63 matches found
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
Multiple memory corruptions, buffer overflows, integer overflows, cross domain data access...
openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2010:0430-2)
This update brings Mozilla Thunderbird to the 3.0.6 security release. It fixes following security bugs: MFSA 2010-34 / CVE-2010-1211: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showe...
Mozilla Foundation Security Advisory 2010-46
Mozilla Foundation Security Advisory 2010-46 Title: Cross-domain data theft using CSS Impact: Moderate Announced: July 20, 2010 Reporter: Chris Evans Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.7 Firefox 3.5.11 Thunderbird 3.1.1 Thunderbird 3.0.6 SeaMonkey 2.0.6 Description...
Firefox 3.6 < 3.6.7 Multiple Vulnerabilities
The installed version of Firefox 3.6.x is earlier than 3.6.7. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - An error in DOM attribute...
Firefox < 3.5.11 Multiple Vulnerabilities
The installed version of Firefox is earlier than 3.5.11. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - An error in DOM attribute cloning...
Firefox 3.5.x < 3.5.11 Multiple Vulnerabilities
Binary data 800782.prm...
Mozilla Thunderbird 3.0.x < 3.0.6 Multiple Vulnerabilities
Binary data 5608.prm...
SeaMonkey 2.0.x < 2.0.6 Multiple Vulnerabilities
Binary data 5610.prm...
Mozilla Thunderbird 3.1.x < 3.1.1 Multiple Vulnerabilities
Binary data 5609.prm...
SeaMonkey 2.0.x < 2.0.6 Multiple Vulnerabilities
Binary data 800871.prm...
Mozilla Thunderbird 3.1.x < 3.1.1 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 3.1.1. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - It may be possible to run...
Mozilla Firefox 3.5.x < 3.5.11 Multiple Vulnerabilities
Binary data 5606.prm...
Mozilla Firefox 3.6.x < 3.6.7 Multiple Vulnerabilities
Binary data 5607.prm...
SeaMonkey < 2.0.6 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.0.6. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - An error in DOM attribute cloning...
Firefox 3.6.x < 3.6.7 Multiple Vulnerabilities
Binary data 800780.prm...
Mozilla Thunderbird < 3.0.6 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 3.0.6. Such versions are potentially affected by the following security issues : - Multiple memory safety bugs could result in memory corruption, potentially resulting in arbitrary code execution. MFSA 2010-34 - The array class used to store CS...
Cross-domain data theft with CSS load – Opera Security Advisories
Cross-domain data theft with CSS load – Opera Security Advisories OPCOM Team | January 11, 2010 Summary CSS can be loaded cross-domain, and in some cases it is be possible to read the data pointed to, leading to the possibility of cross-domain data theft. Severity Moderate Opera’s response Opera...
Firefox Cross-domain data theft via script redirect error message
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another domain via a JavaScript URL that redirects to the target resource, which...
Firefox 2 Information stealing via loadBindingDocument
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL...