15-0.1.2.i586.rpm\r\n http://download.opensuse.org/update/11.1/rpm/i586/MozillaFirefox-brand ing-upstream-3.0.15-0.1.2.i586.rpm\r\n\r\n * S.u.S.E. mozilla-xulrunner190-gnomevfs-1.9.0.15-0.1.2.ppc.rpm\r\n http://download.opensuse.org/update/11.1/rpm/ppc/mozilla-xulrunner190- gnomevfs-1.9.0.15-0.1.2.ppc.rpm\r\n\r\n\r\nMandrakeSoft Enterprise Server 5\r\n\r\n * Mandriva firefox-pt_BR-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-gl-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-fy-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-mn-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-bg-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sr-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-af-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-gu_IN-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ku-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gda-2.19.1-20.11mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-uk-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-id-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-lt-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-is-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-hi-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ko-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva libxulrunner-devel-1.9.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pa_IN-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pl-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-nb_NO-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-zh_CN-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sl-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ar-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-en_GB-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-et-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ru-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-fr-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-si-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gtkmozembed-2.19.1-20.11mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-th-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-it-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-kn-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ro-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva libxulrunner-unstable-devel-1.9.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-el-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-be-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-zh_TW-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-es_AR-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-extras-2.19.1-20.11mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-lv-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sk-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-bn-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ka-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gdl-2.19.1-20.11mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-he-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-cs-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-te-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-mr-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ca-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gda-devel-2.19.1-20.11mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sv_SE-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva libxulrunner1.9-1.9.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-pt_PT-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-oc-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-tr-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-de-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-eu-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva xulrunner-1.9.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-es_ES-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-sq-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gtkhtml2-2.19.1-20.11mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-mk-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-cy-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-fi-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-nl-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-da-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ja-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva yelp-2.24.0-3.11mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-eo-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-ga_IE-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva gnome-python-gtkspell-2.19.1-20.11mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-hu-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n * Mandriva firefox-nn_NO-3.0.15-0.1mdvmes5.i586.rpm\r\n http://www.mandriva.com/en/download/\r\n\r\n\r\nDebian Linux 5.0 s/390\r\n\r\n * Debian libmozjs1d-dbg_1.9.0.15-0lenny1_s390.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-db g_1.9.0.15-0lenny1_s390.deb\r\n\r\n * Debian python-xpcom_1.9.0.15-0lenny1_s390.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_ 1.9.0.15-0lenny1_s390.deb\r\n\r\n * Debian xulrunner-1.9-dbg_1.9.0.15-0lenny1_s390.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -dbg_1.9.0.15-0lenny1_s390.deb\r\n\r\n * Debian libmozjs1d_1.9.0.15-0lenny1_s390.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1. 9.0.15-0lenny1_s390.deb\r\n\r\n * Debian xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_s390.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -gnome-support_1.9.0.15-0lenny1_s390.deb\r\n\r\n * Debian libmozjs-dev_1.9.0.15-0lenny1_s390.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_ 1.9.0.15-0lenny1_s390.deb\r\n\r\n * Debian spidermonkey-bin_1.9.0.15-0lenny1_s390.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey- bin_1.9.0.15-0lenny1_s390.deb\r\n\r\n * Debian xulrunner-1.9_1.9.0.15-0lenny1_s390.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 _1.9.0.15-0lenny1_s390.deb\r\n\r\n * Debian xulrunner-dev_1.9.0.15-0lenny1_s390.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev _1.9.0.15-0lenny1_s390.deb\r\n\r\n\r\nUbuntu Ubuntu Linux 8.04 LTS lpia\r\n\r\n * Ubuntu mozilla-thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1_all.deb\r\n\r\n * Ubuntu thunderbird-gnome-support_2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1_lpia.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-gnome-supp ort_2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1_lpia.deb\r\n\r\n * Ubuntu thunderbird_2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1_lpia.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird_2.0.0.24+b uild1+nobinonly-0ubuntu0.8.04.1_lpia.deb\r\n\r\n * Ubuntu thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1_lpia.deb\r\n http://ports.ubuntu.com/pool/main/t/thunderbird/thunderbird-dev_2.0.0. 24+build1+nobinonly-0ubuntu0.8.04.1_lpia.deb\r\n\r\n * Ubuntu mozilla-thunderbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1_all.deb\r\n http://security.ubuntu.com/ubuntu/pool/main/t/thunderbird/mozilla-thun derbird-dev_2.0.0.24+build1+nobinonly-0ubuntu0.8.04.1_all.deb\r\n\r\n\r\nSlackware Linux 13.0 x86_64\r\n\r\n * Slackware mozilla-firefox-3.5.4-x86_64-1_slack13.0.txz\r\n ftp://ftp.slackware.com/pub/slackware/slackware64-13.0/patches/package s/mozilla-firefox-3.5.4-x86_64-1_slack13.0.txz\r\n\r\n\r\nDebian Linux 5.0 hppa\r\n\r\n * Debian libmozjs1d-dbg_1.9.0.15-0lenny1_hppa.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-db g_1.9.0.15-0lenny1_hppa.deb\r\n\r\n * Debian libmozjs-dev_1.9.0.15-0lenny1_hppa.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_ 1.9.0.15-0lenny1_hppa.deb\r\n\r\n * Debian xulrunner-1.9-dbg_1.9.0.15-0lenny1_hppa.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -dbg_1.9.0.15-0lenny1_hppa.deb\r\n\r\n * Debian xulrunner-dev_1.9.0.15-0lenny1_hppa.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev _1.9.0.15-0lenny1_hppa.deb\r\n\r\n * Debian xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_hppa.