Firefox < 3.0.14 Multiple Vulnerabilities

The installed version of Firefox is earlier than 3.0.14. Such versions are potentially affected by the following security issues : - Multiple memory corruption vulnerabilities could potentially allow arbitrary code execution. MFSA 2009-47 - An insufficient warning message is displayed when adding...

Mozilla Foundation Security Advisory 2009-48

Mozilla Foundation Security Advisory 2009-48 Title: Insufficient warning for PKCS11 module installation and removal Impact: Moderate Announced: September 9, 2009 Reporter: Jesse Ruderman, Dan Kaminsky Products: Firefox Fixed in: Firefox 3.0.14 Description Mozilla security researcher Jesse...

mozilla firefox -- multiple vulnerabilities

Mozilla Foundation reports: MFSA 2009-51 Chrome privilege escalation with FeedWriter MFSA 2009-50 Location bar spoofing via tall line-height Unicode characters MFSA 2009-49 TreeColumns dangling pointer vulnerability MFSA 2009-48 Insufficient warning for PKCS11 module installation and removal MFSA...

Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the 1 pkcs11.addmodule and 2 pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module...

Firefox 3.0.14 Insufficient warning for PKCS11 module installation and removal

Mozilla Firefox before 3.0.14 does not properly implement certain dialogs associated with the 1 pkcs11.addmodule and 2 pkcs11.deletemodule operations, which makes it easier for remote attackers to trick a user into installing or removing an arbitrary PKCS11 module...

Insufficient warning for PKCS11 module installation and removal — Mozilla

Mozilla security researcher Jesse Ruderman reported that when security modules were added or removed via pkcs11.addmodule or pkcs11.deletemodule, the resulting dialog was not sufficiently informative. Without sufficient warning, an attacker could entice a victim to install a malicious PKCS11 modu...

Mandrake Security Advisory MDVSA-2009:123 (opensc)

The remote host is missing an update to opensc announced via advisory MDVSA-2009:123. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora Core 11 FEDORA-2009-4892 (opensc)

The remote host is missing an update to opensc announced via advisory FEDORA-2009-4892. OpenVAS Vulnerability Test $Id: fcore20094892.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4892 opensc Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 11 FEDORA-2009-4967 (mingw32-opensc)

The remote host is missing an update to mingw32-opensc announced via advisory FEDORA-2009-4967. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright ...

Fedora Core 9 FEDORA-2009-4883 (opensc)

The remote host is missing an update to opensc announced via advisory FEDORA-2009-4883. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 11 FEDORA-2009-4892 (opensc)

The remote host is missing an update to opensc announced via advisory FEDORA-2009-4892. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 10 FEDORA-2009-4919 (opensc)

The remote host is missing an update to opensc announced via advisory FEDORA-2009-4919. OpenVAS Vulnerability Test $Id: fcore20094919.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4919 opensc Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora Core 10 FEDORA-2009-4919 (opensc)

The remote host is missing an update to opensc announced via advisory FEDORA-2009-4919. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the...

Fedora Core 9 FEDORA-2009-4883 (opensc)

The remote host is missing an update to opensc announced via advisory FEDORA-2009-4883. OpenVAS Vulnerability Test $Id: fcore20094883.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-4883 opensc Authors: Thomas Reinke Copyright: Copyright c 2009 E-So...

Fedora 10 : mingw32-opensc-0.11.8-1.fc10 (2009-4928)

CVE-2009-1603 A minor update fixing security problem within pkcs11-tool command. http://www.opensc-project.org/pipermail/opensc- announce/2009-May/000025.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has...

Fedora 10 : opensc-0.11.8-1.fc10 (2009-4919)

A minor update fixing security problem within pkcs11-tool command. http://www.opensc-project.org/pipermail/opensc-announce/2009-May/00002 5.html Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to...

OpenSC crypto vulnerability

pkcs11-tool invalid keys generation allows message decryption...

CVE-2009-1603

CVE-2009-1603 affects OpenSC 0.11.7, specifically src/tools/pkcs11-tool.c. When used with unspecified third‑party PKCS#11 modules, it generates RSA keys with incorrect public exponents, allowing an attacker to read the cleartext form of messages that were intended to be encrypted. This vulnerabil...

CVE-2009-1603

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...

CVE-2009-1603

src/tools/pkcs11-tool.c in pkcs11-tool in OpenSC 0.11.7, when used with unspecified third-party PKCS11 modules, generates RSA keys with incorrect public exponents, which allows attackers to read the cleartext form of messages that were intended to be encrypted...