jar: protocol XSS

The jar protocol handler in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting XSS...

openSUSE 10 Security Update : seamonkey (seamonkey-4794)

This update brings Mozilla SeaMonkey to security update version 1.1.7 Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have th...

Fedora 8 : seamonkey-1.1.7-1.fc8 (2007-4098)

Sun Dec 2 2007 Kai Engert - 1.1.7-1 - SeaMonkey 1.1.7 - Mon Nov 5 2007 Kai Engert - 1.1.6-1 - SeaMonkey 1.1.6 - Fri Oct 19 2007 Kai Engert - 1.1.5-2 - SeaMonkey 1.1.5 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory...

Fedora 7 : seamonkey-1.1.7-1.fc7 (2007-4106)

Sun Dec 2 2007 Kai Engert - 1.1.7-1 - SeaMonkey 1.1.7 - Mon Nov 5 2007 Kai Engert - 1.1.6-1 - SeaMonkey 1.1.6 - Fri Oct 19 2007 Kai Engert - 1.1.5-1 - SeaMonkey 1.1.5 - Fri Jul 27 2007 Martin Stransky - 1.1.3-2 - added pango patches - Fri Jul 20 2007 Kai Engert - 1.1.3-1 - SeaMonkey 1.1.3 - Thu...

[SECURITY] Fedora 8 Update: seamonkey-1.1.7-1.fc8

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

[SECURITY] Fedora 7 Update: seamonkey-1.1.7-1.fc7

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

SeaMonkey < 1.1.7 Multiple Vulnerabilities

The installed version of SeaMonkey is affected by various security issues : - Three bugs that can result in crashes with traces of memory corruption - A cross-site scripting vulnerability involving support for the 'jar:' URI scheme - A timing issue when setting the 'window.location' property that...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 11.0, 12.0, and -current to fix security issues. For more information, see: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlseamonkey Here are the details from the Slackware 12.0 ChangeLog:...

seamonkey security update

CentOS Errata and Security Advisory CESA-2007:1084-01 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...

Slackware 11.0 / 12.0 / current : seamonkey (SSA:2007-333-01)

New seamonkey packages are available for Slackware 11.0, 12.0, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2007-333-01. The text itself is copyright...

Mozilla Firefox及SeaMonkey Windows.Location属性HTTP Referer头欺骗漏洞

BUGTRAQ ID: 26589 CVECAN ID: CVE-2007-5960 Firefox是一款流行的开源WEB浏览器， 当由于设置了window.location属性而进行导航的时候，Referer头应反映初始化脚本的内容的地址，而实际上referer被设置成为运行脚本的窗口或帧的地址。攻击者可以使用形式上的alert对话框中止攻击脚本，在预期的引用页面替换了攻击者的初始内容之前不加载目标URI。如果将Referer设置为脚本窗口的当前URI，就可以对站点执行跨站请求伪造攻击。 Mozilla Firefox 2.0.x Mozilla SeaMonkey 1.1.7...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2007:1084)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup...

seamonkey security update

CentOS Errata and Security Advisory CESA-2007:1084 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open...

Mozilla Foundation Security Advisory 2007-39

Mozilla Foundation Security Advisory 2007-39 Title: Referer-spoofing via window.location race condition Impact: High Announced: November 26, 2007 Reporter: Gregory Fleischer Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.10 SeaMonkey 1.1.7 Description Gregory Fleischer demonstrated that it...

Mozilla Firefox / Seamonkey multiple security vulnerabilities

Multiple memory corruptions and race conditions...

SeaMonkey < 1.1.7 Multiple Vulnerabilities

Binary data 4298.prm...

Mozilla Foundation Security Advisory 2007-37

Mozilla Foundation Security Advisory 2007-37 Title: jar: URI scheme XSS hazard Impact: High Announced: November 26, 2007 Reporter: Jesse Ruderman, Petko D. Petkov, beford.org Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.10 SeaMonkey 1.1.7 Description The jar: URI scheme was introduced as ...

Mozilla Foundation Security Advisory 2007-38

Mozilla Foundation Security Advisory 2007-38 Title: Memory corruption vulnerabilities rv:1.8.1.10 Impact: High Announced: November 26, 2007 Products: Firefox, SeaMonkey Fixed in: Firefox 2.0.0.10 SeaMonkey 1.1.7 Description The Firefox 2.0.0.10 update contains fixes for three bugs that improve th...

Critical: seamonkey security update

1.0.9-0.7.el3.0.1 - Add mozilla-home-page.patch, mozilla-oracle-default-bookmarks.html, and mozilla-oracle-default-prefs.js 1.0.9-0.7.el3 - Add patches for mozilla bugs: 369814,373911,391028,393326,402649,403331...

Memory corruption

Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.10 and SeaMonkey before 1.1.7 allow remote attackers to cause a denial of service crash and possibly execute arbitrary code via unknown vectors that trigger memory corruption...