MozillaThunderbird: Update to Thunderbird 3.1.11 (important)

Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues: MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards MFSA 2011-20/CVE-2011-2373 bmo617247 Use-after-fre...

Crlf injection

CRLF injection vulnerability in the nsCookieService::SetCookieStringInternal function in netwerk/cookie/nsCookieService.cpp in Mozilla Firefox before 3.6.18 and 4.x through 4.0.1, and Thunderbird before 3.1.11, allows remote attackers to bypass intended access restrictions via a string containing...

CVE-2011-2374

CVE-2011-2374 is described as a set of multiple unspecified vulnerabilities in the Mozilla Firefox browser engine (affecting Firefox <3.6.18 and 4.x up to 4.0.1, and Thunderbird

Mozilla Firefox/Thunderbird内存破坏漏洞(CVE-2011-2374)

BUGTRAQ ID: 48361 CVE ID: CVE-2011-2374 Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。 Mozilla Firefox、Thunderbird在实现上存在内存破坏漏洞，远程攻击者可利用这些漏洞执行任意代码，可能会造成拒绝服务。 Mozilla Firefox 4.0.x Mozilla Firefox 3.x Mozilla Thunderbird 3.x Mozilla Thunderbird 2.x Mozilla SeaMonkey 2.x Mozil...

Ubuntu: Security Advisory (USN-1157-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-1157-3)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 11.04 : firefox vulnerabilities (USN-1157-1)

Bob Clary, Kevin Brosnan, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could possibly execute arbitrary code with the...

Mandriva Linux Security Advisory : mozilla (MDVSA-2011:111)

Security issues were identified and fixed in mozilla firefox and thunderbird : Security researcher regenrecht reported via TippingPoint's Zero Day Initiative two instances of code which modifies SVG element lists failed to account for changes made to the list by user-supplied callbacks before...

RHEL 4 : seamonkey (RHSA-2011:0888)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

RHEL 4 / 5 : thunderbird (RHSA-2011:0887)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2011:0887 advisory. Mozilla Thunderbird is a standalone mail and newsgroup client. A flaw was found in the way Thunderbird handled malformed JPEG images. An...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes several security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

Mozilla Thunderbird 3.1.x < 3.1.11 Multiple Vulnerabilities

Binary data 5966.prm...

Firefox 3.6 < 3.6.18 Multiple Vulnerabilities

The installed version of Firefox 3.6 is earlier than 3.6.18. Such versions are potentially affected by the following security issues : - Multiple memory safety issues can lead to application crashes and possibly remote code execution. CVE-2011-2374, CVE-2011-2376, CVE-2011-2364, CVE-2011-2365 - A...

Mozilla Thunderbird 3.1 < 3.1.11 Multiple Vulnerabilities

The installed version of Thunderbird 3.1 is earlier than 3.1.11. Such versions are potentially affected by the following security issues : - Multiple memory safety issues can lead to application crashes and possibly remote code execution. CVE-2011-2374, CVE-2011-2376, CVE-2011-2364, CVE-2011-2365...

CVE-2010-2374

CVE-2010-2374 affects Solaris Studio 12 Update 1. Description in sources indicates an unspecified local vulnerability that could affect confidentiality and integrity via unknown vectors, exploitable by a local user. The CVE entry is listed under Solaris Studio with fix/version note “12 update 1,”...

Debian DSA-1930-1 : drupal6 - several vulnerabilities

Several vulnerabilities have been found in drupal6, a fully-featured content management framework. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-2372 Gerhard Killesreiter discovered a flaw in the way user signatures are handled. It is possible for...

[SECURITY] [DSA 1930-1] New drupal6 packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1930-1 [email protected] http://www.debian.org/security/ Steffen Joeris November 07, 2009 http://www.debian.org/security/faq -...

openSUSE Security Update : bluez-audio (bluez-audio-100)

Missing length checks in bluez-libs could cause a buffer overflow in Bluetooth applications. Malicious bluetooth devices could potentially exploit that to execute arbitrary code CVE-2008-2374. Note: The source code of each application that uses vulnerable functions of bluez-libs needs to be adapt...

FreeBSD Ports: drupal5

The remote host is missing an update to the system as announced in the referenced advisory. VID be927298-6f97-11de-b444-001372fd0af2 OpenVAS Vulnerability Test $ Description: Auto generated from VID be927298-6f97-11de-b444-001372fd0af2 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Drupal Information Disclosure Vulnerability

Drupal is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:drupal:drupal";...