[BSA-027] Security Update for iceweasel

Mike Hommey uploaded new packages for iceweasel which fixed the following security problems: CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. CVE-2011-0053 Crashes in the layout engine may lead to the execution of arbitrary code...

Mozilla Products Multiple Vulnerabilities March-11 (Windows)

The host is installed with Mozilla Firefox/Seamonkey that are prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnwinmar11.nasl 7019 2017-08-29 11:51:27Z teissa $ Mozilla Products Multiple Vulnerabilities March-11 Windows Authors: Antu Sanadi Copyright:...

[SECURITY] [DSA 2186-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2186-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 09, 2011 http://www.debian.org/security/faq -...

Debian Security Advisory DSA 2180-1 (iceape)

The remote host is missing an update to iceape announced via advisory DSA 2180-1. OpenVAS Vulnerability Test $Id: deb21801.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2180-1 iceape Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. The following packages are affected: firefox libxul linux-firefox linux-firefox-devel linux-seamonkey linux-thunderbird seamonkey thunderbird VID 45f102cd-4456-11e0-9580-4061862b8c22 OpenVAS Vulnerability...

Debian: Security Advisory (DSA-2180-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mandriva Linux Security Advisory : firefox (MDVSA-2011:041)

Cross-site request forgery CSRF vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a...

Debian DSA-2180-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsing of...

[SECURITY] [DSA 2180-1] iceape security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2180-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 03, 2011 http://www.debian.org/security/faq -...

Mozilla Foundation Security Advisory 2011-03

Mozilla Foundation Security Advisory 2011-03 Title: Use-after-free error in JSON.stringify Impact: Critical Announced: March 1, 2011 Reporter: regenrecht Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Security researcher regenrecht reported via...

CVE-2011-0055

CVE-2011-0055 is a use-after-free in JSON.stringify in js3250.dll affecting Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12. The issue is related to the js_HasOwnProperty handling and garbage collection; exploitation details are not specified in the provided doc...

CVE-2011-0055

Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via unspecified vectors related to the jsHasOwnProperty function and garbage...

Fedora 12 : xar-1.5.2-6.fc12 (2010-7631)

This update fixes CVE-2010-0055, an issue where xar did not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

Fedora 13 : xar-1.5.2-6.fc13 (2010-7613)

This update fixes CVE-2010-0055, an issue where xar did not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisor...

Fedora Update for xar FEDORA-2010-7670

Check for the Version of xar OpenVAS Vulnerability Test Fedora Update for xar FEDORA-2010-7670 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the terms of t...

Fedora Update for xar FEDORA-2010-7670

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2010-0055

xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package...

CVE-2010-0055

CVE-2010-0055 concerns xar, with the Apple Mac OS X 10.5.8 signature-validation flaw allowing modification of a package to yield unspecified impact. Connected records confirm downstream fixes/upstream patches and package updates: Fedora advisories show xar upgrades to 1.6.1 (and note CVE-2010-005...

CVE-2010-0055

xar in Apple Mac OS X 10.5.8 does not properly validate package signatures, which allows attackers to have an unspecified impact via a modified package...

CentOS Update for kernel CESA-2008:0055 centos4 x86_64

Check for the Version of kernel OpenVAS Vulnerability Test CentOS Update for kernel CESA-2008:0055 centos4 x8664 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...