Mozilla Firefox 'NPObject'访问远程代码执行漏洞

Bugraq ID: 35360 CVE ID：CVE-2009-1837 CNCVE ID：CNCVE-20091837 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox访问NPObject JS封装类对象的私有数据时存在竞争条件错误，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 当访问NPObject属性一个封装的JSObject时NPObjWrapperNewResolve存在竞争条件错误，在装载Java...

Slackware 12.2 / current : mozilla-firefox (SSA:2009-167-01)

New mozilla-firefox packages are available for Slackware 12.2, and -current to fix security issues. The updated packages may also be used with Slackware 11.0 or newer. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

Mozilla Firefox Multiple Vulnerability Jun-09 (Linux)

The host is installed with Firefox Browser, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbfirefoxmultvulnjun09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Vulnerabilities Jun-09 Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbon...

RedHat Security Advisory RHSA-2009:1095

The remote host is missing updates announced in advisory RHSA-2009:1095. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

CVE-2009-1837

CVE-2009-1837 describes a race condition in Mozilla Firefox 3 before 3.0.11 within NPObjWrapper_NewResolve in nsJSNPRuntime.cpp of xul.dll. The vulnerability could allow remote code execution via a page transition during Java applet loading, related to a use-after-free involving memory tied to a ...

RHEL 4 / 5 : firefox (RHSA-2009:1095)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

Gentoo Security Advisory GLSA 200805-19 (clamav)

The remote host is missing updates announced in advisory GLSA 200805-19. OpenVAS Vulnerability Test $ Description: Auto generated from Gentoo's XML based advisory Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc. http://www.securityspace.com Text descriptions are largely excerpted fr...

Gentoo Security Advisory GLSA 200805-19 (clamav)

The remote host is missing updates announced in advisory GLSA 200805-19. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE 10 Security Update : clamav (clamav-5199)

This version upgrade of ClamAV to 0.93 fixes a long list of vulnerabilities. These vulnerabilities can lead to remote code execution, bypassing the scanning engine, remote denial-of-service, local file overwrite. CVE-2008-1837, CVE-2008-1836, CVE-2008-1835, CVE-2008-1833, CVE-2008-1387,...

CVE-2008-1837

libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service crash via crafted RAR files that trigger "memory problems," as demonstrated by the PROTOS GENOME test suite for Archive Formats...

CVE-2008-1837

CVE-2008-1837 affects ClamAV (libclamunrar) prior to 0.93. The vulnerability allows remote attackers to crash the scanner by providing crafted RAR files that trigger memory problems, as demonstrated by the PROTOS GENOME test suite for Archive Formats. The issue is addressed in ClamAV 0.93 and rel...

CVE-2007-1837

MangoBery CMS 0.5.5 is affected by multiple PHP remote file inclusion vulnerabilities. The flaw allows an attacker to supply a URL in the Site_Path parameter to (1) boxes/quotes.php or (2) templates/mangobery/footer.sample.php) to execute arbitrary PHP code remotely. The NVD entry lists CVSS v2 b...

CVE-2006-1837

The CVE-2006-1837 entry describes a SQL injection in Fuju News 1.0, specifically in archiv2.php, where the ID parameter allows remote attackers to execute arbitrary SQL commands. The vulnerability is due to improper input handling, with a CVSS2 base score of 7.5 (HIGH) and network attack vector w...

CVE-2004-1837

CVE-2004-1837 affects Mod_survey versions 3.0.x prior to 3.0.16-pre2 and 3.2.x prior to 3.2.0-pre4, which are vulnerable to cross-site scripting (XSS). The flaw allows remote attackers to inject arbitrary web script or HTML through certain survey fields or error messages when query strings are ma...