PT-2007-6892 · Mozilla +1 · Firefox +2

Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions prior to 2.0.0.10 SeaMonkey versions prior to 1.1.7 Description: The issue allows remote attackers to spoof HTTP Referer headers and bypass Referer-based CSRF protection schemes. This is achieved by setting...

Fedora 7 : firefox-2.0.0.8-1.fc7 (2007-2664)

Fri Oct 19 2007 Christopher Aillon - 2.0.0.8-1 - Update to 2.0.0.8 - Tue Oct 16 2007 Martin Stransky - added fix for 246248 - firefox crashes when searching - Wed Jul 18 2007 Kai Engert - 2.0.0.5-1 - Update to 2.0.0.5 - Fri Jun 29 2007 Martin Stransky 2.0.0.4-3 - backported pango patches from FC6...

Fedora Core 6 : firefox-1.5.0.12-5.fc6 (2007-732)

Fri Oct 19 2007 Martin Stransky 1.5.0.12-5 - Update to latest snapshot of Mozilla 1.8.0 branch - added pathes for Mozilla bugs 199088,267833,309322,345305,361745, 362901,372309,378787,381300,384105,386914,387033,38788 1,388121,388784 390078,393537,395942 Note that Tenable Network Security has...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3933)

This update brings Mozilla Firefox to security update version 2.0.0.5 Following security problems were fixed : - MFSA 2007-18: Crashes with evidence of memory corruption The usual collection of stability fixes for crashes that look suspicious but haven't been proven to be exploitable. 25 were in...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-1585)

This updates fixes several security problems in the Mozilla Firefox 1.5 browser and brings it up to 1.5.0.4 bugfix level. The full list is at: http://www.mozilla.org/projects/security/known-vulnerabilities.htmlfi refox1.5.0.4 MFSA 2006-31/CVE-2006-2787: EvalInSandbox allows remote attackers to ga...

openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-2090)

This security update brings Mozilla Firefox to version 1.5.0.7. Please also see http://www.mozilla.org/projects/security/known-vulnerabilities.html for more details. It fixes the following security problems: MFSA 2006-64/CVE-2006-4571: Crashes with evidence of memory corruption MFSA...

DEBIAN-CVE-2006-4567

Mozilla Firefox before 1.5.0.7 and Thunderbird before 1.5.0.7 makes it easy for users to accept self-signed certificates for the auto-update mechanism, which might allow remote user-assisted attackers to use DNS spoofing to trick users into visiting a malicious site and accepting a malicious...

Fedora Core 3 : firefox-1.0.1-1.3.1 (2005-182)

This update fixes several security vulnerabilities in Firefox 1.0. It is recommended that all users update to Firefox 1.0.1. Additionally, this update backports several fixes from rawhide. This update enables pango font rendering by default. This update enables smooth scrolling by default. On...