security flaw

The JavaScript engine in Mozilla Firefox before 1.5.0.10 and 2.x before 2.0.0.2, Thunderbird before 1.5.0.10, and SeaMonkey before 1.0.8 allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via certain vectors that trigger memory corruption...

mozilla -- multiple vulnerabilities

The Mozilla Foundation reports of multiple security issues in Firefox, Seamonkey, and Thunderbird. Several of these issues can probably be used to run arbitrary code with the privilege of the user running the program. MFSA 2007-08 onUnload + document.write memory corruption MFSA 2007-07 Embedded...

SUSE-SA:2006:054: MozillaFirefox,MozillaThunderbird,SeaMonkey

The remote host is missing the patch for the advisory SUSE-SA:2006:054 MozillaFirefox,MozillaThunderbird,SeaMonkey. Security updates have been released that bring Mozilla Firefox to version 1.5.0.7, Mozilla Thunderbird to version 1.5.0.7 and Mozilla SeaMonkey to 1.0.5. SeaMonkey and Thunderbird...

SUSE-SA:2006:068: MozillaFirefox,MozillaThunderbird,SeaMonkey

The remote host is missing the patch for the advisory SUSE-SA:2006:068 MozillaFirefox,MozillaThunderbird,SeaMonkey. MozillaFirefox has been updated to the security update release 1.5.0.8, MozillaThunderbird has been updated to 1.5.0.8, and the Mozilla SeaMonkey suite has been updated to 1.0.6 to...

SUSE-SA:2007:006: mozilla

The remote host is missing the patch for the advisory SUSE-SA:2007:006 mozilla. A number of security issues have been fixed in the Mozilla browser suite, which could be used by remote attackers to gain privileges, access to confidential information or cause denial of service attacks. Since the...

SUSE-SA:2006:048: MozillaFirefox,MozillaThunderbird,SeaMonkey

The remote host is missing the patch for the advisory SUSE-SA:2006:048 MozillaFirefox,MozillaThunderbird,SeaMonkey. To fix various security problems we released update packages that bring Mozilla Firefox to version 1.5.0.6, MozillaThunderdbird to version 1.5.0.5 and the SeaMonkey Suite to version...

Slackware 11.0 : seamonkey (SSA:2006-357-03)

A new seamonkey package is available for Slackware 11.0 to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2006-357-03. The text itself is copyright C Slackware Linux,...

Code injection

Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname location.hostname DOM property, due to...

CVE-2007-0981

CVE-2007-0981 affects Mozilla-based browsers (Firefox up to 1.5.0.10 and 2.x up to 2.0.0.2; SeaMonkey up to 1.0.8). The root cause is a handling flaw when location.hostname is modified via a URI containing a null byte, interacting with DNS resolver code, which can bypass the same-origin policy an...

CVE-2007-0981

Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname location.hostname DOM property, due to...

CVE-2007-0981: Undefined Security Weakness

Mozilla based browsers, including Firefox before 1.5.0.10 and 2.x before 2.0.0.2, and SeaMonkey before 1.0.8, allow remote attackers to bypass the same origin policy, steal cookies, and conduct other attacks by writing a URI with a null byte to the hostname location.hostname DOM property, due to...

Mozilla JavaScript Engine multiple memory corruption vulnerabilities

Overview Several vulnerabilities exists in the Mozilla JavaScript Engine that may allow a remote attacker to compromise a vulnerable system. Description The Mozilla JavaScript Engine contains multiple vulnerabilities that may result in memory corruption. According to the Mozilla Foundation Securi...

Mozilla LiveConnect vulnerable to crash finalizing JS objects

Overview A vulnerability exists in the Mozilla LiveConnect that may allow a remote attacker to cause a denial of service. Description Mozilla LiveConnect, which allows communication between Java applets and web JavaScript, contains a vulnerability in the way freed objects are re-used that may...

Fedora Core 5 : nss-3.11.3-0.5.fc5 (2006-979)

Network Security Services NSS is a set of libraries designed to support cross-platform development of security-enabled client and server applications. Applications built with NSS can support SSL v2 and v3, TLS, PKCS 5, PKCS 7, PKCS 11, PKCS 12, S/MIME, X.509 v3 certificates, and other security...

GLSA-200701-04 : SeaMonkey: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200701-04 SeaMonkey: Multiple vulnerabilities An anonymous researcher found evidence of memory corruption in the way SeaMonkey handles certain types of SVG comment DOM nodes. Georgi Guninski and David Bienvenu discovered buffer...

SeaMonkey: Multiple vulnerabilities

Background The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the 'Mozilla Application Suite'. Description An anonymous researcher found evidence of memory corruption in the way SeaMonkey handles certain types ...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2006:0759)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

CentOS 3 / 4 : seamonkey (CESA-2006:0759)

Updated SeaMonkey packages that fix several security bugs are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, advanced email and newsgroup client...

[slackware-security] seamonkey

A new seamonkey package is available for Slackware 11.0 to fix security issues. Here are the details from the Slackware 11.0 ChangeLog: patches/packages/seamonkey-1.0.7-i486-1slack11.0.tgz: Upgraded to seamonkey-1.0.7. This upgrade fixes several possible security bugs. For more information, see:...

Mozilla Firefox/SeaMonkey/Thunderbird多个安全漏洞

Mozilla Firefox/SeaMonkey/Thunderbird是Mozilla开发的WEB浏览器和邮件客户端等套件。 Mozilla Firefox/SeaMonkey/Thunderbird存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息，执行任意代码，提升特权等攻击。 具体包含： -当使用CSS指针属性设置指针到部分图象时，在转换图象到Windows bitmap时由于错误的大小处理会导致堆溢出。 -使用JavaScript watch可导致特权提升。 -bridge代码允许Java applets和JavaScript通信，由于重用已经释放的对象可导致应用程序崩溃。...