1240 matches found
Mozilla Thunderbird < 6.0 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 6.0 and thus, is potentially affected by the following security issues : - Several memory safety bugs exist in the browser engine that may permit remote code execution. CVE-2011-2985, CVE-2011-2989, CVE-2011-2991, CVE-2011-2992 - A dangling...
Mozilla Firefox SVGTextElement.getCharNumAtPosition Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Mozilla Firefox. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the code...
CVE-2011-0084
The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute...
SeaMonkey < 2.3.0 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.3.0. Such versions are potentially affected by the following security issues : - An error in SVG text manipulation code creates a dangling pointer vulnerability. CVE-2011-0084 - Multiple, unspecified memory safety issues exist. CVE-2011-2985 - ...
Mozilla: Dangling pointer vulnerability in appendChild
The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling...
Mozilla: Crash in SVGTextElement.getCharNumAtPosition()
The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute...
Mozilla: Crash in SVGTextElement.getCharNumAtPosition()
The SVGTextElement.getCharNumAtPosition function in Mozilla Firefox before 3.6.20, and 4.x through 5; Thunderbird 3.x before 3.1.12 and other versions before 6; SeaMonkey 2.x before 2.3; and possibly other products does not properly handle SVG text, which allows remote attackers to execute...
Mozilla: Dangling pointer vulnerability in appendChild
The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x, and possibly other products does not properly handle DOM objects, which allows remote attackers to execute arbitrary code via unspecified vectors that lead to dereferencing of a "dangling...
Security issues addressed in Thunderbird 3.1.12 — Mozilla
Many of the issues listed below are not exploitable through mail since JavaScript is disabled by default in Thunderbird. These particular issues may be triggered while viewing RSS feeds and displaying full remote content rather than the feed summary. Addons that expose browser functionality may...
Security issues addressed in Firefox 3.6.20 — Mozilla
Miscellaneous memory safety hazards rv:1.9.2.20 Impact: Critical Description: Mozilla developers and community members identified and fixed several memory safety bugs in the browser engine used in Firefox 3.6 and other Mozilla-based products. Some of these bugs showed evidence of memory corruptio...
seamonkey security update
CentOS Errata and Security Advisory CESA-2011:0888 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS ba...
Debian Security Advisory DSA 2235-1 (icedove)
The remote host is missing an update to icedove announced via advisory DSA 2235-1. OpenVAS Vulnerability Test $Id: deb22351.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2235-1 icedove Authors: Thomas Reinke Copyright: Copyright c 2011 E-Soft Inc...
Debian: Security Advisory (DSA-2235-1)
The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Mozilla Firefox "nsTreeRange" Dangling Pointer Vulnerability
No description provided by source. $Id: mozillanstreerange.rb 13148 2011-07-10 21:10:45Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and term...
Mozilla Firefox "nsTreeRange" Dangling Pointer Vulnerability
$Id: mozillanstreerange.rb 13148 2011-07-10 21:10:45Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
Mozilla Firefox "nsTreeRange" Dangling Pointer Vulnerability
This module exploits a code execution vulnerability in Mozilla Firefox 3.6.x HttpClients::FF, :uaminver = "3.5", :uamaxver = "3.6.16", :osname = OperatingSystems::Match::WINDOWS, :javascript = true, :rank = NormalRanking, :vulntest = "if navigator.userAgent.indexOf'Windows NT 5.1' != -1 ||...
Mozilla Firefox "nsTreeRange" Dangling Pointer Vulnerability
Exploit for windows platform in category remote exploits $Id: mozillanstreerange.rb 13148 2011-07-10 21:10:45Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information...
Mozilla Firefox - 'nsTreeRange' Dangling Pointer (Metasploit) (1)
$Id: mozillanstreerange.rb 13148 2011-07-10 21:10:45Z sinn3r $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...
SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 4804)
Mozilla Firefox was updated to the 3.6.18 security release. - Miscellaneous memory safety hazards. MFSA 2011-19 / CVE-2011-2374 / CVE-2011-2376 / CVE-2011-2364 / CVE-2011-2365 - bmo617247 Use-after-free vulnerability when viewing XUL document with script disabled. MFSA 2011-20 / CVE-2011-2373 -...
MozillaThunderbird: Update to Thunderbird 3.1.11 (important)
Mozilla Thunderbird was updated to the 3.1.11 release. It has new features, fixes lots of bugs, and also fixes the following security issues: MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards MFSA 2011-20/CVE-2011-2373 bmo617247 Use-after-fre...