4589 matches found
IE和Firefox浏览器Digest认证请求拆分漏洞
BUGTRAQ ID: 23668 CVECAN ID: CVE-2007-2292 IE和Firefox都是流行的WEB浏览器。 IE和Firefox在处理Digest认证方式时存在漏洞，可能导致验证失败。 如果用户使用Digest认证通过HTTP请求登录到网站的话，Firefox和IE可能无法正确地验证用户ID。恶意的网页可能在用户ID中包含有换行字符（%0a）注入头数据，如果用户通过代理进行连接的话代理就可能将认证请求解释为两个独立的请求，导致注入任意HTTP头。 Microsoft Internet Explorer 7.0.5730.11 Mozilla Thunderbird...
USN-536-1: Thunderbird vulnerabilities
Various flaws were discovered in the layout and JavaScript engines. By tricking a user into opening a malicious web page, an attacker could execute arbitrary code with the user's privileges. CVE-2007-5339, CVE-2007-5340 Flaws were discovered in the file upload form control. By tricking a user int...
thunderbird security update
CentOS Errata and Security Advisory CESA-2007:0981 Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a...
Mozilla Thunderbird < 2.0.0.8 Multiple Vulnerabilities
Binary data 4256.prm...
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-3973)
This update fixes several security problems in Mozilla Thunderbird 1.5.0.12. Following security problems were fixed : - MFSA 2007-18: Crashes with evidence of memory corruption The usual collection of stability fixes for crashes that look suspicious but haven't been proven to be exploitable. 25...
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-2421)
This security update brings Mozilla Thunderbird to version 1.5.0.9. http://www.mozilla.org/projects/security/known-vulnerabilities.html It includes fixes to the following security problems: CVE-2006-6497/MFSA2006-68: Crashes with evidence of memory corruption were fixed in the layout engine...
openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-1924)
This security update brings Mozilla Thunderbird to version 1.5.0.6. Note that on SUSE Linux 9.2, 9.3 and 10.0 this is a major version upgrade. More Details can be found on this page: http://www.mozilla.org/projects/security/known-vulnerabilities.html It includes fixes to the following security...
SUSE-SA:2007:036: mozilla,MozillaFirefox,MozillaThunderbird
The remote host is missing the patch for the advisory SUSE-SA:2007:036 mozilla,MozillaFirefox,MozillaThunderbird. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. This plugin text was extracted from SuSE Security Advisory SUSE-SA:2007:036 if ! definedfunc"bnrandom" exit0;...
Mozilla Thunderbird < 1.5.0.13 / 2.0.0.6 Multiple Vulnerabilities
The installed version of Mozilla Thunderbird allows unescaped URIs to be passed to external programs, which could lead to execution of arbitrary code, as well as privilege escalation attacks against addons that create 'about:blank' windows and populate them in certain ways. C Tenable Network...
Mozilla Thunderbird < 1.5.0.13 Multiple Vulnerabilities (deprecated)
Binary data 4152.prm...
Mozilla Thunderbird < 2.0.0.5 Multiple Vulnerabilities
The remote version of Mozilla Thunderbird suffers from various security issues, including at least one that could lead to execution of arbitrary code. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25754; scriptversion"1.18"; scriptcveid"CVE-2007-3734",...
CentOS 4 / 5 : thunderbird (CESA-2007:0723)
Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws wer...
[SECURITY] Fedora Core 6 Update: thunderbird-1.5.0.12-2.fc6
Mozilla Thunderbird is a standalone mail and newsgroup client...
thunderbird security update
CentOS Errata and Security Advisory CESA-2007:0723 Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a...
Moderate: Red Hat Security Advisory: thunderbird security update
Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having moderate security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws wer...
[SECURITY] Fedora 7 Update: thunderbird-2.0.0.4-1.fc7
Mozilla Thunderbird is a standalone mail and newsgroup client...
Mandrake Linux Security Advisory : mozilla-thunderbird (MDKSA-2007:119)
A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Thunderbird program, version 1.5.0.12. This update provides the latest Thunderbird to correct these issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in...
thunderbird security update
CentOS Errata and Security Advisory CESA-2007:0401 Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Thunderbird is a...