144 matches found
SuSE 11 Security Update : MozillaFirefox (SAT Patch Number 1134)
The Mozilla Firefox 3.0.12 release fixes various bugs and some critical security issues. - Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory...
RedHat Security Advisory RHSA-2009:1162
The remote host is missing updates announced in advisory RHSA-2009:1162. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...
Fedora Core 10 FEDORA-2009-7961 (blam)
The remote host is missing an update to blam announced via advisory FEDORA-2009-7961. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...
RedHat Security Advisory RHSA-2009:1162
The remote host is missing updates announced in advisory RHSA-2009:1162. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...
Debian: Security Advisory (DSA-1840-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
firefox, xulrunner security update
CentOS Errata and Security Advisory CESA-2009:1162 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open sour...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-1135)
The MozillaFirefox 3.0.12 release fixes various bugs and some critical security issues. MFSA 2009-34 / CVE-2009-2462 / CVE-2009-2463 / CVE-2009-2464 / CVE-2009-2465 / CVE-2009-2466: Mozilla developers and community members identified and fixed several stability bugs in the browser engine used in...
Mozilla Firefox MFSA存在多个安全漏洞
Bugraq ID: 35758 CVE ID：CVE-2009-1194 CVE-2009-2462 CVE-2009-2463 CVE-2009-2464 CVE-2009-2465 CVE-2009-2466 CVE-2009-2467 CVE-2009-2468 CVE-2009-2469 CVE-2009-2471 CVE-2009-2472 CNCVE ID：CNCVE-20091194 CNCVE-20092462 CNCVE-20092463 CNCVE-20092464 CNCVE-20092465 CNCVE-20092466 CNCVE-20092467...
[SECURITY] [DSA 1840-1] New xulrunner packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1840-1 [email protected] http://www.debian.org/security/ Steffen Joeris July 23, 2009 http://www.debian.org/security/faq -...
CVE-2009-2471
The setTimeout function in Mozilla Firefox before 3.0.12 does not properly preserve object wrapping, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted call, related to XPCNativeWrapper...
CVE-2009-2471
CVE-2009-2471 affects Mozilla Firefox before 3.0.12. The flaw in the setTimeout handling fails to preserve object wrapping, enabling remote attackers to run arbitrary JavaScript with chrome privileges via a crafted call (XPCNativeWrapper related). Affected product often cited with Firefox before ...
Critical: Red Hat Security Advisory: firefox security update
Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...
Mozilla Foundation Security Advisory 2009-39
Mozilla Foundation Security Advisory 2009-39 Title: setTimeout loses XPCNativeWrappers Impact: Critical Announced: July 21, 2009 Reporter: Blake Kaplan Products: Firefox Fixed in: Firefox 3.5 Firefox 3.0.12 Description Mozilla developer Blake Kaplan reported that setTimeout, when called with...
CVE-2007-2471
The CVE-2007-2471 entry describes a directory traversal vulnerability in Sendcard 3.4.1 and earlier, where sendcard.php allows remote attackers to read arbitrary files by supplying a full pathname in the form parameter. Affected software: Sendcard ≤ 3.4.1. Underlying cause: inadequate sanitizatio...
CentOS 3 / 4 : netpbm (CESA-2005:743)
Updated netpbm packages that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm...
[SECURITY] [DSA 1021-1] New netpbm-free packages fix arbitrary command execution
-------------------------------------------------------------------------- Debian Security Advisory DSA 1021-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff March 28th, 2006 http://www.debian.org/security/faq -...
RHEL 4 : netpbm (RHSA-2005:743)
The remote Redhat Enterprise Linux 4 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2005:743 advisory. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm portable bitmaps,...
Low: Red Hat Security Advisory: netpbm security update
Updated netpbm packages that fix a security issue are now available. This update has been rated as having low security impact by the Red Hat Security Response Team. The netpbm package contains a library of functions that support programs for handling various graphics file formats, including .pbm...
CVE-2004-2471
The CVE-2004-2471 entry describes an SQL injection in the sloth TCL script of QuoteEngine prior to 1.2.0, enabling remote attackers to execute arbitrary SQL via unknown vectors. The vulnerability affects the QuoteEngine component and is documented with a high impact score (base 7.5; Confidentiali...
