7888 matches found
CVE-2011-2377
Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a multipart/x-mixed-replace image...
CVE-2011-0085
Use-after-free vulnerability in the nsXULCommandDispatcher function in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to execute arbitrary code via a crafted XUL document that dequeues the current command updater...
CVE-2011-2363
CVE-2011-2363 is a use-after-free vulnerability in the nsSVGPointList::AppendElement function affecting Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14. It can cause application crashes or possibly allow arbitrary code execution via vectors involving a user-...
CVE-2011-2363
Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service application crash or possibly execut...
CVE-2011-2362
CVE-2011-2362 affects Mozilla Firefox (before 3.6.18), Thunderbird (before 3.1.11), and SeaMonkey (through 2.0.14): they do not distinguish cookies for two domain names that differ only by a trailing dot, allowing remote servers to bypass the Same Origin Policy via Set-Cookie headers. The issue s...
CVE-2011-2373
CVE-2011-2373 concerns a use-after-free in Mozilla Firefox (prior to 3.6.18 and 4.x up to 4.0.1), Thunderbird (before 3.1.11), and SeaMonkey (through 2.0.14). The vulnerability occurs when JavaScript is disabled and an attacker provides a crafted XUL document, enabling remote code execution. The ...
CVE-2011-2371
CVE-2011-2371 is an integer overflow in Mozilla Firefox’s Array.reduceRight that could cause remote code execution when processing very large JavaScript arrays. Affected products include Firefox up to 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14. The issue...
CVE-2011-2362
Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers...
CVE-2011-2377
CVE-2011-2377 affects Mozilla Firefox (Firefox <3.6.18 and 4.x ≤ 4.0.1), Thunderbird (
CVE-2011-0085
CVE-2011-0085 is a use-after-free in the nsXULCommandDispatcher of Mozilla Firefox prior to 3.6.18, Thunderbird prior to 3.1.11, and SeaMonkey up to 2.0.14. The flaw allows remote attackers to execute arbitrary code by crafting an XUL document that dequeues the current command updater, enabling c...
Mozilla Firefox/Thunderbird/SeaMonkey Array.reduceRight()远程代码执行漏洞
BUGTRAQ ID: 48372 CVECAN ID: CVE-2011-2371 Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。 Mozilla Firefox、Thunderbird和SeaMonkey在处理超长JavaScript数组的实现上存在远程代码执行漏洞，远程攻击者可利用这些漏洞执行任意代码，使受响应用程序崩溃，可能造成拒绝服务。 Mozilla Firefox 3.6.x Mozilla...
Mozilla Firefox/Thunderbird/SeaMonkey Cookie跨域信息泄露漏洞
BUGTRAQ ID: 48376 CVE ID: CVE-2011-2362 Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox、Thunderbird在实现上存在信息泄露漏洞，远程攻击者可利用此漏洞绕过同源策略并获取敏感信息。 example.com.和example.com的cookie集被认为是可互换的，这就违反了同源策略。 Mozilla Firefox 4.0.x Mozilla Firefox 3.x Mozilla Thunderbird 3.x...
RedHat Update for seamonkey RHSA-2011:0888-01
Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2011:0888-01 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...
CVE-2011-2377
Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via a multipart/x-mixed-replace image...
CVE-2011-0083
Use-after-free vulnerability in the nsSVGPathSegList::ReplaceItem function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service application crash or possibly execut...
CVE-2011-2363
Use-after-free vulnerability in the nsSVGPointList::AppendElement function in the implementation of SVG element lists in Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 allows remote attackers to cause a denial of service application crash or possibly execut...
RedHat Update for seamonkey RHSA-2011:0888-01
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...
CVE-2011-2362
Mozilla Firefox before 3.6.18, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14 do not distinguish between cookies for two domain names that differ only in a trailing dot, which allows remote web servers to bypass the Same Origin Policy via Set-Cookie headers...
CVE-2011-2373
Use-after-free vulnerability in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, Thunderbird before 3.1.11, and SeaMonkey through 2.0.14, when JavaScript is disabled, allows remote attackers to execute arbitrary code via a crafted XUL document...
