SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 5450)

MozillaFirefox was updated to version 2.0.0.16, which fixes various bugs and following security issues : - An anonymous researcher, via TippingPoint's Zero Day Initiative program, reported a vulnerability in Mozilla CSS reference counting code. The vulnerability was caused by an insufficiently...

USN-626-1: Firefox and xulrunner vulnerabilities

A flaw was discovered in the browser engine. A variable could be made to overflow causing the browser to crash. If a user were tricked into opening a malicious web page, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the...

[SECURITY] [DSA 1615-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1615-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff July 23, 2008 http://www.debian.org/security/faq -...

Fedora 8 : Miro-1.2.3-3.fc8 / blam-1.8.3-17.fc8 / cairo-dock-1.6.1.1-1.fc8.1 / chmsee-1.0.0-3.31.fc8 / etc (2008-6491)

Updated firefox packages that fix several security issues are now available for Fedora 8. An integer overflow flaw was found in the way Firefox displayed certain web content. A malicious website could cause Firefox to crash, or execute arbitrary code with the permissions of the user running...

Ubuntu 6.06 LTS / 7.04 / 7.10 : firefox vulnerabilities (USN-623-1)

A flaw was discovered in the browser engine. A variable could be made to overflow causing the browser to crash. If a user were tricked into opening a malicious web page, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the...

Mozilla Foundation Security Advisory 2008-35

Mozilla Foundation Security Advisory 2008-35 Title: Command-line URLs launch multiple tabs when Firefox not running Impact: Critical Announced: July 15, 2008 Reporter: Billy Rios, Ben Turner, Dan Veditz Products: Firefox Fixed in: Firefox 3.0.1 Firefox 2.0.0.16 Description Security researcher Bil...

Slackware 10.2 / 11.0 / 12.0 / 12.1 : mozilla-firefox (SSA:2008-198-01)

New mozilla-firefox packages are available for Slackware 10.2, 11.0, 12.0, and 12.1 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2008-198-01. The text itself is...

CVE-2008-2933

Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' pipe characters in a command-line URI as requests to open multiple tabs, which allows remote attackers to access chrome:i URIs, or read arbitrary local files via manipulations involving a series of URIs that is not entirely...

CVE-2008-3198

Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933...

Design/Logic Flaw

Mozilla Firefox 3.x before 3.0.1 allows remote attackers to inject arbitrary web script into a chrome document via unspecified vectors, as demonstrated by injection into a XUL error page. NOTE: this can be leveraged to execute arbitrary code using CVE-2008-2933...

CVE-2008-2933

CVE-2008-2933 describes a pipe character in a URL that can trigger Chrome privilege escalation in Iceape/Iceweasel Firefox-family products. Connected advisories confirm active fixes: Iceweasel/iceape upgrades to 2.0.0.16 (etch) and later 3.0.1–1 (sid) or equivalent patched builds; Iceweasel 2.0.0...

CentOS 4 : firefox (CESA-2008:0598)

An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. An integer overflow flaw was found in...

RHEL 5 : firefox (RHSA-2008:0597)

Updated firefox packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 16th July 2008 The nspluginwrapper package has been added to this advisory to...

RHEL 4 : firefox (RHSA-2008:0598)

An updated firefox package that fixes various security issues is now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. An integer overflow flaw was found in...

Mozilla Firefox URI拆分绕过安全限制漏洞

BUGTRAQ ID: 30242 CVECAN ID: CVE-2008-2933 Firefox是流行的开源WEB浏览器。 Firefox可以处理来自用户或程序可访问的命令行接口的URI，如果使用管道符号（“|”）通过命令行接口向Firefox传送了多个URI的话，就会在启动Firefox时在标签页中打开了URI。攻击者可以利用这个漏洞向Firefox传送应由其他应用所处理的URI。由于Firefox可能认为发送的URI来自于本地内容来源，因此远程内容可以绕过基于来源的安全限制。 Mozilla Firefox 3.x Mozilla Firefox 2.0.x Mozilla...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix various security issues are now available for Red Hat Enterprise Linux 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 16th July 2008 The nspluginwrapper package has been added to this advisory to...

CVE-2007-2933

SQL injection vulnerability in index.php in the Phil-a-Form comphilaform 1.2.0.0 and earlier component for Joomla! allows remote attackers to execute arbitrary SQL commands via the formid parameter...

CVE-2007-2933

The CVE-2007-2933 entry describes an SQL injection in the Phil-a-Form (com_philaform) Joomla! component. Affected version: 1.2.0.0 and earlier. Vulnerable component is index.php where attacker-supplied form_id can be used to inject and execute arbitrary SQL commands remotely. Impact as stated: pa...

kdebase security fix

3.1.3-5.11.0.1 - add /etc/enterprise-release 3.1.3-5.11 - kdesktoplock should not stay running if grabInput failed 177755, CVE-2006-2933...

RHEL 3 : kdebase (RHSA-2006:0576)

Updated kdebase packages that resolve a security issue are now available. This update has been rated as having moderate security impact by the Red Hat Security Response Team. The kdebase packages provide the core applications for KDE, the K Desktop Environment. A flaw was found in KDE where the...