CVE-2009-3988

CVE-2009-3988 affects Mozilla Firefox 3.0.x (before 3.0.18), Firefox 3.5.x (before 3.5.8) and SeaMonkey before 2.0.3. The issue arises from not properly restricting read access to object properties in showModalDialog, allowing a crafted dialogArguments value to bypass the Same Origin Policy and e...

CVE-2010-0162

The CVE-2010-0162 issue affects Mozilla Firefox 3.0.x before 3.0.18, Firefox 3.5.x before 3.5.8, and SeaMonkey before 2.0.3. The root cause is improper handling of the application/octet-stream content type in contexts involving SVG and EMBED, allowing remote attackers to bypass Same Origin Policy...

RedHat Update for firefox RHSA-2010:0112-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2010:0112-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Ubuntu Update for Firefox 3.0 and Xulrunner 1.9 vulnerabilities USN-895-1

Ubuntu Update for Linux kernel vulnerabilities USN-895-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8951.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Firefox 3.0 and Xulrunner 1.9 vulnerabilities USN-895-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks...

Mozilla Foundation Security Advisory 2010-04

Mozilla Foundation Security Advisory 2010-04 Title: XSS due to window.dialogArguments being readable cross-domain Impact: Moderate Announced: February 17, 2010 Reporter: Hidetake Jo, TippingPoint ZDI Products: Firefox, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18 SeaMonkey 2.0.3...

RedHat Update for firefox RHSA-2010:0112-01

Check for the Version of firefox OpenVAS Vulnerability Test RedHat Update for firefox RHSA-2010:0112-01 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it under the...

Mozilla Foundation Security Advisory 2010-05

Mozilla Foundation Security Advisory 2010-05 Title: XSS hazard using SVG document and binary Content-Type Impact: Moderate Announced: February 17, 2010 Reporter: Georgi Guninski Products: Firefox, SeaMonkey Fixed in: Firefox 3.6 Firefox 3.5.8 Firefox 3.0.18 SeaMonkey 2.0.3 Description Mozilla...

CentOS Update for firefox CESA-2010:0112 centos4 i386

Check for the Version of firefox OpenVAS Vulnerability Test CentOS Update for firefox CESA-2010:0112 centos4 i386 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Ubuntu Update for Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities USN-896-1

Ubuntu Update for Linux kernel vulnerabilities USN-896-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN8961.nasl 7965 2017-12-01 07:38:25Z santu $ Ubuntu Update for Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities USN-896-1 Authors: System Generated Check Copyright: Copyright c 2010 Greenbone Network...

Ubuntu: Security Advisory (USN-895-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1999-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1999-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff February 18, 2010 http://www.debian.org/security/faq -...

CVE-2010-0661

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method...

Buffer overflow

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method...

CVE-2010-0661

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method...

CVE-2010-0661

The CVE-2010-0661 issue affects WebKit/WebCore: V8DOMWindowCustom.cpp in WebKit before r52401, which is used in Google Chrome up to version 4.0.249.78. The vulnerability allows remote attackers to bypass the Same Origin Policy via vectors involving window.open. Connected sources confirm the affec...

CVE-2010-0661

Removed by vendor...

CVE-2010-0661

WebCore/bindings/v8/custom/V8DOMWindowCustom.cpp in WebKit before r52401, as used in Google Chrome before 4.0.249.78, allows remote attackers to bypass the Same Origin Policy via vectors involving the window.open method...

firefox, xulrunner security update

CentOS Errata and Security Advisory CESA-2010:0112 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open sour...

RHEL 4 / 5 : firefox (RHSA-2010:0112)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2010:0112 advisory. - Mozilla incorrectly frees used memory MFSA 2010-03 CVE-2009-1571 - Mozilla violation of same-origin policy due to properties set on...

DSA-1999-1 xulrunner - several vulnerabilities

Bulletin has no description...