Mozilla Foundation Security Advisory 2010-13

Mozilla Foundation Security Advisory 2010-13 Title: Content policy bypass with image preloading Impact: Moderate Announced: March 23, 2010 Reporter: Josh Soref, Nokia Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Mozilla developer Josh Soref of Nokia reported that documents failed to...

CVE-2010-0182

The XMLDocument::load function in Mozilla Firefox before 3.5.9 and 3.6.x before 3.6.2, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 does not perform the expected nsIContentPolicy checks during loading of content by XML documents, which allows attackers to bypass intended access restrictio...

Mozilla Firefox 3.6 - Image Preloading Content-Policy Check Security Bypass

source: https://www.securityfocus.com/bid/38927/info Mozilla Firefox is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass content-loading policies. Attackers can exploit this issue to bypass content-loading policies. The impact of this issue will depend on the...

Mozilla Firefox 3.6 - Image Preloading Content-Policy Check Security Bypass

Mozilla Firefox 3.6 - Image Preloading Content-Policy Check Security Bypass source: https://www.securityfocus.com/bid/38927/info Mozilla Firefox is prone to a security-bypass vulnerability. Attackers can exploit this issue to bypass content-loading policies. Attackers can exploit this issue to...

FreeBSD : mozilla -- multiple vulnerabilities (da185955-5738-11de-b857-000f20797ede)

Mozilla Foundation reports : MFSA 2009-32 JavaScript chrome privilege escalation MFSA 2009-31 XUL scripts bypass content-policy checks MFSA 2009-30 Incorrect principal set for file: resources loaded via location bar MFSA 2009-29 Arbitrary code execution using event listeners attached to an elemen...

Mozilla Foundation Security Advisory 2009-31

Mozilla Foundation Security Advisory 2009-31 Title: XUL scripts bypass content-policy checks Impact: Low Announced: June 11, 2009 Reporter: Wladimir Palant Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Description Mozilla add-on developer and community member Wladimir Palant...

CVE-2009-1840

Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web...

CVE-2009-1840

CVE-2009-1840 affects Mozilla Firefox (before 3.0.11), Thunderbird and SeaMonkey, where content policy checks were not performed before loading a script file into a XUL document. This allowed a crafted HTML document (e.g., via a web bug in email or a web page/ad) to bypass intended access restric...

CVE-2009-1840

Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web...

CVE-2009-1840

Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web...

Firefox XUL scripts skip some security checks

Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web...