Firefox document.getSelect跨域信息泄露漏洞

BUGTRAQ ID: 36858 CVE ID: CVE-2009-3375 Firefox是一款流行的开源WEB浏览器。 Firefox的content/html/document/src/nsHTMLDocument.cpp允许远程攻击者通过document.getSelection函数绕过同源策略，读取其他域中的高亮显示的文本。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1922-1）以及相应补丁: DSA-1922-1：New xulrunner...

Mozilla Firefox Multiple Vulnerabilities (Nov 2009) - Linux

Mozilla Firefox is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

CVE-2009-3375

content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via the document.getSelection function...

CVE-2009-3375

CVE-2009-3375 affects Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4. The issue allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection via document.getSelection. The connected MiracleLinux advisory lists CVE-2009-3375 among fixed...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:1531 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source W...

RHEL 4 / 5 : firefox (RHSA-2009:1530)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1530 advisory. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. nspr provides the...

RHEL 4 : seamonkey (RHSA-2009:1531)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1531 advisory. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A flaw was found in the way SeaMonkey...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

CVE-2008-3375

The vulnerability CVE-2008-3375 affects JamRoom prior to version 3.4.0. The jrCookie function in includes/jamroom-misc.inc.php allows remote attackers to bypass authentication and gain administrative access by manipulating a boolean value within serialized data in a JMU_Cookie cookie. This result...

CVE-2008-3375

creationtimestamp| type| source ---|---|--- 2008-07-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/32121...

CVE-2007-3375

CVE-2007-3375: Lhaca File Archiver before 1.21 is affected by a stack-based buffer overflow in a crafted LZH archive, allowing user-assisted remote code execution. The vulnerability is exploited by malware such as Trojan.Lhdropper. Impact details indicate arbitrary code execution with user intera...

CVE-2006-3375

CVE-2006-3375 affects Randshop 1.1.1, where a PHP remote file inclusion flaw exists in includes/header.inc.php. The vulnerability, triggered via the dateiPfad parameter, allows remote attackers to execute arbitrary PHP code on the affected system. The root cause is a mis-validated parameter used ...

CVE-2005-3375

CVE-2005-3375 involves an interpretation error in the Ikarus demo version where a file with a BAT/HTML/EML content containing an MZ magic-byte is treated as a safe type, enabling a remote attacker to bypass virus scanning. The vulnerability is demonstrated by a “triple headed” program containing ...