多个浏览器HTTPS内容上下文中的HTTP资源安全绕过漏洞

Bugraq ID: 35403 CVE ID：CVE-2009-2065 CVE-2009-2064 CVE-2009-2066 CVE-2009-2067 CNCVE ID：CNCVE-20092065 CNCVE-20092064 CNCVE-20092066 CNCVE-20092067 当页面通过不安全方法对安全内容请求资源进行操作时不正确显示警告，可导致绕过多个WEB浏览器安全限制。 攻击者可以利用这个漏洞进行钓鱼攻击或获得敏感信息。不过要利用此漏洞，攻击者必须截获或控制网络通信，如通过中间人，DNS毒药等攻击。 如下浏览器受此漏洞影响： Microsoft Internet...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2009:1095 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open sour...

Foxit Reader contains multiple vulnerabilities in the processing of JPX data

Overview Foxit Reader contains multiple vulnerabilities that may allow an attacker to execute arbitrary code. Description Foxit Reader is software designed to view Portable Document Format PDF files. Foxit Reader contains multiple vulnerabilities in the handling of JPX JPEG2000 streams. These...

[SECURITY] Fedora 9 Update: firefox-3.0.11-1.fc9

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

[SECURITY] Fedora 9 Update: epiphany-extensions-2.22.1-12.fc9

Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...

[SECURITY] Fedora 9 Update: kazehakase-0.5.6-4.fc9.3

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine...

[SECURITY] Fedora 9 Update: galeon-2.0.7-11.fc9

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 9 Update: epiphany-2.22.2-12.fc9

Epiphany is a simple GNOME web browser based on the Mozilla rendering engine...

[SECURITY] Fedora 10 Update: kazehakase-0.5.6-4.fc10.3

Kazehakase is a Web browser which aims to provide a user interface that is truly user-friendly & fully customizable. This package uses Gecko for HTML rendering engine...

[SECURITY] Fedora 10 Update: galeon-2.0.7-11.fc10

Galeon is a web browser built around Gecko Mozilla's rendering engine and Necko Mozilla's networking engine. It's a GNOME web browser, designed to take advantage of as many GNOME technologies as makes sense. Galeon was written to do just one thing - browse the web...

[SECURITY] Fedora 10 Update: epiphany-extensions-2.24.3-2.fc10

Epiphany Extensions is a collection of extensions for Epiphany, the GNOME web browser...

[SECURITY] Fedora 10 Update: firefox-3.0.11-1.fc10

Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and portability...

RedHat Security Advisory RHSA-2009:1096

The remote host is missing updates announced in advisory RHSA-2009:1096. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

RedHat Security Advisory RHSA-2009:1096

The remote host is missing updates announced in advisory RHSA-2009:1096. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

RedHat Security Advisory RHSA-2009:1095

The remote host is missing updates announced in advisory RHSA-2009:1095. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

CentOS 3 : seamonkey (CESA-2009:1096)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:1096 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source W...

RHEL 4 / 5 : firefox (RHSA-2009:1095)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

Firefox JavaScript engine crashes

The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1 jsLeaveSharpObject, 2...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...