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 -gnome-support_1.9.0.15-0lenny1_hppa.deb\r\n\r\n * Debian libmozjs1d_1.9.0.15-0lenny1_hppa.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1. 9.0.15-0lenny1_hppa.deb\r\n\r\n * Debian python-xpcom_1.9.0.15-0lenny1_hppa.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_ 1.9.0.15-0lenny1_hppa.deb\r\n\r\n * Debian xulrunner-1.9_1.9.0.15-0lenny1_hppa.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9 _1.9.0.15-0lenny1_hppa.deb\r\n\r\n * Debian spidermonkey-bin_1.9.0.15-0lenny1_hppa.deb\r\n http://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey- bin_1.9.0.15-0lenny1_hppa.deb", "modified": "2010-03-19T00:00:00", "published": "2010-03-19T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-19294", "id": "SSV:19294", "title": "Mozilla Firefox and SeaMonkey Download Filename Spoofing Vulnerability", "type": "seebug", "sourceData": "", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "sourceHref": ""}, {"lastseen": "2017-11-19T18:32:47", "bulletinFamily": "exploit", "description": "BUGTRAQ ID: 36852\r\nCVE(CAN) ID: CVE-2009-3274\r\n\r\nFirefox\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u5f00\u6e90WEB\u6d4f\u89c8\u5668\u3002\r\n\r\nLinux\u5e73\u53f0\u4e0a\u7684Firefox\u5bf9\u4ece\u201c\u4e0b\u8f7d\u201d\u7a97\u53e3\u6240\u9009\u62e9\u7684\u6587\u4ef6\u4f7f\u7528\u4e86\u53ef\u9884\u6d4b\u7684/tmp\u8def\u5f84\u540d\u3002\u5982\u679c\u653b\u51fb\u8005\u62e5\u6709\u5bf9\u673a\u5668\u7684\u672c\u5730\u8bbf\u95ee\u5e76\u77e5\u9053\u4e86\u7528\u6237\u901a\u8fc7\u4e0b\u8f7d\u7ba1\u7406\u5668\u6240\u8981\u6253\u5f00\u6587\u4ef6\u7684\u540d\u79f0\uff0c\u5c31\u53ef\u4ee5\u5728\u7528\u4e8e\u4fdd\u5b58\u4e34\u65f6\u4e0b\u8f7d\u6587\u4ef6\u7684\u5b8c\u5168\u53ef\u5199\u76ee\u5f55\u4e2d\u653e\u7f6e\u6076\u610f\u6587\u4ef6\uff0c\u5728\u6253\u5f00\u8be5\u6587\u4ef6\u65f6\u6d4f\u89c8\u5668\u5c31\u4f1a\u9009\u62e9\u9519\u8bef\u7684\u6587\u4ef6\u3002\n\nMozilla Firefox 3.5.x\r\nMozilla Firefox 3.0.x\n\u5382\u5546\u8865\u4e01\uff1a\r\n\r\nDebian\r\n------\r\nDebian\u5df2\u7ecf\u4e3a\u6b64\u53d1\u5e03\u4e86\u4e00\u4e2a\u5b89\u5168\u516c\u544a\uff08DSA-1922-1\uff09\u4ee5\u53ca\u76f8\u5e94\u8865\u4e01:\r\nDSA-1922-1\uff1aNew xulrunner packages fix several vulnerabilities\r\n\u94fe\u63a5\uff1ahttp://www.debian.org/security/2009/dsa-1922\r\n\r\n\u8865\u4e01\u4e0b\u8f7d\uff1a\r\n\r\nSource archives:\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15-0lenny1.diff.gz\r\nSize/MD5 checksum: 116164 3d995b59ffe890d36117f3103f38b9b1\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15-0lenny1.dsc\r\nSize/MD5 checksum: 1779 7e8392a8b59ef9064df564ee03c23b14\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15.orig.tar.gz\r\nSize/MD5 checksum: 44085950 49aa2aee64997f9e802cf386d038d2d7\r\n\r\nArchitecture independent packages:\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozillainterfaces-java_1.9.0.15-0lenny1_all.deb\r\nSize/MD5 checksum: 1464278 ea66718b41a4c282284d37672d0e7078\r\n\r\nalpha architecture (DEC Alpha)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 9494314 8cd7366b90d39c5c64064d1fb17c1022\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 938304 bf39af51a378ed039c545730664857aa\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 221588 1dd219c2812ca8d23fff415c9555d3db\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 432182 5d32bfa9665c32fb1738f416f739b3ae\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 3651374 14dd5f555695db43b94ceab3260c680d\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 51089582 fa7f8faad8460d1049e9fb8f6fd1f7bb\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 163912 d488634f9d36f6d0afcc7b27ee6699a0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 112022 9666fd74cd00bc0643993acc22d40c91\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 71980 602c6780c2328141871f5d94b8a163f4\r\n\r\namd64 architecture (AMD x86_64 (AMD64))\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 69898 c0295f0b7e6957f236d769dc8bdfd2ca\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 890260 2d4cb08b3e886e06be04ec7e43a82b0f\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 151952 3e20640a2f4eb68a58731bba532aedb0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 50327552 5779e5efb1f7b6612bf8a774a8e8cd6a\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 374218 86b4b4a30f5f30f4492fe11eca93dace\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 3287960 741031dbbba1f6c6e8fe045d71547905\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 222992 3e801bb57c442128512e599af5c9547e\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 7722556 cc9b8e7ac989143255cb6ad53ce84884\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 101512 396f03e0770dd73cf5820354a8b94a0f\r\n\r\narmel architecture (ARM EABI)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 223358 a881797fcf62521c0ab538e72b33bb70\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 84272 1602bc59310724ee0f20d8f5a0ac0a8c\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 821892 79baa048d939ac77273ac50237c7bfe3\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 69726 cd5970b1776e5777686ce9208c074e79\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 6954730 a8a092eab78826ef9ed0e98e8d7251bb\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 141248 47668db41fd86750793bae3f59ff623e\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 352870 99357abd251ccfe354b28ed441256eb4\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 50116888 a19877e49d8d1037458d2531873181e0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 3579420 9091ebebb2d0b23a8f10300ff7340c16\r\n\r\nhppa architecture (HP PA RISC)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 105902 14573c4144b48dfcdeadca11dbf28fd1\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 412252 703d501036427f18e6ffc3841c0434e7\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 158830 9c6c95e2c55a59adaa4314022adaba97\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 9512434 b479cbca6e9244681e8acf58afba706e\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 51210900 7b5ae111a77a354adadb9a019892970b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 3621952 4a3cef66aa1b240f42c4c4c4de41ca64\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 222858 1f6d47dc993cbc9a068517a06492beb9\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 898430 c63b30f2604b2a08d9fed108253b6b5b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 71384 50c3026bc0d90b912e74c0892ac3cd8c\r\n\r\ni386 architecture (Intel ia32)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 851844 28f3d2c286d83a90df609b21699baf97\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 79142 61aff31316b603d03921eb89b5df073b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 3565362 fd8674b08b704e5f0f9ef790da65b7f8\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 141410 0182fcff2acf3987fa15128659fe7b38\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 6602586 03aed73b528a0e36cef99361ae9da656\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 49492306 82d2789b64cedcbf2406a09131032764\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 223182 1872e9d86b45cb1b29f20c4d75467200\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 350814 4e647513b860210f0c1bc1caef893e9f\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 68094 f9e97cd83f976afa8959ea9f774f1994\r\n\r\nia64 architecture (Intel ia64)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 223134 2ae79c69711959cb6cd75026882abd60\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 542104 a8b314bf8ad3c48e1ab4ed231b83a450\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 121518 18ec63c6f78623b2c744d9362d4b2be6\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 76492 22f1645790b9540cc1a3b795573b3e46\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 49667940 d01b4ee9da9f802eb24749992dd14be2\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 180184 