Mozilla Foundation Security Advisory 2006-74

Mozilla Foundation Security Advisory 2006-74 Title: Mail header processing heap overflows Impact: Critical Announced: December 19, 2006 Reporter: Georgi Guninski, David Bienvenu Products: Thunderbird, SeaMonkey Fixed in: Thunderbird 1.5.0.9 SeaMonkey 1.0.7 Description Georgi Guninski reported tha...

[Full-disclosure] ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability

ZDI-06-051: Mozilla Firefox SVG Processing Remote Code Execution Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-051.html December 19, 2006 -- CVE ID: CVE-2006-6504 -- Affected Vendor: Mozilla -- Affected Products: Mozilla Firefox 2.0.0.0 Mozilla Firefox 1.5.0.4 - 1.5.0.8 --...

Mozilla Foundation Security Advisory 2006-76

Mozilla Foundation Security Advisory 2006-76 Title: XSS using outer window's Function object Impact: High Announced: December 19, 2006 Reporter: mozbugra4 Products: Firefox 2.0 Fixed in: Firefox 2.0.0.1 Description mozbugra4 demonstrated that the Function prototype regression described in bug...

Mozilla Foundation Security Advisory 2006-70

Mozilla Foundation Security Advisory 2006-70 Title: Privilege escallation using watch point Impact: Critical Announced: December 19, 2006 Reporter: shutdown Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.1 Firefox 1.5.0.9 Thunderbird 1.5.0.9 SeaMonkey 1.0.7 Description Shutdown...

Mozilla Foundation Security Advisory 2006-68

Mozilla Foundation Security Advisory 2006-68 Title: Crashes with evidence of memory corruption rv:1.8.0.9/1.8.1.1 Impact: Critical Announced: December 19, 2006 Reporter: Mozilla Developers Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.1 Firefox 1.5.0.9 Thunderbird 1.5.0.9...

Mozilla Foundation Security Advisory 2006-69

Mozilla Foundation Security Advisory 2006-69 Title: CSS cursor image buffer overflow Windows only Impact: Critical Announced: December 19, 2006 Reporter: Frederik Reiss Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.1 Firefox 1.5.0.9 Thunderbird 1.5.0.9 SeaMonkey 1.0.7...

Mozilla Layout Engine vulnerability

Overview A vulnerability exists in the Mozilla Layout Engine that may allow a remote attacker to compromise a vulnerable system. Description The Mozilla Layout Engine contains an unspecified vulnerability that may result in memory corruption. The impact of this memory corruption is unclear...

Mozilla mail products vulnerable to heap buffer overflow via Content-Type headers

Overview Mozilla mail products contain a heap buffer overflow vulnerability in the way they process Content-Type headers. This may allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. Description Mozilla Thunderbird and SeaMonkey contain a buffer overflow...

Mozilla Foundation Security Advisory 2006-73

Mozilla Foundation Security Advisory 2006-73 Title: Mozilla SVG Processing Remote Code Execution Impact: Critical Announced: December 19, 2006 Reporter: TippingPoint and the Zero Day Initiative Products: Firefox 1.5.0.4, SeaMonkey Fixed in: Firefox 2.0.0.1 Firefox 1.5.0.9 SeaMonkey 1.0.7...

Moderate: Red Hat Security Advisory: tar security update

Updated tar packages that fix a path traversal flaw are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The GNU tar program saves many files together in one archive and can restore individual files or all of the files from that...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

CVE-2006-6639

Multiple unspecified vulnerabilities in chetcpasswd 2.4.1 allow local users to gain privileges via unspecified vectors related to executing 1 the cp program, 2 the mail program, or 3 the program specified in the postchange configuration line...

CVE-2006-6636

Unspecified vulnerability in the Utility Classes for IBM WebSphere Application Server WAS before 5.1.1.13 and 6.x before 6.0.2.17 has unknown impact and attack vectors...

CVE-2006-6636

IBM WebSphere Application Server Utility Classes vulnerability (CVE-2006-6636) affects WAS versions before 5.1.1.13 and 6.x before 6.0.2.17. The exact root cause and impact are not specified in the available documents, but multiple sources refer to an unspecified vulnerability in the Utility Clas...

CVE-2006-6640

Omniture SiteCatalyst is affected by multiple XSS vulnerabilities. Remote attackers can inject arbitrary script/HTML via the ss parameter in search.asp and via the company and username fields on the web login page. No root-cause/exploit details or remediation are provided in the supplied documents.

CVE-2006-6637

The CVE-2006-6637 entry applies to IBM WebSphere Application Server (WAS) 6.0.x prior to 6.0.2.17, where enabling fileServingEnabled via ibm-web-ext.xmi and enabling servlet caching allows remote attackers to obtain JSP source code and other sensitive information through specific requests. Connec...

CVE-2006-6639

CVE-2006-6639 affects chetcpasswd 2.4.1 and earlier. Red Hat entries describe an Untrusted search path vulnerability: local users can gain privileges by a modified PATH that references a malicious cp binary. This relates to the program execution context for chetcpasswd (and potentially the cp/mai...

CVE-2006-6638

CVE-2006-6638 affects IBM DB2 UDB 8.1 before FixPak 14. A remote attacker can trigger a denial of service by sending a crafted SQLJRA packet, leading to a NULL pointer dereference in the sqle_db2ra_as_recvrequest function in DB2ENGN.DLL. This is the same issue described in CVE-2006-4257 family bu...

CVE-2006-6106

Multiple buffer overflows in the cmtprecvinteropmsg function in the Bluetooth driver net/bluetooth/cmtp/capi.c in the Linux kernel 2.4.22 up to 2.4.33.4 and 2.6.2 before 2.6.18.6, and 2.6.19.x, allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via CAPI...