327 matches found
openSUSE Security Update : MozillaFirefox (MozillaFirefox-1312)
This update brings Mozilla Firefox to the 3.0.14 stable release. It also fixes various security issues: MFSA 2009-47 / CVE-2009-3069 / CVE-2009-3070 / CVE-2009-3071 / CVE-2009-3072 / CVE-2009-3073 / CVE-2009-3074 / CVE-2009-3075: Mozilla developers and community members identified and fixed sever...
openSUSE Security Update : MozillaFirefox (MozillaFirefox-1312)
This update brings Mozilla Firefox to the 3.0.14 stable release. It also fixes various security issues: MFSA 2009-47 / CVE-2009-3069 / CVE-2009-3070 / CVE-2009-3071 / CVE-2009-3072 / CVE-2009-3073 / CVE-2009-3074 / CVE-2009-3075: Mozilla developers and community members identified and fixed sever...
Mandriva Linux Security Advisory : firefox (MDVSA-2009:236)
Security issues were identified and fixed in firefox 3.0.x : Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.14 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vecto...
Mozilla Firefox < 3.0.14 Multiplatform RCE via pkcs11.addmodule
No description provided by source. Fix announce: http://www.mozilla.org/security/announce/2009/mfsa2009-48.html Bug history: https://bugzilla.mozilla.org/showbug.cgi?id=326628 So, Firefox up through 3.0.13 had an obscure little function under window.pkcs11: long addmodulein DOMString moduleName, ...
Mozilla Firefox < 3.0.14 Multiplatform RCE via pkcs11.addmodule
Exploit for multiple platform in category remote exploits =============================================================== Mozilla Firefox var str = "Error detected in Firefox Module NSP31337.bin.\n" +...
Mozilla Firefox Multiple Denial Of Service Vulnerabilities - Sep09 (Windows)
The host is installed with Firefox browser and is prone to multiple Denial of Service vulnerabilities. OpenVAS Vulnerability Test $Id: secpodfirefoxmultdosvulnsep09win.nasl 5055 2017-01-20 14:08:39Z teissa $ Mozilla Firefox Multiple Denial Of Service Vulnerabilities - Sep09 Windows Authors: Shara...
Firefox <3.0.14 Multiplatform RCE via pkcs11.addmodule
Fix announce: http://www.mozilla.org/security/announce/2009/mfsa2009-48.html Bug history: https://bugzilla.mozilla.org/showbug.cgi?id=326628 So, Firefox up through 3.0.13 had an obscure little function under window.pkcs11: long addmodulein DOMString moduleName, in DOMString libraryFullPath, in lo...
Mozilla Firefox Multiple Denial Of Service Vulnerabilities (Sep 2009) - Linux
Firefox browser is prone to multiple Denial of Service vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
FreeBSD : mozilla firefox -- multiple vulnerabilities (922d2398-9e2d-11de-a998-0030843d3802)
Mozilla Foundation reports : MFSA 2009-51 Chrome privilege escalation with FeedWriter MFSA 2009-50 Location bar spoofing via tall line-height Unicode characters MFSA 2009-49 TreeColumns dangling pointer vulnerability MFSA 2009-48 Insufficient warning for PKCS11 module installation and removal MFS...
Ubuntu 8.04 LTS / 8.10 / 9.04 : firefox-3.0, xulrunner-1.9 vulnerabilities (USN-821-1)
Several flaws were discovered in the Firefox browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2009-3070,...
Mozilla Firefox < 3.0.14 - Multiplatform Remote Code Execution via pkcs11.addmodule
Fix announce: http://www.mozilla.org/security/announce/2009/mfsa2009-48.html Bug history: https://bugzilla.mozilla.org/showbug.cgi?id=326628 So, Firefox up through 3.0.13 had an obscure little function under window.pkcs11: long addmodulein DOMString moduleName, in DOMString libraryFullPath, in lo...
CVE-2009-3076
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the 1 pkcs11.addmodule and 2 pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module...
Code injection
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the 1 pkcs11.addmodule and 2 pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module...
CVE-2009-3076
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the 1 pkcs11.addmodule and 2 pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module...
CVE-2009-3076
Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the 1 pkcs11.addmodule and 2 pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module...
CVE-2009-3076
CVE-2009-3076 is a vulnerability in Mozilla Firefox prior to 3.0.14, where dialogs for PKCS#11 module addition/removal are not informative. This could allow remote attackers to trick users into installing/removing an arbitrary PKCS#11 module. The connected MiracleLinux advisory confirms Firefox 3...
USN-821-1: Firefox and Xulrunner vulnerabilities
Several flaws were discovered in the Firefox browser and JavaScript engines. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. CVE-2009-3070,...
Mozilla Firefox < 3.0.14 / 3.5.3 Multiple Vulnerabilities
Binary data 801311.prm...
Firefox < 3.0.14 Multiple Vulnerabilities
The installed version of Firefox is earlier than 3.0.14. Such versions are potentially affected by the following security issues : - Multiple memory corruption vulnerabilities could potentially allow arbitrary code execution. MFSA 2009-47 - An insufficient warning message is displayed when adding...
Mozilla Foundation Security Advisory 2009-48
Mozilla Foundation Security Advisory 2009-48 Title: Insufficient warning for PKCS11 module installation and removal Impact: Moderate Announced: September 9, 2009 Reporter: Jesse Ruderman, Dan Kaminsky Products: Firefox Fixed in: Firefox 3.0.14 Description Mozilla security researcher Jesse...