Mozilla violation of same-origin policy due to properties set on objects passed to showModalDialog (MFSA 2010-04)

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via crafted...

firefox/thunderbird/seamonkey: crashes with evidence of memory corruption (MFSA 2010-11)

The browser engine in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service memory corruption and application crash and possibly execute arbitrary code via vectors...

Mozilla crashes with evidence of memory corruption (MFSA 2010-01)

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the...

firefox/thunderbird/seamonkey: XSS using addEventListener and setTimeout on a wrapped object (MFSA 2010-12)

Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 allow remote attackers to perform cross-origin keystroke capture, and possibly conduct cross-site scripting XSS attacks, by using the addEventListener and setTimeo...

seamonkey security update

1.0.9-52.0.1.el48 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and removed corresponding RedHat ones 1.0.9-52.el4 - Added fixes from 1.9.0.18...

CVE-2010-0162

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote...

CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via crafted...

CVE-2009-1571

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory...

CVE-2010-0160

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

CVE-2010-0159

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the...

Firefox 3.5.6 Denial Of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

SeaMonkey 2.0.1 Denial Of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

Safari v4.0.4, Firefox v3.5.6, SeaMonkey v2.0.1 Remote Denial of Service

No description provided by source. !-- Safari 4.0.4 Remote Denial of Service With Possible Memory Corruption With OOM Firefox 3.5.6 Safari 4.0.4 SeaMonkey 2.0.1 Author : 599eme Man Contact : [email protected] -- body onload="javascript:DoS;"/body script function DoS var buffer = 'A'; for i =0;i150;i+...

Safari 4.0.4 Denial Of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

Apple Safari 4.0.4 Firefox 3.5.7 SeaMonkey 2.0.1 - Remote Denial of Service

Apple Safari 4.0.4 Firefox 3.5.7 SeaMonkey 2.0.1 - Remote Denial of Service function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 - Remote Denial of Service

Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/38132/info Mozilla Firefox and SeaMonkey are prone to a remote denial-of-service vulnerability. Successful exploits may allow an attacker to crash the affected browser, resulting in a...

Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/38132/info Mozilla Firefox and SeaMonkey are prone to a remote denial-of-service vulnerability. Successful exploits may allow an attacker to crash the affected browser, resulting in a denial-of-service condition. Given the nature of this issue, memory...

Apple Safari 4.0.4 / Firefox 3.5.7 / SeaMonkey 2.0.1 - Remote Denial of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

Safari v4.0.4, Firefox v3.5.6, SeaMonkey v2.0.1, Opera v10.10 DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================================= Safari v4.0.4, Firefox v3.5.6, SeaMonkey v2.0.1, Opera v10.10 DoS Exploit ========================================================================= function DoS var buffer ...

Mozilla Products Information Disclosure Vulnerability (Windows)

The host is installed with Firefox/Seamonkey and is prone to Information Disclosure vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsdnsinfodiscvulnwin.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Information Disclosure Vulnerability Windows Authors: Antu Sanadi Copyright:...