openSUSE Security Update : seamonkey (seamonkey-1014)

The Mozilla SeaMonkey browser suite was updated to version 1.1.16, fixing various bugs and security issues : - Security update to 1.1.16 - MFSA 2009-12/CVE-2009-1169 bmo460090,485217 Crash and remote code execution in XSL transformation - MFSA 2009-14/CVE-2009-1303/CVE-2009-1305 Crashes with...

SUSE: Security Advisory for MozillaFirefox (SUSE-SA:2009:034)

The remote host is missing updates announced in advisory SUSE-SA:2009:034. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

openSUSE 10 Security Update : seamonkey (seamonkey-6310)

The Mozilla SeaMonkey browser suite was updated to version 1.1.16, fixing various bugs and security issues : - Security update to 1.1.16 - MFSA 2009-12/CVE-2009-1169 bmo460090,485217 Crash and remote code execution in XSL transformation - MFSA 2009-14/CVE-2009-1303/CVE-2009-1305 Crashes with...

FreeBSD : mozilla -- multiple vulnerabilities (da185955-5738-11de-b857-000f20797ede)

Mozilla Foundation reports : MFSA 2009-32 JavaScript chrome privilege escalation MFSA 2009-31 XUL scripts bypass content-policy checks MFSA 2009-30 Incorrect principal set for file: resources loaded via location bar MFSA 2009-29 Arbitrary code execution using event listeners attached to an elemen...

Mozilla Foundation Security Advisory 2009-25

Mozilla Foundation Security Advisory 2009-25 Title: URL spoofing with invalid unicode characters Impact: Low Announced: June 11, 2009 Reporter: Pavel Cvrcek Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.11 SeaMonkey 1.1.17 Description Mozilla add-on developer Pavel Cvrcek reported that certa...

URL spoofing with invalid unicode characters — Mozilla

Mozilla add-on developer Pavel Cvrcek reported that certain invalid unicode characters, when used as part of an IDN, are displayed as whitespace in the location bar. This whitespace could be used to force part of the URL out of view in the location bar. An attacker could use this vulnerability to...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: MFSA 2009-32 JavaScript chrome privilege escalation MFSA 2009-31 XUL scripts bypass content-policy checks MFSA 2009-30 Incorrect principal set for file: resources loaded via location bar MFSA 2009-29 Arbitrary code execution using event listeners attached to an element...

Browsers and search systems URL spoofing

By using xx in host name it's possible to spoof URL origin...

URL Spoofing vulnerabilities in browsers and search engines

Hello 3APA3A! I continue the topic, which I begun in previous two advisories about URL Spoofing vulnerability http://websecurity.com.ua/3079/ in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer http://websecurity.com.ua/3096/, which also can exists in bots of other search engines. And I tel...

URL Spoofing vulnerability in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer #2

Hello 3APA3A! I already wrote you about URL Spoofing vulnerability in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer http://websecurity.com.ua/3079/, which also can exists in bots of other search engines. As I mentioned, with this vulnerability it's possible to spoof URL and conduct fishi...

URL Spoofing vulnerability in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer

Hello 3APA3A! I want to warn you about URL Spoofing vulnerability in GoogleBot, Yahoo! Slurp, Mozilla and Internet Explorer. If vulnerabilities in browsers I found often, than it's first time when I found vulnerability in search engine's bot spider. Bots of other search engines also can be...

Mozilla Foundation Security Advisory 2009-15

Mozilla Foundation Security Advisory 2009-15 Title: URL spoofing with box drawing character Impact: Low Announced: April 21, 2009 Reporter: Moxie Marlinspike Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.9 Thunderbird 2.0.0.21 SeaMonkey 1.1.15 Description Security researcher Mox...

Mozilla patches a dozen Firefox vulnerabilities

Mozilla has shipped a refresh mozilla.com of its flagship Firefox browser to fix a dozen documented vulnerabilities that expose users to URL spoofing, cross-site scripting, code injection and code execution attacks. The most serious fix covers four browser engine and JavaScript engine crashes whe...

FreeBSD : mozilla -- multiple vulnerabilities (3b18e237-2f15-11de-9672-0030843d3802)

Mozilla Foundation reports : MFSA 2009-22: Firefox allows Refresh header to redirect to javascript: URIs MFSA 2009-21: POST data sent to wrong site when saving web page with embedded frame MFSA 2009-20: Malicious search plugins can inject code into arbitrary sites MFSA 2009-19: Same-origin...

URL spoofing with box drawing character — Mozilla

Bjoern Hoehrmann and security researcher Moxie Marlinspike independently reported that Unicode box drawing characters were allowed in Internationalized Domain Names IDN where they could be visually confused with punctuation used in valid web addresses. This could be combined with a phishing-type...

mozilla -- multiple vulnerabilities

Mozilla Foundation reports: MFSA 2009-22: Firefox allows Refresh header to redirect to javascript: URIs MFSA 2009-21: POST data sent to wrong site when saving web page with embedded frame MFSA 2009-20: Malicious search plugins can inject code into arbitrary sites MFSA 2009-19: Same-origin...

Mozilla Thunderbird Multiple Vulnerabilities Mar-09 (Windows)

The host is installed with Mozilla Thunderbird and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbthunderbirdmultvulnmar09win.nasl 4892 2016-12-30 15:39:07Z teissa $ Mozilla Thunderbird Multiple Vulnerabilities Mar-09 Windows Authors: Sharath S Copyright: Copyright c 2009...

Mozilla Seamonkey Multiple Vulnerabilities Mar-09 (Linux)

The host is installed with Mozilla Seamonkey browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbseamonkeymultvulnmar09lin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey Multiple Vulnerabilities Mar-09 Linux Authors: Sharath S Copyright: Copyright c 2009...

Mozilla Firefox Multiple Vulnerabilities Mar-09 (Windows)

This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbfirefoxmultvulnmar09win.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Vulnerabilities Mar-09 Windows Authors: Sharath S Copyright: Copyright c 2009 Greenbone...

Mozilla Firefox Multiple Vulnerabilities Mar-09 (Linux)

The host is installed with Mozilla Firefox browser and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbfirefoxmultvulnmar09lin.nasl 4865 2016-12-28 16:16:43Z teissa $ Mozilla Firefox Multiple Vulnerabilities Mar-09 Linux Authors: Sharath S Copyright: Copyright c 2009...