9543 matches found
Mozilla Thunderbird < 10.0 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 10.0 and thus, is potentially affected by the following security issues : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - Various memory safety issues exist. CVE-2012-0442, CVE-2012-0443 - Memory...
Thunderbird 9.x Multiple Vulnerabilities (Mac OS X)
The installed version of Thunderbird 9.x is potentially affected by the following security issues : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - Various memory safety issues exist. CVE-2012-0442, CVE-2012-0443 - Memory corruption errors exist relat...
Firefox < 10.0 Multiple Vulnerabilities (Mac OS X)
The installed version of Firefox 9.x is potentially affected by the following security issues : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - Various memory safety issues exist. CVE-2012-0442, CVE-2012-0443 - Memory corruption errors exist related t...
CVE-2012-0445: Undefined Security Weakness
Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to bypass the HTML5 frame-navigation policy and replace arbitrary sub-frames by creating a form submission target with a sub-frame's name attribute...
CVE-2012-0446
Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a 1 web page or 2 Firefox extension, related to improper enforcement of XPConnect security...
CVE-2012-0446: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Mozilla Firefox 4.x through 9.0, Thunderbird 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to inject arbitrary web script or HTML via a 1 web page or 2 Firefox extension, related to improper enforcement of XPConnect security...
SeaMonkey < 2.7.0 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.7.0. Such versions are potentially affected by the following security issues : - A use-after-free error exists related to removed nsDOMAttribute child nodes.CVE-2011-3659 - Various memory safety issues exist. CVE-2012-0442, CVE-2012-0443 - Memo...
PT-2012-2566
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 9.0 Thunderbird versions 5.0 through 9.0 SeaMonkey versions prior to 2.7 Description The issue allows remote attackers to bypass the HTML5 frame-navigation policy. This is achieved by creating a form...
<iframe> element exposed across domains via name attribute — Mozilla
Vitaly Nevgen reported that an attacker could replace a sub-frame in another domain's document by using the name attribute of the sub-frame as a form submission target. This can potentially allow for phishing attacks against users and violates the HTML5 frame navigation policy...
Frame scripts calling into untrusted objects bypass security checks — Mozilla
Mozilla security researcher mozbugra4 reported that frame scripts bypass XPConnect security checks when calling untrusted objects. This allows for cross-site scripting XSS attacks through web pages and Firefox extensions. The fix enables the Script Security Manager SSM to force security checks on...
Google Releases Chrome 16.0.912.77
Google has released Chrome 16.0.912.77 for Linux, Mac, Windows, and Chrome Frame to address multiple vulnerabilities. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to review the Google Chro...
Stable Channel Update
The Stable channel has been updated to 16.0.912.77 for Windows, Mac, Linux and Chrome Frame Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix. $1000 106484...
kernel: b43: allocate receive buffers big enough for max frame len + offset
The dmarx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers, which allows remote attackers to cause a denial of service system crash via a crafted frame...
Stable Channel Update
The Stable channel has been updated to 16.0.912.75 for Windows, Mac, Linux and Chrome Frame Security fixes and rewards: Please see the Chromium security page for more detail. Note that the referenced bugs may be kept private until a majority of our users are up to date with the fix $1000 106672...
Unfixed Frame Redirect vulnerability at www.elebda3.net
Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting www.elebda3.net, which at the time of submission ranked 60799 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently unfixed...
Unfixed Frame Redirect vulnerability at deperiodistas.com
Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting deperiodistas.com, which at the time of submission ranked 667889 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently...
Unfixed Frame Redirect vulnerability at www.filmhill.com
Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting www.filmhill.com, which at the time of submission ranked 700694 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 16/02/2012. It is currently unfixe...
Unfixed Frame Redirect vulnerability at www.teacherplanet.com
Security researcher p0pc0rn, has submitted on 24/12/2011 a Frame Redirect vulnerability affecting www.teacherplanet.com, which at the time of submission ranked 287229 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/12/2011. It is currently...
Unfixed Frame Redirect vulnerability at securityphresh.com
Security researcher Snypter Dhruv, has submitted on 23/12/2011 a Frame Redirect vulnerability affecting securityphresh.com, which at the time of submission ranked 1573986 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/12/2011. It is current...
Mozilla Products DOM Frame Denial of Service Vulnerability (MAC OS X)
The host is installed with Mozilla firefox/thunderbird and is prone to denial of service vulnerability. OpenVAS Vulnerability Test $Id: secpodmozillaprdtsdomframedosvulnmacosx.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products DOM Frame Denial of Service Vulnerability MAC OS X Authors:...