Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 (firefox-ext-plasmanotify)

Check for the Version of firefox-ext-plasmanotify OpenVAS Vulnerability Test Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 firefox-ext-plasmanotify Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 (firefox-ext-plasmanotify)

Check for the Version of firefox-ext-plasmanotify OpenVAS Vulnerability Test Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 firefox-ext-plasmanotify Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Mandriva Linux Security Advisory : firefox (MDVSA-2010:070-1)

Security issues were identified and fixed in firefox : Security researcher regenrecht reported via TippingPoint's Zero Day Initiative a potential reuse of a deleted image frame in Firefox 3.6's handling of multipart/x-mixed-replace images. Although no exploit was shown, re-use of freed memory has...

Mozilla Foundation Security Advisory 2010-15

Mozilla Foundation Security Advisory 2010-15 Title: Asynchronous Auth Prompt attaches to wrong window Impact: Low Announced: March 23, 2010 Reporter: Justin Dolske Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Mozilla developer Justin Dolske reported that the new asynchronous...

Firefox Multiple Vulnerabilities (Mar 2010) - Windows

Firefox browser is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox 3.6 异步HTTP授权提示信息泄露漏洞

BUGTRAQ ID: 38920 CVECAN ID: CVE-2010-0172 Firefox是一款流行的开源WEB浏览器。 Firefox的异步授权提示（HTTP用户名和口令）有时被附加到了错误的窗口上。恶意网页可以诱骗用户打开到可信任服务的新标签页或弹出框，之后让恶意网页的HTTP授权提示看起来为可信任网页的登录提示。目前很少有网站仍在使用HTTP授权，基本都在使用Web表单和Cookie。 Mozilla Firefox 3.6 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

CVE-2010-0172

toolkit/components/passwordmgr/src/nsLoginManagerPrompter.js in the asynchronous Authorization Prompt implementation in Mozilla Firefox 3.6 before 3.6.2 does not properly handle concurrent authorization requests from multiple web sites, which might allow remote web servers to spoof an authorizati...

CVE-2010-0172

CVE-2010-0172 affects Mozilla Firefox 3.6 before 3.6.2 due to a race condition in the asynchronous Authorization Prompt (nsLoginManagerPrompter.js). The vulnerability arises when multiple web sites request HTTP authentication concurrently, potentially allowing a remote site to spoof an authorizat...

Mandriva Update for blogtk MDVA-2010:070-1 (blogtk)

Check for the Version of blogtk OpenVAS Vulnerability Test Mandriva Update for blogtk MDVA-2010:070-1 blogtk Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under...