b26234c2f0d54a61e771ee478828c628\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 11301676 95599d73eb33ae7e9613d92304b8d813\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 811176 33ceb8965e9db8d79020777ab55e1838\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 3397550 7eff41c031481161dfab1bc83cfa8450\r\n\r\nmipsel architecture (MIPS (Little Endian))\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 49965510 8997b286648f39786e86826b5045e69d\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 223146 2bdf56823a2075c6bbd4fe3fc2e0646c\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 7375092 29d842979cbc5ee6ad659cf13927788b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 96764 5fa81a5541ae261f0a72b91bb5bf6626\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 144986 d3da343322c085f952511248e3a69345\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 900210 b87e5f91341b390cb2f1603a1071aff7\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 3308536 7c5f7065d8961c7fc0ca7fb974e6611c\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 69836 ace8648bf416d4804db9644c487dcdf1\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 378586 18fd2ced744197472973e2cae61d4d64\r\n\r\npowerpc architecture (PowerPC)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 362482 a0bf9d0ba7a4695378f7ea053cd9cc46\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 3283604 b98767e9b18704a2482c731309eef892\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 51378802 bed95771a8d00f88bedc12d480ed91f0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 94786 fb7b21596585931a6edda7e2bebae561\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 152276 d83cf113d2600c6ca9e691dfd25a1466\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 7275222 008f00164ecbc43c681f1743ba33c0e8\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 72990 2982ec8818b1ae7b47241dcdb046c8e0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 887776 9853592dc50b738bd7b223fc78c030c3\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 223140 96d915d392dbb2cdc3a09268d97a206f\r\n\r\ns390 architecture (IBM S/390)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 3306276 95d049eaa0c2b95b8f98f2295d984454\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 406680 9efe79857bd5fc05bf567f4840109135\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 223124 ee4ed0dc817d276cbe22bcb5ef6314af\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 51172466 33aeec198869e5b92132775938f1dba6\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 8387566 5cf074573a634121d0981d927bdf8dc5\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 105540 ad95c071cf5d0f16301e004800626ab6\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 156084 69c04262268e1b13ffac80f8827e5776\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 909030 9d9a82bbaa3501f41dd810c3bf3e7b0b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 72868 738b9ff7dafce724b01f032e568d145d\r\n\r\nsparc architecture (Sun SPARC/UltraSPARC)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 143228 8017cc9ebd542b69b5a33328e4db72fd\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 69342 2a626affc178cb0bed8bd8dc0302308b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 821126 3107a47d82efbaf745b0a7355df82271\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 223230 41277488a9fbf77e3864848e36ad1040\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 7174794 ff98cd42b01c1b6da7f443a8513ec516\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 350084 53b49c566cc58af0976b24382a144a16\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 88202 d8ed5ea8a627c996c8890521551e14b3\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 49353618 3919a69140cbf1cc726b9142a7f33f23\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 3577270 0709623512ba6d57f6a475f8382b20a2\r\n\r\n\u8865\u4e01\u5b89\u88c5\u65b9\u6cd5\uff1a\r\n\r\n1. \u624b\u5de5\u5b89\u88c5\u8865\u4e01\u5305\uff1a\r\n\r\n \u9996\u5148\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u6765\u4e0b\u8f7d\u8865\u4e01\u8f6f\u4ef6\uff1a\r\n # wget url (url\u662f\u8865\u4e01\u4e0b\u8f7d\u94fe\u63a5\u5730\u5740)\r\n\r\n \u7136\u540e\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u6765\u5b89\u88c5\u8865\u4e01\uff1a \r\n # dpkg -i file.deb (file\u662f\u76f8\u5e94\u7684\u8865\u4e01\u540d)\r\n\r\n2. \u4f7f\u7528apt-get\u81ea\u52a8\u5b89\u88c5\u8865\u4e01\u5305\uff1a\r\n\r\n \u9996\u5148\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u66f4\u65b0\u5185\u90e8\u6570\u636e\u5e93\uff1a\r\n # apt-get update\r\n \r\n \u7136\u540e\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u5b89\u88c5\u66f4\u65b0\u8f6f\u4ef6\u5305\uff1a\r\n # apt-get upgrade\r\n\r\nMozilla\r\n-------\r\n\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\n\r\nhttp://www.mozilla.org/\r\n\r\nRedHat\r\n------\r\nRedHat\u5df2\u7ecf\u4e3a\u6b64\u53d1\u5e03\u4e86\u4e00\u4e2a\u5b89\u5168\u516c\u544a\uff08RHSA-2009:1530-01\uff09\u4ee5\u53ca\u76f8\u5e94\u8865\u4e01:\r\nRHSA-2009:1530-01\uff1aCritical: firefox security update\r\n\u94fe\u63a5\uff1ahttps://www.redhat.com/support/errata/RHSA-2009-1530.html", "modified": "2009-11-03T00:00:00", "published": "2009-11-03T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-12561", "id": "SSV:12561", "title": "Firefox\u4e0b\u8f7d\u7ba1\u7406\u5668\u5b8c\u5168\u53ef\u5199\u6587\u4ef6\u672c\u5730\u6743\u9650\u63d0\u5347\u6f0f\u6d1e", "type": "seebug", "sourceData": "\n https://bugzilla.mozilla.org/attachment.cgi?id=398828\n ", "cvss": {"score": 4.4, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-12561"}, {"lastseen": "2017-11-19T18:32:50", "bulletinFamily": "exploit", "description": "BUGTRAQ ID: 36867\r\nCVE ID: CVE-2009-3376\r\n\r\nFirefox\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u5f00\u6e90WEB\u6d4f\u89c8\u5668\u3002\r\n\r\n\u5728\u4e0b\u8f7d\u6587\u4ef6\u540d\u4e2d\u5305\u542b\u6709\u4ece\u53f3\u5230\u5de6\uff08RTL\uff09\u8986\u76d6\u5b57\u7b26\u7684\u6587\u4ef6\u65f6\u5bf9\u8bdd\u6846\u6807\u9898\u680f\u4e2d\u6240\u663e\u793a\u7684\u540d\u79f0\u53ef\u80fd\u4e0e\u5bf9\u8bdd\u4f53\u6240\u663e\u793a\u7684\u540d\u79f0\u4e0d\u4e00\u81f4\u3002\u653b\u51fb\u8005\u53ef\u4ee5\u5229\u7528\u8fd9\u4e2a\u6f0f\u6d1e\u8ff7\u60d1\u5c06\u8981\u4e0b\u8f7d\u548c\u6253\u5f00\u7684\u6587\u4ef6\u540d\u548c\u6269\u5c55\u540d\uff0c\u8bf1\u9a97\u7528\u6237\u6253\u5f00\u975e\u9884\u671f\u7684\u6076\u610f\u6587\u4ef6\u3002\n\nMozilla Firefox 3.5.x\r\nMozilla Firefox 3.0.x\r\nMozilla SeaMonkey 1.1.x\n\u5382\u5546\u8865\u4e01\uff1a\r\n\r\nDebian\r\n------\r\nDebian\u5df2\u7ecf\u4e3a\u6b64\u53d1\u5e03\u4e86\u4e00\u4e2a\u5b89\u5168\u516c\u544a\uff08DSA-1922-1\uff09\u4ee5\u53ca\u76f8\u5e94\u8865\u4e01:\r\nDSA-1922-1\uff1aNew xulrunner packages fix several vulnerabilities\r\n\u94fe\u63a5\uff1ahttp://www.debian.org/security/2009/dsa-1922\r\n\r\n\u8865\u4e01\u4e0b\u8f7d\uff1a\r\n\r\nSource archives:\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15-0lenny1.diff.gz\r\nSize/MD5 checksum: 116164 3d995b59ffe890d36117f3103f38b9b1\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15-0lenny1.dsc\r\nSize/MD5 checksum: 1779 7e8392a8b59ef9064df564ee03c23b14\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15.orig.tar.gz\r\nSize/MD5 checksum: 44085950 49aa2aee64997f9e802cf386d038d2d7\r\n\r\nArchitecture independent packages:\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozillainterfaces-java_1.9.0.15-0lenny1_all.deb\r\nSize/MD5 checksum: 1464278 ea66718b41a4c282284d37672d0e7078\r\n\r\nalpha architecture (DEC Alpha)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 9494314 8cd7366b90d39c5c64064d1fb17c1022\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 938304 bf39af51a378ed039c545730664857aa\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 221588 1dd219c2812ca8d23fff415c9555d3db\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 432182 5d32bfa9665c32fb1738f416f739b3ae\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 3651374 