Mozilla Foundation Security Advisory 2011-43

Mozilla Foundation Security Advisory 2011-43 Title: loadSubScript unwraps XPCNativeWrapper scope parameter Impact: Critical Announced: September 27, 2011 Reporter: David Rees Products: Firefox, SeaMonkey Fixed in: Firefox 7.0 SeaMonkey 2.4 Description David Rees reported that the JSSubScriptLoade...

loadSubScript unwraps XPCNativeWrapper scope parameter — Mozilla

David Rees reported that the JSSubScriptLoader a feature used by some add-ons was "unwrapping" XPCNativeWrappers when they were used as the scope parameter to loadSubScript. Without the protection of the wrappers the add-on could be vulnerable to privilege escalation attacks from malicious web...

Mozilla Firefox Security Bypass Vulnerability (Jul 2011) - Windows

Mozilla Firefox is prone to a security bypass vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox > 4.0 and < 5.0 Multiple Vulnerabilities

Binary data 5965.prm...

Non-whitelisted site can trigger xpinstall — Mozilla

Mozilla security researcher mozbugra4 reported that it was possible for a non-whitelisted site to trigger an install dialog for add-ons and themes...

Firefox 4 Multiple Vulnerabilities

The installed version of Firefox 4 is potentially affected by the following security issues : - Multiple memory safety issues can lead to application crashes and possibly remote code execution. CVE-2011-2374, CVE-2011-2375 - A use-after-free issue when viewing XUL documents with scripts disabled...

Facebook Vulnerability - Beware of A New XSS on Facebook !

Facebook Vulnerability - Beware of A New XSS on Facebook ! Url : https://m.facebook.com/connect/promptfeed.php?display=wap&usermessageprompt=%3Cscript%3Ealert%281 %29%3C/script%3E New Cross-site scripting vulnerability has been detected on Facebook and widely exploited in the mobile API version,...

A Closer Look at the Eleonore Exploit Kit

Today’s attackers care less about the browser you use and more about whether your third-party browser add-ons and plugins are out-of-date and exploitable. Read the full article. KrebsonSecurity...

Mozilla Foundation Security Advisory 2010-24

Mozilla Foundation Security Advisory 2010-24 Title: XMLDocument::load doesn't check nsIContentPolicy Impact: Low Announced: March 30, 2010 Reporter: Wladimir Palant Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.9 Thunderbird 3.0.4 SeaMonkey 2.0.4 Description Mozill...

XMLDocument::load() doesn't check nsIContentPolicy — Mozilla

Mozilla community member Wladimir Palant reported that XML documents were failing to call certain security checks when loading new content. This could result in certain resources being loaded that would otherwise violate security policies set by the browser or installed add-ons...

CVE-2010-0168

Technical details for CVE-2010-0168 are not provided in the supplied documents. The materials reference Firefox historical fixes and related advisories but do not describe affected components, root cause, impact, or remediation for this CVE. Monitor for updates.

Content policy bypass with image preloading — Mozilla

Mozilla developer Josh Soref of Nokia reported that documents failed to call certain security checks when attempting to preload images. Although the image content is not available to the page, it is possible to specify protocols that are normally not allowed in a web page such as file:. This...

Mozilla Admits Malware Sneaked into Firefox Add-ons

Mozilla says a pair of malicious Firefox add-ons slipped by its security checks and infected approximately 4,600 Windows computers over the last five months. The browser add-ons, described my Mozilla as “experimental,” contained a Trojan horse that executed when Firefox started and infected the...

Mozilla Ships Security Goodies in Firefox 3.6 Update

Mozilla has released the latest iteration of its flagship Firefox browser with a few significant security goodies to keep malicious hacker at bay. The update, which is being shipped via the browser’s automatic update mechanism, includes new features to patch third-party Firefox plug-ins and lock...

Privilege escalation via chrome window.opener — Mozilla

Security researcher David James reported that a content window which is opened by a chrome window retains a reference to the chrome window via the window.opener property. Using this reference, content in the new window can access functions inside the chrome window, such as eval, and use these...

How to Get Owned in One Easy Step

As 2009 draws to a close, one thing has become clear: The most dangerous piece of software on your PC isn’t a banking Trojan or a bot; it’s your Web browser. The Web browser has become the main focal point of attackers’ attention and the frequency with which new vulnerabilities are found in all o...

Access Closed to Component Directory in Firefox 3.6

Mozilla will add a new lockdown feature to Firefox 3.6 that will prevent developers from sneaking add-ons into the program, the company said. The new feature, which Mozilla dubbed “component directory lockdown,” will bar access to Firefox’s “components” directory, where most of the browser’s own...

Mozilla VP of Engineering Mike Shaver on the Microsoft-created Firefox Add-ons

The Big Story podcast with Ryan Naraine – October 19, 2009 In the debut installment of the ‘Big Story’ podcast, Threatpost editor-in-Chief Ryan Naraine chats with Mozilla VP of Engineering Mike Shaver right on his decision to blacklist – then unblock – the controversial Microsoft-created Firefox...

Mozilla Packages Firefox Security Suite Add-Ons

Mozilla has packaged a suite of security-centric plugins to help Firefox users stay safe while surfing on the Internet. The package, available here, includes NoScript, Better Privacy, AdBlock Plus and WOT Web of Trust. Mozilla has also expanded its Plugin Check to help users identify and patch...

PixelPost 1.7.1 SQL Injection / XSS

=========================================== PixelPost Exploit database separated by exploit 0 0 // type local, remote, DoS, etc. 1 1 0 -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-1 + Discovered By : Inj3ct0r + Site : Inj3ct0r.com + support e-mail : submitatinj3ct0r.com...