1741 matches found
Firefox XSS via XBL bindings to unloaded document
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting XSS attacks via an XBL binding to an "unloaded document."...
openSUSE 10 Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-5881)
The Mozilla XULRunner 1.8.1 engine received backports for security problems in 1.9.0.5. The following security issues were fixed : MFSA 2008-68 / CVE-2008-5512 / CVE-2008-5511: Mozilla security researcher mozbugra4 reported that an XBL binding, when attached to an unloaded document, can be used t...
USN-701-2: Thunderbird vulnerabilities
Several flaws were discovered in the browser engine. If a user had Javascript enabled, these problems could allow an attacker to crash Thunderbird and possibly execute arbitrary code with user privileges. CVE-2008-5500 Boris Zbarsky discovered that the same-origin check in Thunderbird could be...
Mozilla Thunderbird < 2.0.0.19 Multiple Vulnerabilities
Binary data 4806.prm...
Mozilla Thunderbird < 2.0.0.19 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 2.0.0.19. Such versions are potentially affected by the following security issues : - There are several stability bugs in the browser engine that could lead to crashes with evidence of memory corruption. MFSA 2008-60 - XBL bindings can be used ...
[SECURITY] Fedora 8 Update: gnome-python2-extras-2.19.1-20.fc8
The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...
[SECURITY] Fedora 9 Update: gnome-python2-extras-2.19.1-22.fc9
The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...
[SECURITY] Fedora 10 Update: gnome-python2-extras-2.19.1-25.fc10
The gnome-python-extra package contains the source packages for additional Python bindings for GNOME. It should be used together with gnome-python...
[SECURITY] Fedora 10 Update: ruby-gnome2-0.18.1-2.fc10
This is a set of bindings for the GNOME-2.x libraries for use from Ruby...
[SECURITY] Fedora 10 Update: gecko-sharp2-0.13-3.fc10
This package provides Mono bindings for the Gecko engine, through an easy-to-use widget that will allow you to embed a Mozilla browser window into your Gtk application...
USN-690-3: Firefox vulnerabilities
Several flaws were discovered in the browser engine. These problems could allow an attacker to crash the browser and possibly execute arbitrary code with user privileges. CVE-2008-5500 Boris Zbarsky discovered that the same-origin check in Firefox could be bypassed by utilizing XBL-bindings. An...
Mozilla Foundation Security Advisory 2008-61
Mozilla Foundation Security Advisory 2008-61 Title: Information stealing via loadBindingDocument Impact: Moderate Announced: December 16, 2008 Reporter: Boris Zbarsky Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 2.0.0.19 Thunderbird 2.0.0.19 SeaMonkey 1.1.14 Description Mozilla...
CVE-2008-5503
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL...
Security feature bypass
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL...
CVE-2008-5503
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL...
Firefox 2 Information stealing via loadBindingDocument
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL...
Firefox XSS via XBL bindings to unloaded document
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting XSS attacks via an XBL binding to an "unloaded document."...
CVE-2008-5503
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allows remote attackers to read or access data from other domains via crafted XBL...
SeaMonkey < 1.1.14 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 1.1.14. Such versions are potentially affected by the following security issues : - There are several stability bugs in the browser engine that may lead to crashes with evidence of memory corruption. MFSA 2008-60 - XBL bindings can be used to rea...