Oracle Solaris Third-Party Patch Update : thunderbird (multiple_vulnerabilities_in_thunderbird6)

The remote Solaris system is missing necessary patches to address security updates : - Use-after-free vulnerability in Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 might allow remote attackers to execute arbitrary code...

Oracle Solaris Third-Party Patch Update : libvorbis (cve_2012_0444_memory_corruption)

The remote Solaris system is missing necessary patches to address security updates : - Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 do not properly initialize nsChildView data structures, which allows remote attackers t...

[slackware-security] seamonkey

New seamonkey packages are available for Slackware 14.0, 14.1, and -current to fix security issues. Here are the details from the Slackware 14.1 ChangeLog: patches/packages/seamonkey-2.32-i486-1slack14.1.txz: Upgraded. This update contains security fixes and improvements. For more information, se...

FirePassword - Firefox Username & Password Recovery Tool

FirePassword is first ever tool back in early 2007 released to recover the stored website login passwords from Firefox Browser. Like other browsers, Firefox also stores the login details such as username, password for every website visited by the user at the user consent. All these secret details...

SeaMonkey < 2.32 Multiple Vulnerabilities

Binary data 8626.prm...

Multiple memory corruption vulnerabilities in Mozilla Firefox/Thunderbird/SeaMonkey (CNVD-2015-00363)

Firefox/Thunderbird/SeaMonkey are web browsers and mail/newsgroup clients released by Mozilla. Mozilla Firefox/Thunderbird/SeaMonkey suffers from multiple memory corruption vulnerabilities that can be exploited by an attacker to execute arbitrary code within the context of an affected application...

Mozilla Firefox/Thunderbird/SeaMonkey sendBeacon Cross-Site Request Forgery Vulnerability

Firefox/Thunderbird/SeaMonkey are web browsers and mail/newsgroup clients released by Mozilla. A cross-site request forgery vulnerability exists in Mozilla Firefox/Thunderbird/SeaMonkey, which could be exploited by a remote attacker to perform certain unauthorized actions and gain access to...

Mozilla Firefox/SeaMonkey XrayWrapper Elevation of Privilege Vulnerability

Firefox/SeaMonkey is a web browser and newsgroup client released by Mozilla. An elevation of privilege vulnerability exists in Mozilla Firefox/SeaMonkey, which could be exploited by an attacker to execute arbitrary code and thereby elevate privileges...

Mozilla Firefox/SeaMonkey WebRTC Memory Corruption Vulnerability

Firefox/SeaMonkey is a web browser and newsgroup client released by Mozilla. A memory corruption vulnerability exists in Mozilla Firefox/SeaMonkey, which could be exploited by an attacker to execute arbitrary code in the context of a user of an affected application...

Mozilla Firefox/SeaMonkey Web Audio Denial of Service Vulnerability

Firefox/SeaMonkey is a web browser and newsgroup client released by Mozilla. A denial of service vulnerability exists in Mozilla Firefox/SeaMonkey, which can be exploited by an attacker to crash the application, cause a denial of service or launch further attacks to obtain sensitive information...

Multiple memory corruption vulnerabilities in Mozilla Firefox/Thunderbird/SeaMonkey (CNVD-2015-00362)

Firefox/Thunderbird/SeaMonkey are web browsers and mail/newsgroup clients released by Mozilla. Mozilla Firefox/Thunderbird/SeaMonkey suffers from multiple memory corruption vulnerabilities that can be exploited by an attacker to execute arbitrary code in the context of an unsuspecting user's...

Mozilla Firefox/SeaMonkey Bitmap Rendering Information Disclosure Vulnerability

Firefox/SeaMonkey is a web browser and newsgroup client released by Mozilla. An information disclosure vulnerability exists in Mozilla Firefox/SeaMonkey, which can be exploited by attackers to obtain sensitive information or launch further attacks...

Mozilla Firefox/SeaMonkey Security Bypass Vulnerability

Firefox/SeaMonkey is a web browser and newsgroup client released by Mozilla. A security bypass vulnerability exists in Mozilla Firefox/SeaMonkey, which can be exploited by an attacker to bypass certain security restrictions, perform unauthorized actions, or launch further attacks...

Mozilla Firefox/Thunderbird/SeaMonkey Proxy Authentication Session Fixation Vulnerability

Firefox/Thunderbird/SeaMonkey are web browsers and mail/newsgroup clients released by Mozilla. A session fixation vulnerability exists in Mozilla Firefox/Thunderbird/SeaMonkey, which can be exploited by an attacker to hijack arbitrary sessions and gain unauthorized access to affected applications...

CVE-2014-8642

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not consider the id-pkix-ocsp-nocheck extension in deciding whether to trust an OCSP responder, which makes it easier for remote attackers to obtain sensitive information by sniffing the network during a session in which there was an...

CVE-2014-8640

The mozilla::dom::AudioParamTimeline::AudioNodeInputValue function in the Web Audio API implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly restrict timeline operations, which allows remote attackers to cause a denial of service uninitialized-memory read and...

CVE-2014-8639

Mozilla Firefox before 35.0, Firefox ESR 31.x before 31.4, Thunderbird before 31.4, and SeaMonkey before 2.32 do not properly interpret Set-Cookie headers within responses that have a 407 aka Proxy Authentication Required status code, which allows remote HTTP proxy servers to conduct session...

CVE-2014-8637

Mozilla Firefox before 35.0 and SeaMonkey before 2.32 do not properly initialize memory for BMP images, which allows remote attackers to obtain sensitive information from process memory via a crafted web page that triggers the rendering of malformed BMP data within a CANVAS element...

CVE-2014-8636

The XrayWrapper implementation in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 does not properly interact with a DOM object that has a named getter, which might allow remote attackers to execute arbitrary JavaScript code with chrome privileges via unspecified vectors...

CVE-2014-8635

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 35.0 and SeaMonkey before 2.32 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via unknown vectors...