14dd5f555695db43b94ceab3260c680d\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 51089582 fa7f8faad8460d1049e9fb8f6fd1f7bb\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 163912 d488634f9d36f6d0afcc7b27ee6699a0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 112022 9666fd74cd00bc0643993acc22d40c91\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 71980 602c6780c2328141871f5d94b8a163f4\r\n\r\namd64 architecture (AMD x86_64 (AMD64))\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 69898 c0295f0b7e6957f236d769dc8bdfd2ca\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 890260 2d4cb08b3e886e06be04ec7e43a82b0f\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 151952 3e20640a2f4eb68a58731bba532aedb0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 50327552 5779e5efb1f7b6612bf8a774a8e8cd6a\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 374218 86b4b4a30f5f30f4492fe11eca93dace\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 3287960 741031dbbba1f6c6e8fe045d71547905\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 222992 3e801bb57c442128512e599af5c9547e\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 7722556 cc9b8e7ac989143255cb6ad53ce84884\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 101512 396f03e0770dd73cf5820354a8b94a0f\r\n\r\narmel architecture (ARM EABI)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 223358 a881797fcf62521c0ab538e72b33bb70\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 84272 1602bc59310724ee0f20d8f5a0ac0a8c\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 821892 79baa048d939ac77273ac50237c7bfe3\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 69726 cd5970b1776e5777686ce9208c074e79\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 6954730 a8a092eab78826ef9ed0e98e8d7251bb\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 141248 47668db41fd86750793bae3f59ff623e\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 352870 99357abd251ccfe354b28ed441256eb4\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 50116888 a19877e49d8d1037458d2531873181e0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 3579420 9091ebebb2d0b23a8f10300ff7340c16\r\n\r\nhppa architecture (HP PA RISC)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 105902 14573c4144b48dfcdeadca11dbf28fd1\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 412252 703d501036427f18e6ffc3841c0434e7\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 158830 9c6c95e2c55a59adaa4314022adaba97\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 9512434 b479cbca6e9244681e8acf58afba706e\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 51210900 7b5ae111a77a354adadb9a019892970b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 3621952 4a3cef66aa1b240f42c4c4c4de41ca64\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 222858 1f6d47dc993cbc9a068517a06492beb9\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 898430 c63b30f2604b2a08d9fed108253b6b5b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 71384 50c3026bc0d90b912e74c0892ac3cd8c\r\n\r\ni386 architecture (Intel ia32)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 851844 28f3d2c286d83a90df609b21699baf97\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 79142 61aff31316b603d03921eb89b5df073b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 3565362 fd8674b08b704e5f0f9ef790da65b7f8\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 141410 0182fcff2acf3987fa15128659fe7b38\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 6602586 03aed73b528a0e36cef99361ae9da656\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 49492306 82d2789b64cedcbf2406a09131032764\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 223182 1872e9d86b45cb1b29f20c4d75467200\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 350814 4e647513b860210f0c1bc1caef893e9f\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 68094 f9e97cd83f976afa8959ea9f774f1994\r\n\r\nia64 architecture (Intel ia64)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 223134 2ae79c69711959cb6cd75026882abd60\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 542104 a8b314bf8ad3c48e1ab4ed231b83a450\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 121518 18ec63c6f78623b2c744d9362d4b2be6\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 76492 22f1645790b9540cc1a3b795573b3e46\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 49667940 d01b4ee9da9f802eb24749992dd14be2\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 180184 b26234c2f0d54a61e771ee478828c628\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 11301676 95599d73eb33ae7e9613d92304b8d813\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 811176 33ceb8965e9db8d79020777ab55e1838\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 3397550 7eff41c031481161dfab1bc83cfa8450\r\n\r\nmipsel architecture (MIPS (Little Endian))\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 49965510 8997b286648f39786e86826b5045e69d\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 223146 2bdf56823a2075c6bbd4fe3fc2e0646c\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 7375092 29d842979cbc5ee6ad659cf13927788b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 96764 5fa81a5541ae261f0a72b91bb5bf6626\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 144986 d3da343322c085f952511248e3a69345\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 900210 b87e5f91341b390cb2f1603a1071aff7\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 3308536 7c5f7065d8961c7fc0ca7fb974e6611c\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 69836 ace8648bf416d4804db9644c487dcdf1\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 378586 18fd2ced744197472973e2cae61d4d64\r\n\r\npowerpc architecture (PowerPC)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 362482 a0bf9d0ba7a4695378f7ea053cd9cc46\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 3283604 b98767e9b18704a2482c731309eef892\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 51378802 bed95771a8d00f88bedc12d480ed91f0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 94786 fb7b21596585931a6edda7e2bebae561\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 152276 d83cf113d2600c6ca9e691dfd25a1466\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 7275222 008f00164ecbc43c681f1743ba33c0e8\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 72990 2982ec8818b1ae7b47241dcdb046c8e0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 887776 9853592dc50b738bd7b223fc78c030c3\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 223140 96d915d392dbb2cdc3a09268d97a206f\r\n\r\ns390 architecture (IBM S/390)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 3306276 95d049eaa0c2b95b8f98f2295d984454\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 406680 9efe79857bd5fc05bf567f4840109135\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 223124 ee4ed0dc817d276cbe22bcb5ef6314af\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 51172466 33aeec198869e5b92132775938f1dba6\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 8387566 5cf074573a634121d0981d927bdf8dc5\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 105540 ad95c071cf5d0f16301e004800626ab6\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 156084 69c04262268e1b13ffac80f8827e5776\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 909030 9d9a82bbaa3501f41dd810c3bf3e7b0b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 72868 738b9ff7dafce724b01f032e568d145d\r\n\r\nsparc architecture (Sun SPARC/UltraSPARC)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 143228 8017cc9ebd542b69b5a33328e4db72fd\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 69342 2a626affc178cb0bed8bd8dc0302308b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 821126 3107a47d82efbaf745b0a7355df82271\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 223230 41277488a9fbf77e3864848e36ad1040\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 7174794 ff98cd42b01c1b6da7f443a8513ec516\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 