CVE-2010-0159

CVE-2010-0159 affects Mozilla-based browsers including Firefox 3.0.x (before 3.0.18) and 3.5.x (before 3.5.8), Thunderbird before 3.0.2, and SeaMonkey before 2.0.3. The vulnerability arises from memory-corruption in layout handling, specifically in nsBlockFrame::StealFrame and related vectors, al...

CVE-2010-0159

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the...

CVE-2010-0160

CVE-2010-0160 affects Mozilla Firefox 3.0.x prior to 3.0.18, Firefox 3.5.x prior to 3.5.8, and SeaMonkey prior to 2.0.3. The issue arises in Web Worker handling of array data types in posted messages, causing heap memory corruption and browser crash; remote attackers could potentially execute arb...

CVE-2009-1571

CVE-2009-1571 describes a use-after-free vulnerability in the HTML parser affecting Mozilla Firefox 3.0.x (before 3.0.18) and 3.5.x (before 3.5.8), Thunderbird before 3.0.2, and SeaMonkey before 2.0.3. The issue allows remote attackers to execute arbitrary code by triggering access to freed objec...

CVE-2009-3988

CVE-2009-3988 affects Mozilla Firefox 3.0.x (before 3.0.18), Firefox 3.5.x (before 3.5.8) and SeaMonkey before 2.0.3. The issue arises from not properly restricting read access to object properties in showModalDialog, allowing a crafted dialogArguments value to bypass the Same Origin Policy and e...

CVE-2010-0162

The CVE-2010-0162 issue affects Mozilla Firefox 3.0.x before 3.0.18, Firefox 3.5.x before 3.5.8, and SeaMonkey before 2.0.3. The root cause is improper handling of the application/octet-stream content type in contexts involving SVG and EMBED, allowing remote attackers to bypass Same Origin Policy...

CVE-2010-0162

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote...

CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via crafted...

[SECURITY] Fedora 12 Update: seamonkey-2.0.3-1.fc12

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

CentOS Update for seamonkey CESA-2010:0113 centos4 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0113 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS Update for seamonkey CESA-2010:0113 centos4 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0113 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Mozilla Foundation Security Advisory 2010-04

Mozilla Foundation Security Advisory 2010-04 Title: XSS due to window.dialogArguments being readable cross-domain Impact: Moderate Announced: February 17, 2010 Reporter: Hidetake Jo, TippingPoint ZDI Products: Firefox, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18 SeaMonkey 2.0.3...

RedHat Update for seamonkey RHSA-2010:0113-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2010:0113-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

RedHat Update for seamonkey RHSA-2010:0113-01

Check for the Version of seamonkey OpenVAS Vulnerability Test RedHat Update for seamonkey RHSA-2010:0113-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under t...

CentOS Update for seamonkey CESA-2010:0113 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0113 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

CentOS Update for seamonkey CESA-2010:0113 centos3 i386

Check for the Version of seamonkey OpenVAS Vulnerability Test CentOS Update for seamonkey CESA-2010:0113 centos3 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify ...

Mozilla Foundation Security Advisory 2010-05

Mozilla Foundation Security Advisory 2010-05 Title: XSS hazard using SVG document and binary Content-Type Impact: Moderate Announced: February 17, 2010 Reporter: Georgi Guninski Products: Firefox, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18 SeaMonkey 2.0.3 Description Mozilla...

Mozilla Foundation Security Advisory 2010-03

Mozilla Foundation Security Advisory 2010-03 Title: Use-after-free crash in HTML parser Impact: Critical Announced: February 17, 2010 Reporter: Alin Rad Pop Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18 Thunderbird 3.0.2 SeaMonkey 2.0.3 Description...

Mozilla Foundation Security Advisory 2010-01

Mozilla Foundation Security Advisory 2010-01 Title: Crashes with evidence of memory corruption rv:1.9.1.8/ 1.9.0.18 Impact: Critical Announced: February 17, 2010 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18...

Design/Logic Flaw

Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 permit cross-origin loading of CSS stylesheets even when the stylesheet download has an incorrect MIME type and the stylesheet document is malformed, which...