seamonkey security update

CentOS Errata and Security Advisory CESA-2010:0810 Updated seamonkey packages that fix one security issue are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS...

Mozilla Firefox - Simplified Memory Corruption (PoC)

Mozilla Firefox - Simplified Memory Corruption PoC Hi there, For those who still do not know .. The proof of concept that I have extracted for CVE-2010-3765 is the following: function Gstr var cobj=document.createElementstr; document.body.appendChildcobj; cobj.scrollWidth; function crashme...

CVE-2010-3765

creationtimestamp| type| source ---|---|--- 2010-10-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15342 2010-10-28 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15341 2010-10-29 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/15352 2011-02-22...

RHEL 3 / 4 : seamonkey (RHSA-2010:0810)

Updated SeaMonkey packages that fix one security issue are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Mozilla Firefox - Simplified Memory Corruption (PoC)

Hi there, For those who still do not know .. The proof of concept that I have extracted for CVE-2010-3765 is the following: function Gstr var cobj=document.createElementstr; document.body.appendChildcobj; cobj.scrollWidth; function crashme document.write"fooFOO"; G"a"; document.write"a"; G"base";...

xulrunner security update

1.9.2.11-4.0.1.el55 - Added xulrunner-oracle-default-prefs.js and removed the corresponding RedHat one. 1.9.2.11-4.el55 - Add upstream patch for CVE-2010-3765...

Immunity Canvas: FIREFOX_APPENDCHILD

Name| firefoxappendchild ---|--- CVE| CVE-2010-3765 Exploit Pack| CANVAS Description| firefoxappendchild Notes| CVE Name: CVE-2010-3765 VENDOR: Mozilla Notes: Interleaving document.write and appendChild can lead to duplicate text frames and overrunning of text run buffers. This exploit can only b...

firefox security update

3.6.11-4.0.1.el48 - Add firefox-oracle-default-prefs.js and firefox-oracle-default-bookmarks.html and remove the corresponding Red Hat ones 3.6.11-4.el48 - Add upstream patch for CVE-2010-3765...

RHEL 4 : firefox (RHSA-2010:0808)

An updated firefox package that fixes one security issue is now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix one security issue are now available for Red Hat Enterprise Linux 3 and 4. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating...

Critical: Red Hat Security Advisory: xulrunner security update

Updated xulrunner packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having critical security impact. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is...

CVE-2010-3765

CVE-2010-3765 is a remote code execution/memory corruption vulnerability in Mozilla’s browser stack (Firefox, SeaMonkey, Thunderbird) triggered when JavaScript runs. Technical root cause involves DOM/frame construction logic, including nsCSSFrameConstructor::ContentAppended, the appendChild path,...

Mozilla Firefox Interleaved document.write/appendChild Memory Corruption

This module exploits a code execution vulnerability in Mozilla Firefox caused by interleaved calls to document.write and appendChild. This module was written based on a live exploit found in the wild. Module Options msf use exploit/windows/browser/mozilla/interleavedwrite msf...

Fedora 13 : sunbird-1.0-0.27.b2pre.fc13 / thunderbird-3.1.2-1.fc13 (2010-13129)

Update to new upstream Thunderbird version 3.1.2, fixing a security issue detailed in the upstream advisory: http://www.mozilla.org/security/announce/2010/mfsa2010-48.html Update also includes sunbird package rebuilt against new version of Thunderbird. Note that Tenable Network Security has...

CVE-2009-3765

muttssl.c in mutt 1.5.19 and 1.5.20, when OpenSSL is used, does not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...

CVE-2008-3765

creationtimestamp| type| source ---|---|--- 2008-11-12 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7105...

CVE-2007-3765

The CVE-2007-3765 entry corresponds to a remote crash vulnerability in Asterisk’s STUN implementation. Affected are Asterisk Open Source 1.4.x before 1.4.8, AsteriskNOW before beta7, Appliance Developer Kit before 0.5.0, and s800i before 1.0.2. The flaw arises when parsing inbound STUN attributes...

CVE-2006-3765

Multiple cross-site scripting XSS vulnerabilities in Huttenlocher Webdesign hwdeGUEST 2.1.1 and earlier allow remote attackers to inject arbitrary web script or HTML via unspecified vectors, as demonstrated by the "name input" field in newentry.php...

CVE-2006-3765

CVE-2006-3765 pertains to multiple cross-site scripting (XSS) vulnerabilities in Huttenlocher Webdesign hwdeGUEST 2.1.1 and earlier. The affected component is the hwdeGUEST web application, with the issue described as XSS via unspecified vectors, demonstrated specifically by the "name input" fiel...

CVE-2005-3765

CVE-2005-3765 affects Exponent CMS 0.96.3 and later, where uploading files triggers a chmod to give execute permissions, enabling remote attackers to run arbitrary code. Multiple connected sources confirm the affected product and the root cause (permissions on uploaded files) leading to code exec...