Content-Disposition: attachment ignored if Content-Type: multipart also present

Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTTP headers, which allows remote attackers to conduct cross-site scripting XSS...

Mozilla Integer Overflow in XSLT Node Sorting

Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a large text value for a node...

Mandriva Update for desktop-common-data MDVA-2010:135 (desktop-common-data)

Check for the Version of desktop-common-data OpenVAS Vulnerability Test Mandriva Update for desktop-common-data MDVA-2010:135 desktop-common-data Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can...

Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 (firefox-ext-plasmanotify)

Check for the Version of firefox-ext-plasmanotify OpenVAS Vulnerability Test Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 firefox-ext-plasmanotify Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free...

Mozilla Foundation Security Advisory 2010-10

Mozilla Foundation Security Advisory 2010-10 Title: XSS via plugins and unprotected Location object Impact: High Announced: March 23, 2010 Reporter: Blake Kaplan Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Mozilla developer Blake Kaplan reported that the window.location object was...

Mozilla Foundation Security Advisory 2010-13

Mozilla Foundation Security Advisory 2010-13 Title: Content policy bypass with image preloading Impact: Moderate Announced: March 23, 2010 Reporter: Josh Soref, Nokia Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Mozilla developer Josh Soref of Nokia reported that documents failed to...

Mozilla Foundation Security Advisory 2010-15

Mozilla Foundation Security Advisory 2010-15 Title: Asynchronous Auth Prompt attaches to wrong window Impact: Low Announced: March 23, 2010 Reporter: Justin Dolske Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Mozilla developer Justin Dolske reported that the new asynchronous...

Mozilla Foundation Security Advisory 2010-09

Mozilla Foundation Security Advisory 2010-09 Title: Deleted frame reuse in multipart/x-mixed-replace image Impact: Moderate Announced: March 23, 2010 Reporter: regenrecht via TippingPoint's Zero Day Initiative Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Security researcher regenrech...

Mozilla Foundation Security Advisory 2010-08

Mozilla Foundation Security Advisory 2010-08 Title: WOFF heap corruption due to integer overflow Impact: Critical Announced: March 22, 2010 Reporter: Evgeny Legerov Products: Firefox 3.6 Fixed in: Firefox 3.6.2 Description Security researcher Evgeny Legerov of Intevydis reported that the WOFF...

Design/Logic Flaw

The nsDocument::MaybePreLoadImage function in content/base/src/nsDocument.cpp in the image-preloading implementation in Mozilla Firefox 3.6 before 3.6.2 does not apply scheme restrictions and policy restrictions to the image's URL, which might allow remote attackers to cause a denial of service...

Cross site scripting

Mozilla Firefox 3.6 before 3.6.2 does not offer plugins the expected window.location protection mechanism, which might allow remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via vectors that are specific to each affected plugin...

CVE-2010-0168

Technical details for CVE-2010-0168 are not provided in the supplied documents. The materials reference Firefox historical fixes and related advisories but do not describe affected components, root cause, impact, or remediation for this CVE. Monitor for updates.

CVE-2010-1121

Mozilla Firefox 3.6.x before 3.6.3 does not properly manage the scopes of DOM nodes that are moved from one document to another, which allows remote attackers to conduct use-after-free attacks and execute arbitrary code via unspecified vectors involving improper interaction with garbage collectio...

Mozilla Firefox Unspecified Vulnerability (Windows)

The host is running Mozilla Firefox and is prone to unspecified vulnerability. OpenVAS Vulnerability Test $Id: secpodfirefoxunspecifiedvuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Mozilla Firefox Unspecified Vulnerability Windows Authors: Madhuri D Copyright: Copyright c 2010 SecPod,...

XSS using addEventListener and setTimeout on a wrapped object — Mozilla

Mozilla security researcher mozbugra4 reports that by using an appropriately wrapped object it was possible to bypass the fix for MFSA 2007-19. Prior to Firefox 3.6 this gives an attacker the ability to perform cross-site scripting attacks against arbitrary sites as in the original MFSA 2007-19...

Integer overflow

Integer overflow in the decompression functionality in the Web Open Fonts Format WOFF decoder in Mozilla Firefox 3.6 before 3.6.2 and 3.7 before 3.7 alpha 3 allows remote attackers to execute arbitrary code via a crafted WOFF file that triggers a buffer overflow, as demonstrated by the vdff modul...

Mozilla Firefox 3.6 (memory corruption) Denial Of Service

Exploit for unknown platform in category dos / poc ========================================================= Mozilla Firefox 3.6 memory corruption Denial Of Service ========================================================= - Discovered by: Crux - Exploit name: Mozilla Firefox 3.6 memory corruptio...

Firefox 3.6 (XML parser) Memory Corruption PoC/DoS

Exploit for unknown platform in category dos / poc ================================================== Firefox 3.6 XML parser Memory Corruption PoC/DoS ================================================== Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested:...

Mozilla Firefox 3.6 - XML Parser Memory Corruption (PoC) / Denial of Service

Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested: version 3.6 Tested on windows XP SP3 20-01-2010 This same bug was in early version of firfox,found by Wojciech Pawlikowski This is just a update. This vulnerability cause a denial of service memory...

Mozilla Firefox 3.6 - XML Parser Memory Corruption (PoC) Denial of Service

Mozilla Firefox 3.6 - XML Parser Memory Corruption PoC Denial of Service Firefox 3.6XML parsermemory corruption PoC/Dos by d3b4g From tiny islands of maldivies Tested: version 3.6 Tested on windows XP SP3 20-01-2010 This same bug was in early version of firfox,found by Wojciech Pawlikowski This i...