Mozilla Firefox/Thunderbird/SeaMonkey多个内存破坏漏洞(CVE-2014-1478)

BUGTRAQ ID: 65324 CVECAN ID: CVE-2014-1478 Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox, Thunderbird, SeaMonkey在浏览器引擎的实现上存在多个内存破坏漏洞，可使远程攻击者通过js/src/jit/MIR.h内的MPostWriteBarrier类及OdinMonkey内js/src/jit/AsmJS.cpp中的栈对齐，造成拒绝服务（内存破坏及应用崩溃）或者执行任意代码。受影响版本： Firefox ...

Mozilla Firefox/Thunderbird/SeaMonkey远程代码执行漏洞(CVE-2014-1488)

BUGTRAQ ID: 65321 CVECAN ID: CVE-2014-1488 Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox, SeaMonkey在Web worker的实现上存在安全漏洞，可使远程攻击者通过终止执行跨线程对象传递操作的worker进程以及使用asm.js，执行任意代码。 0 Mozilla Firefox 27.0 Mozilla Thunderbird 24.3 Mozilla SeaMonkey 2.24 厂商补丁： Mozilla...

Mozilla Firefox/Thunderbird/SeaMonkey释放后重用远程代码执行漏洞

BUGTRAQ ID: 65334 CVECAN ID: CVE-2014-1486 Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox, SeaMonkey在imgRequestProxy函数的实现上存在释放后重用安全漏洞，可使远程攻击者通过图形数据的内容类型值相关矢量，执行任意代码。 0 Mozilla Firefox 27.0 Mozilla Thunderbird 24.3 Mozilla SeaMonkey 2.24 厂商补丁： Mozilla -------...

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2014:0212-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SeaMonkey Multiple Vulnerabilities-01 (Feb 2014) - Mac OS X

SeaMonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:seamonkey"; ifdescription...

SeaMonkey Multiple Vulnerabilities-01 (Feb 2014) - Windows

SeaMonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:seamonkey"; ifdescription...

SuSE Update for Mozilla openSUSE-SU-2014:0212-1 (Mozilla)

Check for the Version of Mozilla OpenVAS Vulnerability Test $Id: gbsuse201402121.nasl 8044 2017-12-08 08:32:49Z santu $ SuSE Update for Mozilla openSUSE-SU-2014:0212-1 Mozilla Authors: System Generated Check Copyright: Copyright C 2014 Greenbone Networks GmbH, http://www.greenbone.net This progra...

Updated seamonkey packages fix multiple vulnerabilities

Updated iceape packages fix security issues: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service memory corruption and...

Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities

Multiple memory corruptions, crossite scripting, DoS, information leakage...

seamonkey

New seamonkey packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/seamonkey-2.24-i486-1slack14.1.txz: Upgraded. This update contains security fixes and improvements. For more information, se...

Mozilla Firefox 27 release (important)

Mozilla Firefox was updated to version 27. Mozilla Seamonkey was updated to 2.24, fixing similar issues as Firefox 27. Mozilla Thunderbird was updated to 24.3.0, fixing similar issues as Firefox 27. The Firefox 27 release brings TLS 1.2 support as a major security feature. It also fixes following...

CVE-2014-1488

The Web workers implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allows remote attackers to execute arbitrary code via vectors involving termination of a worker process that has performed a cross-thread object-passing operation in conjunction with use of asm.js...

CVE-2014-1480

The file-download implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 does not properly restrict the timing of button selections, which allows remote attackers to conduct clickjacking attacks, and trigger unintended launching of a downloaded file, via a crafted web site...

CVE-2014-1483

Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint...

CVE-2014-1477

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary cod...

CVE-2014-1485

The Content Security Policy CSP implementation in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 operates on XSLT stylesheets according to style-src directives instead of script-src directives, which might allow remote attackers to execute arbitrary XSLT code by leveraging insufficient...

CVE-2014-1478

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the MPostWriteBarrier class in...

CVE-2014-1477

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary cod...

Design/Logic Flaw

Mozilla Firefox before 27.0, Firefox ESR 24.x before 24.3, Thunderbird before 24.3, and SeaMonkey before 2.24 allow remote attackers to bypass intended restrictions on window objects by leveraging inconsistency in native getter methods across different JavaScript engines...

Design/Logic Flaw

Mozilla Firefox before 27.0 and SeaMonkey before 2.24 allow remote attackers to bypass the Same Origin Policy and obtain sensitive information by using an IFRAME element in conjunction with certain timing measurements involving the document.caretPositionFromPoint and document.elementFromPoint...