[SECURITY] [DSA 1797-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1797-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff May 09, 2009 http://www.debian.org/security/faq -...

Memory corruption

The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service memory corruption and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an...

Fedora Core 10 FEDORA-2009-3893 (epiphany)

The remote host is missing an update to epiphany announced via advisory FEDORA-2009-3893. OpenVAS Vulnerability Test $Id: fcore20093893.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3893 epiphany Authors: Thomas Reinke Copyright: Copyright c 2009...

RedHat Security Advisory RHSA-2009:0436

The remote host is missing updates announced in advisory RHSA-2009:0436. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

Fedora Core 10 FEDORA-2009-3893 (epiphany)

The remote host is missing an update to epiphany announced via advisory FEDORA-2009-3893. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by t...

Fedora Core 9 FEDORA-2009-3875 (firefox)

The remote host is missing an update to firefox announced via advisory FEDORA-2009-3875. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Fedora 10 : Miro-2.0.3-3.fc10 / blam-1.8.5-9.fc10 / devhelp-0.22-7.fc10 / epiphany-2.24.3-5.fc10 / etc (2009-3893)

http://www.mozilla.org/security/known- vulnerabilities/firefox30.htmlfirefox3.0.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2009:0436 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open sour...

Fedora 9 : Miro-2.0.3-3.fc9 / blam-1.8.5-8.fc9.1 / chmsee-1.0.1-11.fc9 / devhelp-0.19.1-11.fc9 / etc (2009-3875)

http://www.mozilla.org/security/known- vulnerabilities/firefox30.htmlfirefox3.0.9 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without...

CVE-2009-1302

The CVE-2009-1302 entry affects Mozilla Firefox 3.x prior to 3.0.9, Thunderbird prior to 2.0.0.22, and SeaMonkey prior to 1.1.16. The vulnerability enables remote attackers to trigger a denial of service (application crash) and potentially memory corruption via multiple vectors, including nsAsync...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

SeaMonkey < 1.1.16 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.16. Such versions are potentially affected by the following security issues : - An XSL transformation vulnerability can be leveraged with a specially crafted stylesheet to crash the browser or to execute arbitrary code. MFSA 2009-12 - Multipl...

FreeBSD Ports: yamt

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: yamt

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: yamt

The remote host is missing an update to the system as announced in the referenced advisory. VID d4a7054a-6d96-11d9-a9e7-0001020eed82 OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

CVE-2008-1302

The CVE-2008-1302 entry affects Perforce Server 2007.3/143793 and earlier, specifically the Perforce service (p4s.exe). The vulnerability arises when handling the server-DiffFile or server-ReleaseFile commands with a large integer value, which is used in an array initialization calculation and le...

Debian DSA-1302-1 : freetype - integer overflow

A problem was discovered in freetype, a FreeType2 font engine, which could allow the execution of arbitrary code via an integer overflow in specially crafted TTF files. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

CVE-2007-1302

SQL injection vulnerability in guestbook.php in LI-Guestbook 1.1, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the country parameter. NOTE: it was later reported that 1.2 is also affected...

CVE-2007-1302

CVE-2007-1302 affects LI-Guestbook versions 1.1 and 1.2. The vulnerability is a SQL injection in guestbook.php triggered via the country parameter when magic_quotes_gpc is disabled. Remote attackers could potentially execute arbitrary SQL commands as described across multiple sources, with the no...

CVE-2006-1302

Buffer overflow in Microsoft Excel 2000 through 2003 allows user-assisted attackers to execute arbitrary code via a .xls file with certain crafted fields in a SELECTION record, which triggers memory corruption, aka "Malformed SELECTION record Vulnerability."...