Debian DSA-2420-1 : openjdk-6 - several vulnerabilities

Several vulnerabilities have been discovered in OpenJDK, an implementation of the Oracle Java platform. - CVE-2011-3377 The IcedTea browser plugin included in the openjdk-6 package does not properly enforce the Same Origin Policy on web content served under a domain name which has a common suffix...

GLSA-201202-01 : Chromium: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201202-01 Chromium: Multiple vulnerabilities Multiple vulnerabilities have been discovered in Chromium. Please review the CVE identifiers and release notes referenced below for details. Impact : A remote attacker could entice a us...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2012 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID 6c8ad3e8-0a30-11e1-9580-4061862b8c22 OpenVAS Vulnerability Test $ Description: Auto generated from VID 6c8ad3e8-0a30-11e1-9580-4061862b8c22 Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

FreeBSD Ports: opera, linux-opera

The remote host is missing an update to the system as announced in the referenced advisory. VID a4a809d8-25c8-11e1-b531-00215c6a37bb OpenVAS Vulnerability Test $ Description: Auto generated from VID a4a809d8-25c8-11e1-b531-00215c6a37bb Authors: Thomas Reinke Copyright: Copyright c 2012 E-Soft Inc...

CVE-2011-3956

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension...

CVE-2011-3956

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension...

Design/Logic Flaw

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension...

CVE-2011-3956

The connected documents confirm that CVE-2011-3956 is part of a Chromium/Chromium-derived browser vulnerability set (Chromium/Chrome family). The Gentoo GLSA entry ties CVE-2011-3956 to “Chromium: Multiple vulnerabilities” with impact including potential remote code execution, denial of service, ...

CVE-2011-3956

Removed by vendor...

CVE-2011-3956

The extension implementation in Google Chrome before 17.0.963.46 does not properly handle sandboxed origins, which might allow remote attackers to bypass the Same Origin Policy via a crafted extension...

Mozilla Foundation Security Advisory 2012-02

Mozilla Foundation Security Advisory 2012-02 Title: Overly permissive IPv6 literal syntax Impact: Low Announced: January 31, 2012 Reporter: Gregory Fleischer Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 7.0 Firefox 3.6.26 Thunderbird 7.0 Thunderbird 3.1.18 SeaMonkey 2.4 Description...

CentOS 6 : thunderbird (CESA-2012:0080)

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

CentOS 4 / 5 / 6 : firefox (CESA-2012:0079)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

RHEL 4 : seamonkey (RHSA-2012:0084)

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0084 advisory. - Mozilla: Same-origin bypass using IPv6-like hostname syntax MFSA 2012-02 CVE-2011-3670 - Mozilla: memory safety hazards in 10.0/1.9.2.26...

thunderbird security update

CentOS Errata and Security Advisory CESA-2012:0080 An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System...

Critical: Red Hat Security Advisory: thunderbird security update

An updated thunderbird package that fixes two security issues is now available for Red Hat Enterprise Linux 4 and 5. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix two security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, are...

Mozilla: Same-origin bypass using IPv6-like hostname syntax (MFSA 2012-02)

Mozilla Firefox before 3.6.26 and 4.x through 6.0, Thunderbird before 3.1.18 and 5.0 through 6.0, and SeaMonkey before 2.4 do not properly enforce the IPv6 literal address syntax, which allows remote attackers to obtain sensitive information by making XMLHttpRequest calls through a proxy and...

Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity...