CVE-2007-0994

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an 1 img, 2 link, or 3 style tag, which...

CVE-2007-0994

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an 1 img, 2 link, or 3 style tag, which...

CVE-2007-0994

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an 1 img, 2 link, or 3 style tag, which...

CVE-2007-0994

CVE-2007-0994 affects Mozilla Firefox 2.x before 2.0.0.2 and Firefox 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8. A regression in handling HTML mail with javascript: URIs in , (link), or tags could bypass access checks and allow remote JavaScript execution with chro...

CentOS 4 : thunderbird (CESA-2007:0078)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 06 March 2007 Updated text description to add CVE-2007-1282 and remove...

CVE-2007-0994: Improper Control of Generation of Code

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an 1 img, 2 link, or 3 style tag, which...

security flaw

A regression error in Mozilla Firefox 2.x before 2.0.0.2 and 1.x before 1.5.0.10, and SeaMonkey 1.1 before 1.1.1 and 1.0 before 1.0.8, allows remote attackers to execute arbitrary JavaScript as the user via an HTML mail message with a javascript: URI in an 1 img, 2 link, or 3 style tag, which...

Fedora Core 5 : thunderbird-1.5.0.8-1.fc5 (2006-1194)

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way Thunderbird processes certain malformed JavaScript code. A malicious HTML mail message could cause the execution of JavaScript code in such a way that could cause Thunderbird to crash or execute...

Critical: Red Hat Security Advisory: thunderbird security update

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were foun...

CentOS 4 : thunderbird (CESA-2006:0330)

Updated thunderbird packages that fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issu...

RHEL 4 : thunderbird (RHSA-2006:0330)

Updated thunderbird packages that fix various bugs are now available for Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. Updated 24 Apr 2006 The erratum text has been updated to include the details of additional issu...

[Full-disclosure] SEC Consult SA-20051202-1 :: GMX Webmail XSS

========================================================== SEC-CONSULT Security Advisory 20051202-0 GMX / MSIE XSS ========================================================== Product: GMX Webmail V ?.? in combination with MSIE maybe other browsers Remarks: no other Versions tested but very likely...

CVE-2005-3692

Cross-site scripting XSS vulnerability in AMAX Magic Winmail Server 4.2 build 0824 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 retid parameter in badlogin.php, 2 Content-Type headers in HTML mails, and 3 HTML mail attachments...

CVE-2005-3692: Undefined Security Weakness

Cross-site scripting XSS vulnerability in AMAX Magic Winmail Server 4.2 build 0824 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 retid parameter in badlogin.php, 2 Content-Type headers in HTML mails, and 3 HTML mail attachments...

thunderbird security update

CentOS Errata and Security Advisory CESA-2005:601 Updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and...

Important: Red Hat Security Advisory: thunderbird security update

Updated thunderbird package that fixes various bugs is now available for Red Hat Enterprise Linux 4. This update has been rated as having important security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way...

Fedora Core 4 : thunderbird-1.0.6-1.1.fc4 (2005-606)

Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way Thunderbird handled anonymous functions during regular expression string replacement. It is possible for a malicious HTML mail to capture a random block of client memory. The Common Vulnerabilities and...

Fedora Core 3 : thunderbird-1.0.6-1.1.fc3 (2005-604)

Mozilla Thunderbird is a standalone mail and newsgroup client. A bug was found in the way Thunderbird handled anonymous functions during regular expression string replacement. It is possible for a malicious HTML mail to capture a random block of client memory. The Common Vulnerabilities and...

CVE-2004-2226

Mozilla Mail 1.7.1 and 1.7.3, and Thunderbird before 0.9, when HTML-Mails is enabled, allows remote attackers to determine valid e-mail addresses via an HTML e-mail that references a Cascading Style Sheets CSS document on the attacker's server...

[SNS Advisory No.77] Usermin Remote Arbitrary Shell Command Execution Vulnerability

---------------------------------------------------------------------- SNS Advisory No.77 Usermin Remote Arbitrary Shell Command Execution Vulnerability Problem first discovered on: Sun, 11 Apr 2004 Published on: Tue, 7 Sept 2004...