350084 53b49c566cc58af0976b24382a144a16\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 88202 d8ed5ea8a627c996c8890521551e14b3\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 49353618 3919a69140cbf1cc726b9142a7f33f23\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 3577270 0709623512ba6d57f6a475f8382b20a2\r\n\r\n\u8865\u4e01\u5b89\u88c5\u65b9\u6cd5\uff1a\r\n\r\n1. \u624b\u5de5\u5b89\u88c5\u8865\u4e01\u5305\uff1a\r\n\r\n \u9996\u5148\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u6765\u4e0b\u8f7d\u8865\u4e01\u8f6f\u4ef6\uff1a\r\n # wget url (url\u662f\u8865\u4e01\u4e0b\u8f7d\u94fe\u63a5\u5730\u5740)\r\n\r\n \u7136\u540e\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u6765\u5b89\u88c5\u8865\u4e01\uff1a \r\n # dpkg -i file.deb (file\u662f\u76f8\u5e94\u7684\u8865\u4e01\u540d)\r\n\r\n2. \u4f7f\u7528apt-get\u81ea\u52a8\u5b89\u88c5\u8865\u4e01\u5305\uff1a\r\n\r\n \u9996\u5148\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u66f4\u65b0\u5185\u90e8\u6570\u636e\u5e93\uff1a\r\n # apt-get update\r\n \r\n \u7136\u540e\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u5b89\u88c5\u66f4\u65b0\u8f6f\u4ef6\u5305\uff1a\r\n # apt-get upgrade\r\n\r\nMozilla\r\n-------\r\n\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\n\r\nhttp://www.mozilla.org/\r\n\r\nRedHat\r\n------\r\nRedHat\u5df2\u7ecf\u4e3a\u6b64\u53d1\u5e03\u4e86\u4e00\u4e2a\u5b89\u5168\u516c\u544a\uff08RHSA-2009:1530-01\uff09\u4ee5\u53ca\u76f8\u5e94\u8865\u4e01:\r\nRHSA-2009:1530-01\uff1aCritical: firefox security update\r\n\u94fe\u63a5\uff1ahttps://www.redhat.com/support/errata/RHSA-2009-1530.html", "modified": "2009-11-03T00:00:00", "published": "2009-11-03T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-12569", "id": "SSV:12569", "title": "Mozilla Firefox\u4e0b\u8f7d\u6587\u4ef6\u540d\u6b3a\u9a97\u6f0f\u6d1e", "type": "seebug", "sourceData": "", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}, "sourceHref": ""}, {"lastseen": "2017-11-19T18:35:25", "bulletinFamily": "exploit", "description": "CVE ID: CVE-2009-3274\r\n\r\nFirefox\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u5f00\u6e90WEB\u6d4f\u89c8\u5668\u3002\r\n\r\n\u8fd0\u884c\u5728Linux\u5e73\u53f0\u4e0a\u7684Firefox\u5bf9\u4ece\u201c\u4e0b\u8f7d\u201d\u7a97\u53e3\u6240\u9009\u62e9\u7684\u6587\u4ef6\u4f7f\u7528\u4e86\u53ef\u9884\u6d4b\u7684/tmp\u8def\u5f84\u540d\uff0c\u672c\u5730\u7528\u6237\u53ef\u4ee5\u5728\u4e0b\u8f7d\u4e4b\u524d\u5728/tmp\u4f4d\u7f6e\u653e\u7f6e\u6587\u4ef6\u6765\u66ff\u6362\u4e0b\u8f7d\u6587\u4ef6\uff0c\u4e4b\u540e\u7528\u6237\u53ef\u80fd\u53d7\u9a97\u6253\u5f00\u5df2\u88ab\u66ff\u6362\u4e86\u7684\u6587\u4ef6\u3002\n\nMozilla Firefox 3.6 a1\r\nMozilla Firefox 3.5.2\n\u5382\u5546\u8865\u4e01\uff1a\r\n\r\nMozilla\r\n-------\r\n\u76ee\u524d\u5382\u5546\u8fd8\u6ca1\u6709\u63d0\u4f9b\u8865\u4e01\u6216\u8005\u5347\u7ea7\u7a0b\u5e8f\uff0c\u6211\u4eec\u5efa\u8bae\u4f7f\u7528\u6b64\u8f6f\u4ef6\u7684\u7528\u6237\u968f\u65f6\u5173\u6ce8\u5382\u5546\u7684\u4e3b\u9875\u4ee5\u83b7\u53d6\u6700\u65b0\u7248\u672c\uff1a\r\n\r\nhttp://www.mozilla.org/", "modified": "2009-09-23T00:00:00", "published": "2009-09-23T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-12383", "id": "SSV:12383", "title": "Mozilla Firefox\u4e34\u65f6\u6587\u4ef6\u4e0b\u8f7d\u53ef\u9884\u6d4b\u8def\u5f84\u540d\u6f0f\u6d1e", "type": "seebug", "sourceData": "", "cvss": {"score": 4.4, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}, "sourceHref": ""}, {"lastseen": "2017-11-19T18:32:50", "bulletinFamily": "exploit", "description": "BUGTRAQ ID: 36858\r\nCVE ID: CVE-2009-3375\r\n\r\nFirefox\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u5f00\u6e90WEB\u6d4f\u89c8\u5668\u3002\r\n\r\nFirefox\u7684content/html/document/src/nsHTMLDocument.cpp\u5141\u8bb8\u8fdc\u7a0b\u653b\u51fb\u8005\u901a\u8fc7document.getSelection\u51fd\u6570\u7ed5\u8fc7\u540c\u6e90\u7b56\u7565\uff0c\u8bfb\u53d6\u5176\u4ed6\u57df\u4e2d\u7684\u9ad8\u4eae\u663e\u793a\u7684\u6587\u672c\u3002\n\nMozilla Firefox 3.5.x\r\nMozilla Firefox 3.0.x\n\u5382\u5546\u8865\u4e01\uff1a\r\n\r\nDebian\r\n------\r\nDebian\u5df2\u7ecf\u4e3a\u6b64\u53d1\u5e03\u4e86\u4e00\u4e2a\u5b89\u5168\u516c\u544a\uff08DSA-1922-1\uff09\u4ee5\u53ca\u76f8\u5e94\u8865\u4e01:\r\nDSA-1922-1\uff1aNew xulrunner packages fix several vulnerabilities\r\n\u94fe\u63a5\uff1ahttp://www.debian.org/security/2009/dsa-1922\r\n\r\n\u8865\u4e01\u4e0b\u8f7d\uff1a\r\n\r\nSource archives:\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15-0lenny1.diff.gz\r\nSize/MD5 checksum: 116164 3d995b59ffe890d36117f3103f38b9b1\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15-0lenny1.dsc\r\nSize/MD5 checksum: 1779 7e8392a8b59ef9064df564ee03c23b14\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner_1.9.0.15.orig.tar.gz\r\nSize/MD5 checksum: 44085950 49aa2aee64997f9e802cf386d038d2d7\r\n\r\nArchitecture independent packages:\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozillainterfaces-java_1.9.0.15-0lenny1_all.deb\r\nSize/MD5 checksum: 1464278 ea66718b41a4c282284d37672d0e7078\r\n\r\nalpha architecture (DEC Alpha)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 9494314 8cd7366b90d39c5c64064d1fb17c1022\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 938304 bf39af51a378ed039c545730664857aa\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 221588 1dd219c2812ca8d23fff415c9555d3db\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 432182 5d32bfa9665c32fb1738f416f739b3ae\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 3651374 14dd5f555695db43b94ceab3260c680d\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 51089582 fa7f8faad8460d1049e9fb8f6fd1f7bb\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 163912 d488634f9d36f6d0afcc7b27ee6699a0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 112022 9666fd74cd00bc0643993acc22d40c91\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_alpha.deb\r\nSize/MD5 checksum: 71980 602c6780c2328141871f5d94b8a163f4\r\n\r\namd64 architecture (AMD x86_64 (AMD64))\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 69898 c0295f0b7e6957f236d769dc8bdfd2ca\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 890260 2d4cb08b3e886e06be04ec7e43a82b0f\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 151952 3e20640a2f4eb68a58731bba532aedb0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 50327552 5779e5efb1f7b6612bf8a774a8e8cd6a\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 374218 86b4b4a30f5f30f4492fe11eca93dace\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 3287960 741031dbbba1f6c6e8fe045d71547905\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 222992 3e801bb57c442128512e599af5c9547e\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 7722556 cc9b8e7ac989143255cb6ad53ce84884\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_amd64.deb\r\nSize/MD5 checksum: 101512 396f03e0770dd73cf5820354a8b94a0f\r\n\r\narmel architecture (ARM EABI)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 223358 a881797fcf62521c0ab538e72b33bb70\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 84272 1602bc59310724ee0f20d8f5a0ac0a8c\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 821892 79baa048d939ac77273ac50237c7bfe3\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 69726 cd5970b1776e5777686ce9208c074e79\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 6954730 a8a092eab78826ef9ed0e98e8d7251bb\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 141248 47668db41fd86750793bae3f59ff623e\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 352870 99357abd251ccfe354b28ed441256eb4\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 50116888 a19877e49d8d1037458d2531873181e0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_armel.deb\r\nSize/MD5 checksum: 3579420 9091ebebb2d0b23a8f10300ff7340c16\r\n\r\nhppa architecture (HP PA RISC)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 105902 14573c4144b48dfcdeadca11dbf28fd1\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 