Mozilla Foundation Security Advisory 2008-54

Mozilla Foundation Security Advisory 2008-54 Title: Buffer overflow in http-index-format parser Impact: Critical Announced: November 12, 2008 Reporter: Justin Schuh Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.4 Firefox 2.0.0.18 SeaMonkey 1.1.13 Description Justin Schuh of the IBM X-Force...

Mozilla -moz-binding property bypasses security checks on codebase principals

Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypass the protection mechanism for codebase principals and execute arbitrary script via the -moz-binding CSS property in a signed JAR file...