Research In Motion BlackBerry Device Software 4.7.1 - Cross Domain Information Disclosure

source: https://www.securityfocus.com/bid/43685/info Research In Motion BlackBerry Device Software is prone to a cross-domain information-disclosure vulnerability because the application's web browser fails to properly enforce the same-origin policy. An attacker can exploit this issue to access...

BSA-002 Security Update for iceweasel

Alexander Reichle-Schmehl uploaded new packages for iceweasel which fixed the following security problems: CVE-2010-3169: Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and...

Mozilla Firefox Information Disclosure Vulnerability (Windows)

The host is installed with Mozilla Firefox and is prone to Information Disclosure Vulnerability. OpenVAS Vulnerability Test $Id: secpodmozillafirefoxinfodiscvulnwin.nasl 5394 2017-02-22 09:22:42Z teissa $ Mozilla Firefox Information Disclosure Vulnerability Windows Authors: Madhuri D Copyright:...

Mozilla Firefox Information Disclosure Vulnerability - Windows

Mozilla Firefox is prone to an information disclosure vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA-2106-2] New xulrunner packages fix regression

------------------------------------------------------------------------ Debian Security Advisory DSA-2106-2 [email protected] http://www.debian.org/security/ Stefan Fritsch September 19, 2010 http://www.debian.org/security/faq -...

[FLOCK-SA-2010-04] Flock Browser: window.open() Method Javascript Same-Origin Policy Violation (XSS)

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 FLOCK-SA-2010-04 http://flock.com/security/ Title: window.open Method Javascript Same-Origin Policy Violation XSS Impact: High Announced on: 2010-09-09 Affected Products: Flock 3 versions prior to 3.0.0.4094 CVEs cve.mitre.org: CVE-2010-0661 Details:...

Ubuntu 10.04 LTS : thunderbird regression (USN-978-2)

USN-978-1 fixed vulnerabilities in Thunderbird. Some users reported stability problems under certain circumstances. This update fixes the problem. We apologize for the inconvenience. Several dangling pointer vulnerabilities were discovered in Thunderbird. An attacker could exploit this to crash...

USN-978-2: Thunderbird regression

USN-978-1 fixed vulnerabilities in Thunderbird. Some users reported stability problems under certain circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Several dangling pointer vulnerabilities were discovered in Thunderbird. An attacker...

Mozilla Firefox 3.6.8 - Math.random() Cross Domain Information Disclosure

Mozilla Firefox 3.6.8 - Math.random Cross Domain Information Disclosure // source: https://www.securityfocus.com/bid/43222/info Mozilla Firefox is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a pag...

Mozilla Firefox 3.6.8 - 'Math.random()' Cross Domain Information Disclosure

// source: https://www.securityfocus.com/bid/43222/info Mozilla Firefox is prone to a cross-domain information-disclosure vulnerability. An attacker can exploit this issue by tricking an unsuspecting victim into viewing a page containing malicious content. Successful exploits will allow attackers...

Mozilla Products 'SJOW' Multiple Vulnerabilities (Windows)

The host is installed with Mozilla Firefox/Seamonkey/Thunderbird that are prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtssjowmultvulnwin.nasl 6444 2017-06-27 11:24:02Z santu $ Mozilla Products 'SJOW' Multiple Vulnerabilities Windows Authors: Madhuri D Copyright:...

Mozilla Foundation Security Advisory 2010-60

Mozilla Foundation Security Advisory 2010-60 Title: XSS using SJOW scripted function Impact: High Announced: September 7, 2010 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.5.12 Thunderbird 3.0.7 SeaMonkey 2.0.7 Description Mozilla security researcher mozbugra4...

Ubuntu Update for thunderbird vulnerabilities USN-978-1

Ubuntu Update for Linux kernel vulnerabilities USN-978-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN9781.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for thunderbird vulnerabilities USN-978-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Mozilla Products 'SJOW' Multiple Vulnerabilities (MFSA2010-60) - Windows

Mozilla Firefox/Seamonkey/Thunderbird are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2010-2763

The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper aka SJOW implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct...

Cross site scripting

The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper aka SJOW implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct...

CVE-2010-2763

CVE-2010-2763 concerns the XPCSafeJSObjectWrapper (SJOW) in Mozilla’s Firefox/XULRunner implementation. The connected documents confirm a logical error in the SJOW scripted function handling on the Mozilla 1.9.1 development branch, allowing a caller to execute a function in the context of another...

CVE-2010-2763

The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper aka SJOW implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct...

Debian DSA-2106-1 : xulrunner - several vulnerabilities

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2010-2760, CVE-2010-3167, CVE-2010-3168 Implementation errors in XUL processing allow the...

Ubuntu 8.04 LTS / 9.04 / 9.10 / 10.04 LTS : firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.1, xulrunner-1.9.2 vulnerabilities (USN-975-1)

Several dangling pointer vulnerabilities were discovered in Firefox. An attacker could exploit this to crash the browser or possibly run arbitrary code as the user invoking the program. CVE-2010-2760, CVE-2010-2767, CVE-2010-3167 Blake Kaplan and Michal Zalewski discovered several weaknesses in t...