412252 703d501036427f18e6ffc3841c0434e7\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 158830 9c6c95e2c55a59adaa4314022adaba97\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 9512434 b479cbca6e9244681e8acf58afba706e\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 51210900 7b5ae111a77a354adadb9a019892970b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 3621952 4a3cef66aa1b240f42c4c4c4de41ca64\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 222858 1f6d47dc993cbc9a068517a06492beb9\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 898430 c63b30f2604b2a08d9fed108253b6b5b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_hppa.deb\r\nSize/MD5 checksum: 71384 50c3026bc0d90b912e74c0892ac3cd8c\r\n\r\ni386 architecture (Intel ia32)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 851844 28f3d2c286d83a90df609b21699baf97\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 79142 61aff31316b603d03921eb89b5df073b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 3565362 fd8674b08b704e5f0f9ef790da65b7f8\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 141410 0182fcff2acf3987fa15128659fe7b38\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 6602586 03aed73b528a0e36cef99361ae9da656\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 49492306 82d2789b64cedcbf2406a09131032764\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 223182 1872e9d86b45cb1b29f20c4d75467200\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 350814 4e647513b860210f0c1bc1caef893e9f\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_i386.deb\r\nSize/MD5 checksum: 68094 f9e97cd83f976afa8959ea9f774f1994\r\n\r\nia64 architecture (Intel ia64)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 223134 2ae79c69711959cb6cd75026882abd60\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 542104 a8b314bf8ad3c48e1ab4ed231b83a450\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 121518 18ec63c6f78623b2c744d9362d4b2be6\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 76492 22f1645790b9540cc1a3b795573b3e46\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 49667940 d01b4ee9da9f802eb24749992dd14be2\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 180184 b26234c2f0d54a61e771ee478828c628\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 11301676 95599d73eb33ae7e9613d92304b8d813\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 811176 33ceb8965e9db8d79020777ab55e1838\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_ia64.deb\r\nSize/MD5 checksum: 3397550 7eff41c031481161dfab1bc83cfa8450\r\n\r\nmipsel architecture (MIPS (Little Endian))\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 49965510 8997b286648f39786e86826b5045e69d\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 223146 2bdf56823a2075c6bbd4fe3fc2e0646c\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 7375092 29d842979cbc5ee6ad659cf13927788b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 96764 5fa81a5541ae261f0a72b91bb5bf6626\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 144986 d3da343322c085f952511248e3a69345\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 900210 b87e5f91341b390cb2f1603a1071aff7\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 3308536 7c5f7065d8961c7fc0ca7fb974e6611c\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 69836 ace8648bf416d4804db9644c487dcdf1\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_mipsel.deb\r\nSize/MD5 checksum: 378586 18fd2ced744197472973e2cae61d4d64\r\n\r\npowerpc architecture (PowerPC)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 362482 a0bf9d0ba7a4695378f7ea053cd9cc46\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 3283604 b98767e9b18704a2482c731309eef892\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 51378802 bed95771a8d00f88bedc12d480ed91f0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 94786 fb7b21596585931a6edda7e2bebae561\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 152276 d83cf113d2600c6ca9e691dfd25a1466\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 7275222 008f00164ecbc43c681f1743ba33c0e8\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 72990 2982ec8818b1ae7b47241dcdb046c8e0\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 887776 9853592dc50b738bd7b223fc78c030c3\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_powerpc.deb\r\nSize/MD5 checksum: 223140 96d915d392dbb2cdc3a09268d97a206f\r\n\r\ns390 architecture (IBM S/390)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 3306276 95d049eaa0c2b95b8f98f2295d984454\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 406680 9efe79857bd5fc05bf567f4840109135\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 223124 ee4ed0dc817d276cbe22bcb5ef6314af\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 51172466 33aeec198869e5b92132775938f1dba6\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 8387566 5cf074573a634121d0981d927bdf8dc5\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 105540 ad95c071cf5d0f16301e004800626ab6\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 156084 69c04262268e1b13ffac80f8827e5776\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 909030 9d9a82bbaa3501f41dd810c3bf3e7b0b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_s390.deb\r\nSize/MD5 checksum: 72868 738b9ff7dafce724b01f032e568d145d\r\n\r\nsparc architecture (Sun SPARC/UltraSPARC)\r\n\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/python-xpcom_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 143228 8017cc9ebd542b69b5a33328e4db72fd\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/spidermonkey-bin_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 69342 2a626affc178cb0bed8bd8dc0302308b\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d-dbg_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 821126 3107a47d82efbaf745b0a7355df82271\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs-dev_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 223230 41277488a9fbf77e3864848e36ad1040\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 7174794 ff98cd42b01c1b6da7f443a8513ec516\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/libmozjs1d_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 350084 53b49c566cc58af0976b24382a144a16\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-gnome-support_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 88202 d8ed5ea8a627c996c8890521551e14b3\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-1.9-dbg_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 49353618 3919a69140cbf1cc726b9142a7f33f23\r\nhttp://security.debian.org/pool/updates/main/x/xulrunner/xulrunner-dev_1.9.0.15-0lenny1_sparc.deb\r\nSize/MD5 checksum: 3577270 0709623512ba6d57f6a475f8382b20a2\r\n\r\n\u8865\u4e01\u5b89\u88c5\u65b9\u6cd5\uff1a\r\n\r\n1. \u624b\u5de5\u5b89\u88c5\u8865\u4e01\u5305\uff1a\r\n\r\n \u9996\u5148\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u6765\u4e0b\u8f7d\u8865\u4e01\u8f6f\u4ef6\uff1a\r\n # wget url (url\u662f\u8865\u4e01\u4e0b\u8f7d\u94fe\u63a5\u5730\u5740)\r\n\r\n \u7136\u540e\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u6765\u5b89\u88c5\u8865\u4e01\uff1a \r\n # dpkg -i file.deb (file\u662f\u76f8\u5e94\u7684\u8865\u4e01\u540d)\r\n\r\n2. \u4f7f\u7528apt-get\u81ea\u52a8\u5b89\u88c5\u8865\u4e01\u5305\uff1a\r\n\r\n \u9996\u5148\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u66f4\u65b0\u5185\u90e8\u6570\u636e\u5e93\uff1a\r\n # apt-get update\r\n \r\n \u7136\u540e\uff0c\u4f7f\u7528\u4e0b\u9762\u7684\u547d\u4ee4\u5b89\u88c5\u66f4\u65b0\u8f6f\u4ef6\u5305\uff1a\r\n # apt-get upgrade\r\n\r\nMozilla\r\n-------\r\n\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\n\r\nhttp://www.mozilla.org/\r\n\r\nRedHat\r\n------\r\nRedHat\u5df2\u7ecf\u4e3a\u6b64\u53d1\u5e03\u4e86\u4e00\u4e2a\u5b89\u5168\u516c\u544a\uff08RHSA-2009:1530-01\uff09\u4ee5\u53ca\u76f8\u5e94\u8865\u4e01:\r\nRHSA-2009:1530-01\uff1aCritical: firefox security update\r\n\u94fe\u63a5\uff1ahttps://www.redhat.com/support/errata/RHSA-2009-1530.html", "modified": "2009-11-03T00:00:00", "published": "2009-11-03T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-12568", "id": "SSV:12568", "title": "Firefox document.getSelect\u8de8\u57df\u4fe1\u606f\u6cc4\u9732\u6f0f\u6d1e", "type": "seebug", "sourceData": "\n <?xml version="1.0"?