firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2013:1140 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVS...

CVE-2013-1709

Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderbird before 17.0.8, Thunderbird ESR 17.x before 17.0.8, and SeaMonkey before 2.20 do not properly handle the interaction between FRAME elements and history, which allows remote attackers to conduct cross-site scripting XSS attack...

CVE-2013-1709

CVE-2013-1709 is a Firefox/XUL/SeaMonkey family XSS issue caused by improper handling of FRAME elements and history, allowing remote attackers to spoof a relative location in a previously visited document. Affected products are Mozilla Firefox before 23.0, Firefox ESR 17.x before 17.0.8, Thunderb...

Ubuntu Update for nova USN-1709-1

Check for the Version of nova OpenVAS Vulnerability Test $Id: gbubuntuUSN17091.nasl 8672 2018-02-05 16:39:18Z teissa $ Ubuntu Update for nova USN-1709-1 Authors: System Generated Check Copyright: Copyright c 2013 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you...

Ubuntu: Security Advisory (USN-1709-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.10 / 12.04 LTS / 12.10 : nova vulnerability (USN-1709-1)

Phil Day discovered that nova-volume did not validate access to volumes. An authenticated attacker could exploit this to bypass intended access controls and boot from arbitrary volumes. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu...

Scientific Linux Security Update : kdegraphics on SL5.x i386/x86_64

A use-after-free flaw was found in the KDE KSVG animation element implementation. A remote attacker could create a specially crafted SVG image, which once opened by an unsuspecting user, could cause a denial of service Konqueror crash or, potentially, execute arbitrary code with the privileges of...

Design/Logic Flaw

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1709...

CVE-2012-1709

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1710...

CVE-2012-1709

CVE-2012-1709 targets Oracle WebCenter Forms Recognition via the CroProj.dll ActiveX control. The vulnerability stems from insufficient input validation, enabling a remote attacker to trigger a directory traversal that could yield arbitrary code execution in the context of the target browser when...

CVE-2012-1709

Unspecified vulnerability in the Oracle WebCenter Forms Recognition component in Oracle Fusion Middleware 10.1.3.5 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to Designer, a different vulnerability than CVE-2012-1710. Recent...

Fedora Update for gdm FEDORA-2011-7822

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

CVE-2011-1709

CVE-2011-1709 affects GNOME Display Manager (gdm) before 2.32.2 when used with glib 2.28. It allows a local attacker to escalate privileges by causing gdm to launch a web browser as the gdm user via the x-scheme-handler/http MIME type. Affected component: gdm; root cause: insecure handling of URL...

Fedora 15 : gdm-3.0.4-1.fc15 (2011-7822)

This update fixes a flaw that can lead to web browser at the login screen if policykit policies are changed to be more restrictive than defaults. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

[USN-1142-1] GDM vulnerability

========================================================================== Ubuntu Security Notice USN-1142-1 June 01, 2011 gdm vulnerability ========================================================================== A security issue affects these releases of Ubuntu and its derivatives: - Ubuntu...

CVE-2011-1709

GNOME Display Manager gdm before 2.32.2, when glib 2.28 is used, enables execution of a web browser with the uid of the gdm account, which allows local users to gain privileges via vectors involving the x-scheme-handler/http MIME type...

openSUSE Security Update : kdegraphics3 (openSUSE-SU-2010:1035-1)

Various pointer dereferencing vulnerabilities in kdegraphics3's KSVG have been fixed. CVE-2009-1709 and CVE-2009-0945 have been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...

Mandriva Update for kdegraphics MDVSA-2010:182 (kdegraphics)

Check for the Version of kdegraphics OpenVAS Vulnerability Test Mandriva Update for kdegraphics MDVSA-2010:182 kdegraphics Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Linux Security Advisory : kdegraphics (MDVSA-2010:182)

A vulnerability has been found and corrected in kdegraphics ksvg : Use-after-free vulnerability in the garbage-collection implementation in WebCore in WebKit in Apple Safari before 4.0 allows remote attackers to execute arbitrary code or cause a denial of service heap corruption and application...

CVE-2010-1709

The CVE-2010-1709 entry pertains to multiple XSS vulnerabilities in the upload.cgi handler of G5-Scripts Auto-Img-Gallery 1.1. The underlying issue is input handling in the upload.cgi script, allowing an attacker to inject arbitrary web script or HTML via the (1) user and (2) pass parameters. Aff...