Firefox Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toString

Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for 1 XMLHttpRequest, involving a mismatch for a document's principal, and 2 XPCNativeWrapper.toString, involving an incorrect proto scope, which allows remote attackers to conduct cross-site...

firefox: does not properly prevent the literal rendering of homoglyph characters in IDN domain names (spoof URLs and conduct phishing attacks)

The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...

view-source: protocol

The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to 1 bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; 2 read, create, or modify...

Firefox 2 and 3 JavaScript engine crash

The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service application crash and possibly trigger memory corruption via vectors involving JSOPDEFVAR and properties that lack the JSPROPPERMANE...

Firefox POST data sent to wrong site when saving web page with embedded frame

Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODEFILEONLY save of the inner frame...

seamonkey security update

1.0.9-41.0.1.el4 - Added mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-41.el4 - Added fixes from 1.9.0.9...

SeaMonkey < 1.1.16 XSL Transformation Overflow DoS

Binary data 4988.prm...

Slackware 11.0 / 12.0 / 12.1 / 12.2 / current : seamonkey (SSA:2009-103-01)

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2009-103-01. The text itself ...

seamonkey

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found on the Mozilla web site: http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html Here are the details from the Slackware 12.2...

SeaMonkey < 1.1.16 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.16. Such versions are potentially affected by the following security issues : - An XSL transformation vulnerability can be leveraged with a specially crafted stylesheet to crash the browser or to execute arbitrary code. MFSA 2009-12 - Multipl...

Mozilla Seamonkey XSL Parsing Vulnerability (Linux)

The host is installed with Mozilla Seamnkey and is prone to XSL File Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbseamonkeyxslparsingvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey XSL Parsing Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbo...

Mozilla Seamonkey XSL Parsing Vulnerability (Windows)

The host is installed with Mozilla Seamnkey and is prone to XSL File Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbseamonkeyxslparsingvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey XSL Parsing Vulnerability Windows Authors: Sharath S Copyright: Copyright c 2009...

Mozilla Seamonkey < 1.1.16 XSL Parsing Vulnerability - Linux

Mozilla Seamonkey is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Seamonkey < 1.1.16 XSL Parsing Vulnerability - Windows

Mozilla Seamonkey is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Core 9 FEDORA-2009-3101 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-3101. OpenVAS Vulnerability Test $Id: fcore20093101.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3101 seamonkey Authors: Thomas Reinke Copyright: Copyright c 200...

RedHat Security Advisory RHSA-2009:0398

The remote host is missing updates announced in advisory RHSA-2009:0398. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A memory corruption flaw was discovered in the way SeaMonkey handles XML files containing an XSLT transform. A remote...

CentOS Security Advisory CESA-2009:0398 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:0398. CESA-2009:0398 63754 4 $Id: ovcesa20090398.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0398 seamonkey Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CentOS Security Advisory CESA-2009:0398-01 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:0398-01. CESA-2009:0398-01 63753 1 $Id: ovcesa2009039801.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0398-01 seamonkey Authors: Thomas Reinke Copyright: Copyright c 20...

Fedora Core 10 FEDORA-2009-3161 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-3161. OpenVAS Vulnerability Test $Id: fcore20093161.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3161 seamonkey Authors: Thomas Reinke Copyright: Copyright c 200...

CentOS Security Advisory CESA-2009:0398-01 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:0398-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...