>\r\n<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Transitional//EN"\r\n"http://www.w3.org/TR/xhtml1/DTD/xhtml1-transitional.dtd">\r\n<html>\r\n<!--\r\nCopyright (c) 2009, Gregory Fleischer (gfleischer@gmail.com)\r\nLicense: Revised BSD\r\n-->\r\n<head>\r\n<title>document.getSelection</title>\r\n<script type="text/javascript">//<![CDATA[\r\nvar doc0, iframe0;\r\nvar selected = "";\r\nvar watcher = null;\r\nfunction get_selection() {\r\n try {\r\n var s = doc0.getSelection();\r\n if (s) {\r\n if (s != selected) {\r\n selected = s;\r\n alert(s);\r\n }\r\n }\r\n } catch(e) {\r\n window.status = "error: " + e;\r\n }\r\n}\r\nfunction setup_watch() {\r\n watcher = setInterval(function() {\r\n get_selection();\r\n }, 500);\r\n}\r\n\r\nfunction set_location() {\r\n if (watcher) {\r\n clearInterval(watcher);\r\n }\r\n iframe0.onload = function(){setup_watch();}\r\n iframe0.src = document.getElementById("input0").value;\r\n}\r\n\r\nfunction init() {\r\n iframe0 = document.createElement("iframe");\r\n iframe0.src = "about:blank";\r\n iframe0.id = "iframe0";\r\n iframe0.height = "480";\r\n iframe0.width = "800";\r\n document.body.appendChild(iframe0);\r\n\r\n doc0 = iframe0.contentDocument;\r\n}\r\n\r\n//]]>\r\n</script>\r\n<style type="text/css">\r\nbody {\r\n margin: 5px 5% 5px 5%;\r\n}\r\n</style>\r\n</head>\r\n<body onload="init()">\r\n<input type="text" size="48" name="input0" id="input0"\r\n value="http://www.google.com" />\r\n<input type="button" name="go" value="go" onclick="set_location();"/>\r\n<br />\r\n</body>\r\n</html>\r\n<!-- Keep this comment at the end of the file\r\nLocal variables:\r\nmode:xml-html\r\nsgml-declaration:"~/lib/DTD/xhtml1/xhtml1.dcl"\r\nsgml-default-dtd-file:"~/lib/DTD/xhtml1/xhtml1-transitional.ced"\r\nEnd:\r\n-->\n ", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}, "sourceHref": "https://www.seebug.org/vuldb/ssvid-12568"}, {"lastseen": "2017-11-19T18:32:21", "bulletinFamily": "exploit", "description": "BUGTRAQ ID: 36851\r\nCVE(CAN) ID: CVE-2009-1563\r\n\r\nFirefox\u662f\u4e00\u6b3e\u6d41\u884c\u7684\u5f00\u6e90WEB\u6d4f\u89c8\u5668\u3002\r\n\r\nFirefox\u7684\u5b57\u7b26\u4e32\u5230\u6d6e\u70b9\u6570\u8f6c\u6362\u4f8b\u7a0b\u4e2d\u5b58\u5728\u5806\u6ea2\u51fa\u6f0f\u6d1e\uff0c\u5728\u5c06\u5305\u542b\u6709\u8d85\u957f\u5b57\u7b26\u4e32\u7684JavaScript\u4ee3\u7801\u8f6c\u6362\u4e3a\u6d6e\u70b9\u6570\u7684\u65f6\u5019\u5c31\u53ef\u80fd\u89e6\u53d1\u8fd9\u4e2a\u6ea2\u51fa\uff0c\u5bfc\u81f4\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\n\nMozilla Firefox 3.5.x\r\nMozilla Firefox 3.0.x\n\u5382\u5546\u8865\u4e01\uff1a\r\n\r\nMozilla\r\n-------\r\n\u76ee\u524d\u5382\u5546\u5df2\u7ecf\u53d1\u5e03\u4e86\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u8fd9\u4e2a\u5b89\u5168\u95ee\u9898\uff0c\u8bf7\u5230\u5382\u5546\u7684\u4e3b\u9875\u4e0b\u8f7d\uff1a\r\n\r\nhttp://www.mozilla.org/\r\n\r\nRedHat\r\n------\r\nRedHat\u5df2\u7ecf\u4e3a\u6b64\u53d1\u5e03\u4e86\u4e00\u4e2a\u5b89\u5168\u516c\u544a\uff08RHSA-2009:1530-01\uff09\u4ee5\u53ca\u76f8\u5e94\u8865\u4e01:\r\nRHSA-2009:1530-01\uff1aCritical: firefox security update\r\n\u94fe\u63a5\uff1ahttps://www.redhat.com/support/errata/RHSA-2009-1530.html", "modified": "2009-10-31T00:00:00", "published": "2009-10-31T00:00:00", "href": "https://www.seebug.org/vuldb/ssvid-12551", "id": "SSV:12551", "title": "Mozilla Firefox\u6d6e\u70b9\u8f6c\u6362\u5806\u6ea2\u51fa\u6f0f\u6d1e", "type": "seebug", "sourceData": "", "cvss": {"score": 0.0, "vector": "NONE"}, "sourceHref": ""}], "securityvulns": [{"lastseen": "2018-08-31T11:09:34", "bulletinFamily": "software", "description": "Buffer ovefflows, privilege escalation, information leak, crossite scripting.", "modified": "2009-11-05T00:00:00", "published": "2009-11-05T00:00:00", "id": "SECURITYVULNS:VULN:10356", "href": "https://vulners.com/securityvulns/SECURITYVULNS:VULN:10356", "title": "Mozilla Firefox / Seamonkey multiple security vulnerabilities", "type": "securityvulns", "cvss": {"score": 10.0, "vector": "AV:NETWORK/AC:LOW/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-08-31T11:10:34", "bulletinFamily": "software", "description": "You are here: Security Center > Mozilla Foundation Security Advisories > MFSA 2010-06\r\nMozilla Foundation Security Advisory 2010-06\r\n\r\nTitle: Scriptable plugin execution in SeaMonkey mail\r\nImpact: Critical\r\nAnnounced: March 16, 2010\r\nReporter: Georgi Guninski\r\nProducts: SeaMonkey\r\n\r\nFixed in: SeaMonkey 1.1.19\r\nDescription\r\n\r\nSecurity researcher Georgi Guninski reported that scriptable plugin content, such as Flash objects, could be loaded and executed in SeaMonkey mail messages by embedding the content in an iframe inside the message. If a user were to reply to or forward such a message, malicious JavaScript embedded in the plugin content could potentially steal the contents of the message or files from the local filesystem.\r\n\r\nThunderbird was not affected by this issue.\r\nReferences\r\n\r\n * https://bugzilla.mozilla.org/show_bug.cgi?id=371976\r\n * CVE-2009-3385\r\n\r\n", "modified": "2010-04-06T00:00:00", "published": "2010-04-06T00:00:00", "id": "SECURITYVULNS:DOC:23545", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:23545", "title": "Mozilla Foundation Security Advisory 2010-06", "type": "securityvulns", "cvss": {"score": 7.1, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:NONE/A:NONE/"}}, {"lastseen": "2018-08-31T11:10:32", "bulletinFamily": "software", "description": "Mozilla Foundation Security Advisory 2009-62\r\n\r\nTitle: Download filename spoofing with RTL override\r\nImpact: Low\r\nAnnounced: October 27, 2009\r\nReporter: Jesse Ruderman, Sid Stamm\r\nProducts: Firefox, SeaMonkey\r\n\r\nFixed in: Firefox 3.5.4\r\n Firefox 3.0.15\r\n SeaMonkey 2.0\r\nDescription\r\n\r\nMozilla security researchers Jesse Ruderman and Sid Stamm reported that when downloading a file containing a right-to-left override character (RTL) in the filename, the name displayed in the dialog title bar conflicts with the name of the file shown in the dialog body. An attacker could use this vulnerability to obfuscate the name and file extension of a file to be downloaded and opened, potentially causing a user to run an executable file when they expected to open a non-executable file.\r\nReferences\r\n\r\n * https://bugzilla.mozilla.org/show_bug.cgi?id=511521\r\n * CVE-2009-3376\r\n", "modified": "2009-10-28T00:00:00", "published": "2009-10-28T00:00:00", "id": "SECURITYVULNS:DOC:22703", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:22703", "title": "Mozilla Foundation Security Advisory 2009-62", "type": "securityvulns", "cvss": {"score": 9.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:COMPLETE/I:COMPLETE/A:COMPLETE/"}}, {"lastseen": "2018-08-31T11:10:32", "bulletinFamily": "software", "description": "Mozilla Foundation Security Advisory 2009-53\r\n\r\nTitle: Local downloaded file tampering\r\nImpact: Low\r\nAnnounced: October 27, 2009\r\nReporter: Jeremy Brown\r\nProducts: Firefox\r\n\r\nFixed in: Firefox 3.5.4\r\n Firefox 3.0.15\r\nDescription\r\n\r\nSecurity researcher Jeremy Brown reported that the file naming scheme used for downloading a file which already exists in the downloads folder is predictable. If an attacker had local access to a victim's computer and knew the name of a file the victim intended to open through the Download Manager, he could use this vulnerability to place a malicious file in the world-writable directory used to save temporary downloaded files and cause the browser to choose the incorrect file when opening it. Since this attack requires local access to the victim's machine, the severity of this vulnerability was determined to be low.