Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities

Memory corruptions, buffer overflows, crossite data access, crossite scripting, information spoofing, privilege escalation, protection bypass, code execution, information leakage...

Mozilla多个产品不正确XMLHttpRequest调用限制漏洞

CVE ID:CVE-2013-1714 Mozilla Firefox/SeaMonkey/Thunderbird是Mozilla所发布的WEB浏览器/新闻组客户端/邮件客户端 Mozilla Firefox/SeaMonkey/Thunderbird Web Workers实现不正确限制XMLHttpRequest调用，允许远程攻击者利用漏洞绕过同源策略，进行跨站脚本攻击，可获取敏感信息或劫持用户会话 0 Mozilla Firefox 23.0 Mozilla Firefox ESR 17.x Mozilla Thunderbird 17.0.8 Mozilla Thunderbi...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 14.0, and -current to fix security issues. Here are the details from the Slackware 14.0 ChangeLog: patches/packages/seamonkey-2.20-i486-1slack14.0.txz: Upgraded. This update contains security fixes and improvements. For more information, see:...

Mozilla SeaMonkey < 2.20 Multiple Vulnerabilities

Binary data 801462.prm...

Mozilla SeaMonkey Multiple Vulnerabilities (Aug 2013) - Mac OS X

Mozilla SeaMonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

SeaMonkey < 2.20 Multiple Vulnerabilities

Binary data 6977.prm...

Mozilla SeaMonkey Multiple Vulnerabilities (Aug 2013) - Windows

Mozilla SeaMonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if description...

Mozilla SeaMonkey Multiple Vulnerabilities - August 13 (Mac OS X)

The host is installed with Mozilla SeaMonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaseamonkeymultvulnaug13macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Mozilla SeaMonkey Multiple Vulnerabilities - August 13 Mac OS X Authors: Thanga Prakash S Copyright:...

Mozilla SeaMonkey Multiple Vulnerabilities - August 13 (Windows)

The host is installed with Mozilla SeaMonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaseamonkeymultvulnaug13win.nasl 6104 2017-05-11 09:03:48Z teissa $ Mozilla SeaMonkey Multiple Vulnerabilities - August 13 Windows Authors: Thanga Prakash S Copyright:...

SeaMonkey < 2.20 Multiple Vulnerabilities

The installed version of SeaMonkey is a version prior to 2.20. It is, therefore, potentially affected by the following vulnerabilities : - Various errors exist that could allow memory corruption conditions. CVE-2013-1701, CVE-2013-1702 - Use-after-free errors exist related to DOM modification whe...

Slackware 14.0 / current : seamonkey (SSA:2013-219-03)

New seamonkey packages are available for Slackware 14.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2013-219-03. The text itself is copyright C...

Mozilla: Wrong principal used for validating URI for some Javascript components (MFSA 2013-72)

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-si...

Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69)

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting XSS attacks...

Mozilla: Document URI misrepresentation and masquerading (MFSA 2013-68)

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting XSS attack...

Mozilla: Local Java applets may read contents of local file system (MFSA 2013-75)

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging...

Mozilla: Miscellaneous memory safety hazards (rv:17.0.8) (MFSA 2013-63)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allow remote attackers to cause a denial of service memory corruption and application...

Mozilla: CRMF requests allow for code execution and XSS attacks (MFSA 2013-69)

The crypto.generateCRMFRequest function in Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 allows remote attackers to execute arbitrary JavaScript code or conduct cross-site scripting XSS attacks...

CVE-2013-1717

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly restrict local-filesystem access by Java applets, which allows user-assisted remote attackers to read arbitrary files by leveraging...

CVE-2013-1713

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 use an incorrect URI within unspecified comparisons during enforcement of the Same Origin Policy, which allows remote attackers to conduct cross-si...

CVE-2013-1709

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting XSS attack...