Firefox showModalDialog()方法跨域脚本执行漏洞

CVE ID: CVE-2009-3988 Firefox是一款流行的开源WEB浏览器。 Firefox的同源策略实现上存在漏洞，远程攻击者可能通过使用showModalDialog JavaScript方法绕过权限限制，获取其他浏览网面的信息。 利用此漏洞需要一定的用户交互发生。 Mozilla Firefox 3.0.x 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/security/announce/2010/mfsa2010-04.html...

Ubuntu: Security Advisory (USN-896-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-895-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Update for firefox CESA-2010:0112 centos4 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2010:0112 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mozilla Foundation Security Advisory 2010-04

Mozilla Foundation Security Advisory 2010-04 Title: XSS due to window.dialogArguments being readable cross-domain Impact: Moderate Announced: February 17, 2010 Reporter: Hidetake Jo, TippingPoint ZDI Products: Firefox, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18 SeaMonkey 2.0.3...

Ubuntu Update for Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities USN-896-1

Ubuntu Update for Linux kernel vulnerabilities USN-896-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8961.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities USN-896-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Network...

[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1999-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

CentOS 4 / 5 : firefox (CESA-2010:0112)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

Ubuntu 9.10 : firefox-3.5, xulrunner-1.9.1 vulnerabilities (USN-896-1)

Several flaws were discovered in the browser engine of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2010-0159 Orlando Barrera II...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

Mandriva Update for urpmi MDVA-2010:042 (urpmi)

Check for the Version of urpmi OpenVAS Vulnerability Test Mandriva Update for urpmi MDVA-2010:042 urpmi Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2008-3988

CVE-2008-3988 affects Oracle E-Business Suite, specifically the iSupplier Portal in version 11.5.10.2 and 12.0.4. The initial description states an unspecified vulnerability that could impact confidentiality via unknown vectors, but it does not provide the root cause, vulnerable component beyond ...

SuSE 10 Security Update : kdelibs3,kdelibs3-devel,CVE-2007-1564 (ZYPP Patch Number 3988)

A bug in konqueror allowed attackers to abuse the FTP passive mode for portscans. CVE-2007-1564 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The text description of this plugin is C Novell, Inc. include'deprecatednasllevel.inc'; include'compat.inc'; if description scriptid29483;...

Samba < 3.0.25 NDR MS-RPC Request Heap-Based Overflow

Binary data 3988.prm...

CVE-2006-3988

Knusperleicht newsReporter 1.1 and earlier is affected by a PHP remote file inclusion vulnerability in index.php. The issue arises from the news_include_path parameter, enabling an attacker to cause arbitrary PHP code execution on the server. This vulnerability is documented in CVE-2006-3988 with...