\r\nReferences\r\n\r\n * https://bugzilla.mozilla.org/show_bug.cgi?id=514823\r\n * CVE-2009-3274\r\n", "modified": "2009-10-28T00:00:00", "published": "2009-10-28T00:00:00", "id": "SECURITYVULNS:DOC:22696", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:22696", "title": "Mozilla Foundation Security Advisory 2009-53", "type": "securityvulns", "cvss": {"score": 4.4, "vector": "AV:LOCAL/AC:MEDIUM/Au:NONE/C:PARTIAL/I:PARTIAL/A:PARTIAL/"}}, {"lastseen": "2018-08-31T11:10:32", "bulletinFamily": "software", "description": "Mozilla Foundation Security Advisory 2009-61\r\n\r\nTitle: Cross-origin data theft through document.getSelection()\r\nImpact: Moderate\r\nAnnounced: October 27, 2009\r\nReporter: Gregory Fleischer\r\nProducts: Firefox 3\r\n\r\nFixed in: Firefox 3.5.4\r\n Firefox 3.0.15\r\n\r\nThis vulnerability does not affect products based on the older Gecko 1.8 engine such as Firefox 2 or SeaMonkey 1.1\r\nDescription\r\n\r\nSecurity researcher Gregory Fleischer reported that text within a selection on a web page can be read by JavaScript in a different domain using the document.getSelection function, violating the same-origin policy. Since this vulnerability requires user interaction to exploit, its severity was determined to be moderate.\r\nReferences\r\n\r\n * https://bugzilla.mozilla.org/show_bug.cgi?id=503226\r\n * CVE-2009-3375\r\n", "modified": "2009-10-28T00:00:00", "published": "2009-10-28T00:00:00", "id": "SECURITYVULNS:DOC:22702", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:22702", "title": "Mozilla Foundation Security Advisory 2009-61", "type": "securityvulns", "cvss": {"score": 4.3, "vector": "AV:NETWORK/AC:MEDIUM/Au:NONE/C:PARTIAL/I:NONE/A:NONE/"}}, {"lastseen": "2018-08-31T11:10:32", "bulletinFamily": "software", "description": "Mozilla Foundation Security Advisory 2009-59\r\n\r\nTitle: Heap buffer overflow in string to number conversion\r\nImpact: Critical\r\nAnnounced: October 27, 2009\r\nReporter: Alin Rad Pop\r\nProducts: Firefox\r\n\r\nFixed in: Firefox 3.5.4\r\n Firefox 3.0.15\r\nDescription\r\n\r\nSecurity researcher Alin Rad Pop of Secunia Research reported a heap-based buffer overflow in Mozilla's string to floating point number conversion routines. Using this vulnerability an attacker could craft some malicious JavaScript code containing a very long string to be converted to a floating point number which would result in improper memory allocation and the execution of an arbitrary memory location. This vulnerability could thus be leveraged by the attacker to run arbitrary code on a victim's computer.\r\nWorkaround\r\n\r\nDisable JavaScript until a version containing these fixes can be installed.\r\nReferences\r\n\r\n * String-to-number conversion bugs\r\n * CVE-2009-1563\r\n", "modified": "2009-10-28T00:00:00", "published": "2009-10-28T00:00:00", "id": "SECURITYVULNS:DOC:22701", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:22701", "title": "Mozilla Foundation Security Advisory 2009-59", "type": "securityvulns", "cvss": {"score": 0.0, "vector": "NONE"}}, {"lastseen": "2018-08-31T11:10:32", "bulletinFamily": "software", "description": "====================================================================== \r\n\r\n Secunia Research 28/10/2009\r\n\r\n - Mozilla Firefox Floating Point Memory Allocation Vulnerability -\r\n\r\n====================================================================== \r\nTable of Contents\r\n\r\nAffected Software....................................................1\r\nSeverity.............................................................2\r\nVendor's Description of Software.....................................3\r\nDescription of Vulnerability.........................................4\r\nSolution.............................................................5\r\nTime Table...........................................................6\r\nCredits..............................................................7\r\nReferences...........................................................8\r\nAbout Secunia........................................................9\r\nVerification........................................................10\r\n\r\n====================================================================== \r\n1) Affected Software \r\n\r\n* Mozilla Firefox 3.0.14 and 3.5.3.\r\n\r\nNOTE: Prior versions may also be affected.\r\n\r\n====================================================================== \r\n2) Severity \r\n\r\nRating: Highly critical\r\nImpact: System access\r\nWhere: Remote\r\n\r\n====================================================================== \r\n3) Vendor's Description of Software \r\n\r\n"The award-winning Firefox Web browser has security, speed and new \r\nfeatures that will change the way you use the Web. Don\u2019t settle for \r\nanything less."\r\n\r\nProduct Link:\r\nhttp://www.mozilla.com/firefox/\r\n\r\n====================================================================== \r\n4) Description of Vulnerability\r\n\r\nSecunia Research has discovered a vulnerability in Mozilla Firefox, \r\nwhich can be exploited by malicious people to compromise a user's \r\nsystem.\r\n\r\nThe vulnerability is caused due to an array indexing error while \r\nallocating space for floating point numbers. This can be exploited to \r\ntrigger a memory corruption when a specially crafted floating point \r\nnumber is processed.\r\n\r\nSuccessful exploitation allows execution of arbitrary code.\r\n\r\n====================================================================== \r\n5) Solution\r\n\r\nUpdate to version 3.0.15 or 3.5.4.\r\n\r\n====================================================================== \r\n6) Time Table \r\n\r\n14/09/2009 - Vendor notified.\r\n14/09/2009 - Vendor response.\r\n28/10/2009 - Public disclosure.\r\n\r\n====================================================================== \r\n7) Credits \r\n\r\nDiscovered by Alin Rad Pop, Secunia Research.\r\n\r\n====================================================================== \r\n8) References\r\n\r\nThe Common Vulnerabilities and Exposures (CVE) project has assigned \r\nCVE-2009-1563 for the vulnerability.\r\n\r\n====================================================================== \r\n9) About Secunia\r\n\r\nSecunia offers vulnerability management solutions to corporate\r\ncustomers with verified and reliable vulnerability intelligence\r\nrelevant to their specific system configuration:\r\n\r\nhttp://secunia.com/advisories/business_solutions/\r\n\r\nSecunia also provides a publicly accessible and comprehensive advisory\r\ndatabase as a service to the security community and private \r\nindividuals, who are interested in or concerned about IT-security.\r\n\r\nhttp://secunia.com/advisories/\r\n\r\nSecunia believes that it is important to support the community and to\r\ndo active vulnerability research in order to aid improving the \r\nsecurity and reliability of software in general:\r\n\r\nhttp://secunia.com/secunia_research/\r\n\r\nSecunia regularly hires new skilled team members. Check the URL below\r\nto see currently vacant positions:\r\n\r\nhttp://secunia.com/corporate/jobs/\r\n\r\nSecunia offers a FREE mailing list called Secunia Security Advisories:\r\n\r\nhttp://secunia.com/advisories/mailing_lists/\r\n\r\n====================================================================== \r\n10) Verification \r\n\r\nPlease verify this advisory by visiting the Secunia website:\r\nhttp://secunia.com/secunia_research/2009-35/\r\n\r\nComplete list of vulnerability reports published by Secunia Research:\r\nhttp://secunia.com/secunia_research/\r\n\r\n======================================================================", "modified": "2009-10-28T00:00:00", "published": "2009-10-28T00:00:00", "id": "SECURITYVULNS:DOC:22707", "href": "https://vulners.com/securityvulns/SECURITYVULNS:DOC:22707", "title": "Secunia Research: Mozilla Firefox Floating Point Memory Allocation Vulnerability", "type": "securityvulns", "cvss": {"score": 0.0, "vector": "NONE"}}]}
