Mozilla Suite: Update to 16.0.2 (important)

Mozilla Firefox, Thunderbird and XULRunner were updated to 16.0.2. Mozilla Seamonkey was updated to 2.13.2. Tracker bug: bnc786522 A security issues was fixed: MFSA 2012-90/CVE-2012-4194/CVE-2012-4195/CVE-2012-4196 bmo800666, bmo793121, bmo802557 Fixes for Location object issues The update also...

Ubuntu 10.04 LTS / 11.10 / 12.04 LTS / 12.10 : thunderbird vulnerabilities (USN-1620-2)

USN-1620-1 fixed vulnerabilities in Firefox. This update provides the corresponding updates for Thunderbird. Please note that Thunderbird is only affected by window.location issues through RSS feeds and extensions that load web content. Mariusz Mlynski and others discovered several flaws in Firef...

CVE-2012-4194

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location object aka window.location, which makes it easier for remote attackers to...

CVE-2012-4194

Mozilla Firefox before 16.0.2, Firefox ESR 10.x before 10.0.10, Thunderbird before 16.0.2, Thunderbird ESR 10.x before 10.0.10, and SeaMonkey before 2.13.2 do not prevent use of the valueOf method to shadow the location object aka window.location, which makes it easier for remote attackers to...

CVE-2012-4194

The CVE-2012-4194 issue affects Mozilla Firefox and related Mozilla components where the valueOf shadowing of the location object (window.location) enables cross-site scripting via plugin vectors. Affected software and versions (stated in the provided sources) include: Mozilla Firefox before 16.0...

CentOS 5 / 6 : firefox (CESA-2012:1407)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

Ubuntu Update for firefox USN-1620-1

Ubuntu Update for Linux kernel vulnerabilities USN-1620-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN16201.nasl 7960 2017-12-01 06:58:16Z santu $ Ubuntu Update for firefox USN-1620-1 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This...

Firefox 10.x < 10.0.10 Multiple Vulnerabilities

The installed version of Firefox 10.x is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform cross-site scripting attacks...

Thunderbird 10.x < 10.0.10 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 10.x is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform cross-site scripting attacks...

Thunderbird < 16.0.2 Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird is earlier than 16.0.2 and is therefore potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform...

RHEL 6 : firefox (RHSA-2012:1407)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1407 advisory. Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Multiple flaws were found...

SeaMonkey < 2.13.2 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.13.2. As such, it is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform...

Firefox < 10.0.10 Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox is earlier than 10.0.10 and thus, is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform cross-sit...

CentOS Update for firefox CESA-2012:1407 centos5

The remote host is missing an update for the SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID 6b3b1b97-207c-11e2-a03f-c8600054b392 OpenVAS Vulnerability Test $ Description: Auto generated from VID 6b3b1b97-207c-11e2-a03f-c8600054b392 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

Mozilla Thunderbird 10.x < 10.0.10 Multiple Vulnerabilities

The installed version of Thunderbird 10.x is potentially affected by the following security issues : - The true value of 'window.location' can be shadowed by user content through the use of the 'valueOf' method, which can be combined with some plugins to perform cross-site scripting attacks...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2012:1407 Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CV...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5 and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity rating...

Novell iPrint Server attributes-natural-language Buffer Overflow (CVE-2011-4194)

A buffer overflow vulnerability has been reported in Novell iPrint Server...

CVE-2011-4194

Novell iPrint Server (Novell Open Enterprise Server 2, SP3 on Linux) is affected by CVE-2011-4194. The vulnerability is a buffer overflow in the mod_ipp apache module during handling of the attributes-natural-language attribute, which can cause copying of unvalidated data into a fixed-length stac...