SLES10: Security update for Mozilla XULRunner

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-xulrunner190 mozilla-xulrunner190-gnomevfs mozilla-xulrunner190-translations More details may also be found by searching for the SuSE Enterprise Serv...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1499)

The Mozilla Firefox browser was updated to version 3.0.0.15 to fix various bugs and security issues. Following security issues have been fixed: MFSA 2009-52 / CVE-2009-3370: Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar...

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1499)

The Mozilla Firefox browser was updated to version 3.0.0.15 to fix various bugs and security issues. Following security issues have been fixed: MFSA 2009-52 / CVE-2009-3370: Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar...

SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 6606)

The Mozilla Firefox browser was updated to version 3.5.4 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to theft....

SuSE 11 Security Update : Mozilla Firefox (SAT Patch Number 1488)

The Mozilla Firefox browser was updated to version 3.5.4 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to theft....

SuSE 11 Security Update : Mozilla XULRunner (SAT Patch Number 1493)

The Mozilla XULRunner engine was updated to version 1.9.0.15 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to...

Mozilla Firefox Multiple Memory Corruption Vulnerabilities Nov-09 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple Memory Corruption vulnerabilities. OpenVAS Vulnerability Test $Id: gbfirefoxmultmemcrptnvulnnov09win.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Memory Corruption Vulnerabilities Nov-09 Windows Authors:...

Mozilla Firefox Multiple Memory Corruption Vulnerabilities (Nov 2009) - Windows

Mozilla Firefox is prone to multiple Memory Corruption vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2009-3371

CVE-2009-3371 is a use-after-free vulnerability in Mozilla Firefox 3.5.x that can cause a denial of service or remote code execution when a JavaScript web worker is recursively created. A fix was released in Firefox 3.5.4 (MFSA 2009-54), and multiple advisories confirm the issue affected Firefox/...

Directory traversal

Directory traversal vulnerability in TalkBack 2.3.6 and 2.3.6.4 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the language parameter to comments.php, a different vector than CVE-2008-3371...

CVE-2008-3371

Directory traversal vulnerability in install/help.php in TalkBack 2.3.5, and other versions before 2.3.6.2, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the language parameter...

CVE-2008-3371

CVE-2008-3371 - Vulnerability in TalkBack 2.3.5 and earlier than 2.3.6.2 where the installer’s language parameter in install/help.php can be manipulated to perform directory traversal, allowing remote inclusion and execution of local files. The issue is a classic local file inclusion due to impro...

CVE-2008-3371

creationtimestamp| type| source ---|---|--- 2008-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/6148...

Fedora 7 : dbmail-2.2.9-1.fc7 (2008-3371)

Fix possible authentication bypass in authldap authentication module when dbmail is used with LDAP servers allowing anonymous logins - CVE-2007-6714 443019. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Immunity Canvas: POWL_INCLUDE

Name| powlinclude ---|--- CVE| CVE-2007-3371 Exploit Pack| CANVAS Description| POWL Include Notes| CVSS: 7.5 Repeatability: Infinite VENDOR: Powl CVE Url: http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-3371 CVE Name: CVE-2007-3371...

CVE-2007-3371

The CVE-2007-3371 entry concerns Powl 0.94 and its htmledit.php in plugins/widgets/htmledit. The root cause is a PHP remote file inclusion vulnerability via the _POWL[installPath] parameter, enabling a remote attacker to execute arbitrary PHP code if a crafted URL is used. This is supported by th...

CVE-2007-3371

PHP remote file inclusion vulnerability in plugins/widgets/htmledit/htmledit.php in Powl 0.94 allows remote attackers to execute arbitrary PHP code via a URL in the POWLinstallPath parameter...

CVE-2006-3371

Eupla Foros 1.0 stores the inc/config.inc file under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information, including the database configuration...

CVE-2005-3371

The CVE-2005-3371 entry describes a vulnerability in AVG 7.0.323 labeled the “magic byte bug.” A multiple interpretation error occurs when scanning files like BAT, HTML, and EML that start with an MZ (EXE) signature, causing such files to be treated as safe type yet still executable by end-system...