Null pointer dereference

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

Design/Logic Flaw

Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable files, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted file. NOTE: this vulnerability exists because of an incorrect fix for...

CVE-2011-3666

Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable files, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted file. NOTE: this vulnerability exists because of an incorrect fix for...

CVE-2011-3664

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

CVE-2011-3666

Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable files, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted file. NOTE: this vulnerability exists because of an incorrect fix for...

CVE-2011-3664

Affected software: Mozilla Firefox, Thunderbird, and SeaMonkey on Mac OS X. Vulnerable behavior: plugins can delete a DOM frame, triggering an incorrect pointer dereference that may crash the application (DoS) and potentially other unspecified impacts. Severity: base CVSS 2.0 score 6.8 (MEDIUM). ...

CVE-2011-3666

Based on the Connected documents, CVE-2011-3666 is tied to Mozilla Firefox and Thunderbird on Mac OS X where a fix for CVE-2011-2372 was incorrectly applied, allowing a user-assisted bypass related to executable handling of .jar-like files via crafted web content. The Nessus/OpenSSH-related advis...

CVE-2011-3664: Undefined Security Weakness

Mozilla Firefox before 9.0, Thunderbird before 9.0, and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins, which allows remote attackers to cause a denial of service incorrect pointer dereference and application crash or possibly have unspecified other...

CVE-2011-3666: Undefined Security Weakness

Mozilla Firefox before 3.6.25 and Thunderbird before 3.1.17 on Mac OS X do not consider .jar files to be executable files, which allows user-assisted remote attackers to bypass intended access restrictions via a crafted file. NOTE: this vulnerability exists because of an incorrect fix for...

Firefox 3.6 < 3.6.25 Jar File Enter Key Dialog Bypass (Mac OS X)

The installed version of Firefox 3.6 is earlier than 3.6.25. Such versions are potentially affected by a security bypass vulnerability. The fix for MFSA-2011-40 was incomplete regarding Java Jar files. The files were intended to be treated as executables as part of the fix, but they are not treat...

PT-2011-4573

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.25 Thunderbird versions prior to 3.1.17 Description The issue allows user-assisted remote attackers to bypass intended access restrictions via a crafted file, because .jar files are not considered executab...

Apple Safari缓存对象历史枚举漏洞

CVE ID: CVE-2011-4692 Safari是苹果计算机的最新作业系统Mac OS X中的浏览器，使用了KDE的KHTML作为浏览器的运算核心。 Apple Safari在处理缓存对象时存在错误，可被恶意用户利用枚举已浏览的站点，泄露敏感信息。 0 Apple Safari 5.x 厂商补丁： Apple ----- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本： http://support.apple.com/...

Thunderbird 3.1 < 3.1.17 Jar File Enter Key Dialog Bypass (Mac OS X)

The installed version of Thunderbird 3.1 is earlier than 3.1.16. Such versions are potentially affected by a security bypass vulnerability. The fix for MFSA-2011-40 was incomplete regarding Java Jar files. The files were intended to be treated as executables as part of the fix, but they are not...

Thunderbird 8.x Multiple Vulnerabilities (Mac OS X)

The installed version of Thunderbird 8.x is potentially affected by the following security issues : - An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler. CVE-2011-3658 - Various memo...

Firefox 8.x Multiple Vulnerabilities (Mac OS X)

The installed version of Firefox 8.x is potentially affected by the following security issues : - An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler. CVE-2011-3658 - Various memory...

.jar not treated as executable in Firefox 3.6 on Mac — Mozilla

Part of the fix for MFSA 2011-40, reported by Mariusz Mlynski, was to treat .jar files as executables. This is necessary because Java treats downloaded .jar files as fully-featured "Applications" rather than restricting them to the limited privileges of in-browser "Applets". The fix taken in...

Crash when plugin removes itself on Mac OS X — Mozilla

FireBreath developer Richard Bateman reported a crash on Mac OS X that occurred when a plugin deletes its containing DOM frame during a call from that frame. The observed symptom is a null dereference but we cannot rule out the possibility that content from a scriptable plugin such as Flash could...

Fedora Update for ejabberd FEDORA-2011-16282

Check for the Version of ejabberd OpenVAS Vulnerability Test Fedora Update for ejabberd FEDORA-2011-16282 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

CVE-2011-4369

Unspecified vulnerability in the PRC component in Adobe Reader and Acrobat 9.x before 9.4.7 on Windows, Adobe Reader and Acrobat 9.x through 9.4.6 on Mac OS X, Adobe Reader and Acrobat 10.x through 10.1.1 on Windows and Mac OS X, and Adobe Reader 9.x through 9.4.6 on UNIX allows remote attackers ...