MozillaFirefox (critical)

MozillaFirefox has been updated to version 3.6.24 to fix the following security issues: MFSA 2011-46/CVE-2011-3647 bmo680880 loadSubScript unwraps XPCNativeWrapper scope parameter MFSA 2011-47/CVE-2011-3648 bmo690225 Potential XSS against sites using Shift-JIS MFSA 2011-49/CVE-2011-3650 bmo674776...

Mozilla Products XSS and Memory Corruption Vulnerabilities (MAC OS X)

The host is installed with Mozilla firefox/thunderbird and is prone to cross site scripting and memory corruption vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsxssnmemcrptnvulnmacosx.nasl 7052 2017-09-04 11:50:51Z teissa $ Mozilla Products XSS and Memory Corruption Vulnerabilitie...

Debian DSA-2345-1 : icedove - several vulnerabilities

Several vulnerabilities have been discovered in Icedove, a mail client based on Thunderbird. - CVE-2011-3647 The JSSubScriptLoader does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a...

[SECURITY] [DSA 2345-1] icedove security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2345-1 [email protected] http://www.debian.org/security/ Florian Weimer November 11, 2011 http://www.debian.org/security/faq -...

Mandriva Update for mozilla MDVSA-2011:169 (mozilla)

Check for the Version of mozilla OpenVAS Vulnerability Test Mandriva Update for mozilla MDVSA-2011:169 mozilla Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it unde...

Ubuntu Update for firefox USN-1251-1

Ubuntu Update for Linux kernel vulnerabilities USN-1251-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN12511.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for firefox USN-1251-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...

CentOS Update for firefox CESA-2011:1437 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Ubuntu: Security Advisory (USN-1251-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2011:1437 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring Syste...

[SECURITY] [DSA 2341-1] iceweasel security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2341-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 09, 2011 http://www.debian.org/security/faq -...

CVE-2011-3650

CVE-2011-3650 affects Mozilla Firefox versions prior to 3.6.24 and 4.x through 7.0, and Thunderbird prior to 3.1.6 and 5.0 through 7.0. The issue arises from how JavaScript files that contain many functions are handled when accessed via debugging APIs, enabling a user‑assisted attacker to trigger...

Firefox 3.6 < 3.6.24 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox 3.6 is earlier than 3.6.24. Such versions are potentially affected by the following security issues : - There is an error within the JSSubScriptLoader that incorrectly unwraps 'XPCNativeWrappers'. By tricking a user into installing a malicious plug-in, an attacker...

RHEL 6 : firefox (RHSA-2011:1437)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1437 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A flaw was found in the w...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

openSUSE Security Update : flash-player (flash-player-3474)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639 CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650...

openSUSE Security Update : flash-player (flash-player-3474)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. CVE-2010-3636 CVE-2010-3637 CVE-2010-3638 CVE-2010-3639 CVE-2010-3640 CVE-2010-3641 CVE-2010-3642 CVE-2010-3643 CVE-2010-3644 CVE-2010-3645 CVE-2010-3646 CVE-2010-3647 CVE-2010-3648 CVE-2010-3649 CVE-2010-3650...

SuSE 11 / 11.1 Security Update : GnuTLS (SAT Patch Numbers 3650 / 3651)

The SSL-renegotiation 'authentication gap' has been fixed in GnuTLS. CVE-2009-3555 has been assigned to this issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is...

SuSE 11 / 11.1 Security Update : flash-player (SAT Patch Numbers 3475 / 3477)

Adobe Flash Player was updated to version 10.1.102.64 to fix a critical security issue. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from SuSE 11 update information. The text itself is copyright C Novell, Inc. if...

RHEL 6 : flash-plugin (RHSA-2010:0867)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2010:0867 advisory. - flash-plugin: security bulletin APSB10-26 CVE-2010-3636, CVE-2010-3639, CVE-2010-3640, CVE-2010-3641, CVE-2010-3642, CVE-2010-3643,...

Adobe Flash Player Multiple Vulnerabilities (Linux)

This host is installed with Adobe Flash Player and is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeflashplayermultvulnnov10lin.nasl 5263 2017-02-10 13:45:51Z teissa $ Adobe Flash Player Multiple Vulnerabilities Linux Authors: Sooraj KS Copyright: Copyright...