CVE-2010-1993

Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service resource consumption via an HTML document with many IFRAME elements...

CVE-2010-1991

Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service excessive application launches via an HTML document with many IFRAM...

CVE-2010-1990

Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service excessive application launches via an HTML document with many IFRA...

CVE-2010-1993: Undefined Security Weakness

Opera 9.52 does not properly handle an IFRAME element with a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service resource consumption via an HTML document with many IFRAME elements...

CVE-2010-1991: Undefined Security Weakness

Microsoft Internet Explorer 6.0.2900.2180, 7, and 8.0.7600.16385 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service excessive application launches via an HTML document with many IFRAM...

CVE-2010-1989: Undefined Security Weakness

Opera 9.52 executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service excessive application launches via an HTML document with many images, a related issue to CVE-2010-0181...

CVE-2010-1990: Undefined Security Weakness

Mozilla Firefox 3.6.x, 3.5.x, 3.0.19, and earlier, and SeaMonkey, executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service excessive application launches via an HTML document with many IFRA...

CVE-2010-1992: Undefined Security Weakness

Google Chrome 1.0.154.48 executes a mail application in situations where an IFRAME element has a mailto: URL in its SRC attribute, which allows remote attackers to cause a denial of service excessive application launches via an HTML document with many IFRAME elements...

Joomla 1.6.0-Alpha2 XSS Vulnerabilities

Exploit for php platform in category web applications ======================================= Joomla 1.6.0-Alpha2 XSS Vulnerabilities ======================================= Title:Joomla1.6.0-Alpha2 XSS Vulnerabilities Date: 2010-05-02 Software Link:...

openSUSE Security Update : firefox35upgrade (firefox35upgrade-2262)

This patch updates Mozilla Firefox from the 3.0 stable branch to the 3.5.9 release. It includes also following security fixes: MFSA 2010-16: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes...

openSUSE Security Update : mozilla-xulrunner190 (mozilla-xulrunner190-2261)

This patch updates Mozilla XULRunner 3.0 engine the 1.9.0.19 release. It includes also following security fixes: MFSA 2010-16: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed eviden...

openSUSE Security Update : seamonkey (openSUSE-SU-2010:0102-1)

Mozilla SeaMonkey was updated to version 2.0.4 fixing lots of bugs and security issues. Following security issues were fixed: MFSA 2010-16: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes...

Mozilla Products Denial of Service Vulnerability (Windows)

The host is installed with Mozilla Firefox/Seamonkey and is prone to Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmailtodosvulnwin.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products Denial of Service Vulnerability Windows Authors: Madhuri D Copyright:...

Mozilla Firefox浏览器图形src标签启动外部邮件客户端漏洞

CVECAN ID: CVE-2010-0181 Firefox是一款流行的开源WEB浏览器。 如果网页的IMG元素中SRC属性设置为到mailto: URL的重新定向，则Firefox在打开这样的网页时会加载外部的邮件客户端程序。尽管这不会造成安全威胁，但启动过多的应用程序也是一种拒绝服务的情况。 Mozilla Firefox 3.6 Mozilla Firefox 3.5.x Mozilla SeaMonkey 2.0.4 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.mozilla.org/...

Mozilla Foundation Security Advisory 2010-23

Mozilla Foundation Security Advisory 2010-23 Title: Image src redirect to mailto: URL opens email editor Impact: Low Announced: March 30, 2010 Reporter: Henry Sudhof Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.2 Firefox 3.5.9 SeaMonkey 2.0.4 Description phpBB developer Henry Sudhof reporte...

CVE-2010-0181

CVE-2010-0181 details (useful for triage): Affects Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4. The vulnerability occurs when an IMG element’s SRC attribute redirects to a mailto: URL, which can cause the external mail handler to launch. This could be exploited...

CVE-2010-0181: Improper Input Validation

Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, executes a mail application in situations where an IMG element has a SRC attribute that is a redirect to a mailto: URL, which allows remote attackers to cause a denial of service excessive application launches via an...

SeaMonkey < 2.0.4 Multiple Vulnerabilities

Binary data 5495.prm...

SeaMonkey < 2.0.4 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.4. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-16 - A select event handler for XUL tree items can be called after the item is deleted. MFSA...

Image src redirect to mailto: URL opens email editor — Mozilla

phpBB developer Henry Sudhof reported that when an image tag points to a resource that redirects to a mailto: URL, the external mail handler application is launched. This issue poses no security threat to users but could create an annoyance when browsing a site that allows users to post arbitrary...