Mozilla violation of same-origin policy due to properties set on objects passed to showModalDialog (MFSA 2010-04)

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via crafted...

Mozilla incorrectly frees used memory (MFSA 2010-03)

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory...

firefox/thunderbird/seamonkey: browser chrome defacement via cached XUL stylesheets (MFSA 2010-14)

The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to...

Mozilla implementation of Web Workers can lead to crash with evidence of memory corruption (MFSA 2010-02)

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

Mozilla crashes with evidence of memory corruption (MFSA 2010-01)

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the...

seamonkey security update

1.0.9-52.0.1.el48 - Added mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and removed corresponding RedHat ones 1.0.9-52.el4 - Added fixes from 1.9.0.18...

CVE-2010-0162

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly support the application/octet-stream content type as a protection mechanism against execution of web script in certain circumstances involving SVG and the EMBED element, which allows remote...

CVE-2010-0160

The Web Worker functionality in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly handle array data types for posted messages, which allows remote attackers to cause a denial of service heap memory corruption and application crash or possibl...

CVE-2009-3988

Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting XSS attacks via crafted...

CVE-2009-1571

Use-after-free vulnerability in the HTML parser in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to execute arbitrary code via unspecified method calls that attempt to access freed objects in low-memory...

CVE-2010-0159

The browser engine in Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, Thunderbird before 3.0.2, and SeaMonkey before 2.0.3 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to the...

Safari 4.0.4 Denial Of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

Safari v4.0.4, Firefox v3.5.6, SeaMonkey v2.0.1 Remote Denial of Service

No description provided by source. !-- Safari 4.0.4 Remote Denial of Service With Possible Memory Corruption With OOM Firefox 3.5.6 Safari 4.0.4 SeaMonkey 2.0.1 Author : 599eme Man Contact : [email protected] -- body onload="javascript:DoS;"/body script function DoS var buffer = 'A'; for i =0;i150;i+...

Firefox 3.5.6 Denial Of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

SeaMonkey 2.0.1 Denial Of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

Safari v4.0.4, Firefox v3.5.6, SeaMonkey v2.0.1, Opera v10.10 DoS Exploit

Exploit for unknown platform in category dos / poc ========================================================================= Safari v4.0.4, Firefox v3.5.6, SeaMonkey v2.0.1, Opera v10.10 DoS Exploit ========================================================================= function DoS var buffer ...

Apple Safari 4.0.4 / Firefox 3.5.7 / SeaMonkey 2.0.1 - Remote Denial of Service

function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

Apple Safari 4.0.4 Firefox 3.5.7 SeaMonkey 2.0.1 - Remote Denial of Service

Apple Safari 4.0.4 Firefox 3.5.7 SeaMonkey 2.0.1 - Remote Denial of Service function DoS var buffer = 'A'; for i =0;i'+buffer+buffer;...

Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 - Remote Denial of Service

Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/38132/info Mozilla Firefox and SeaMonkey are prone to a remote denial-of-service vulnerability. Successful exploits may allow an attacker to crash the affected browser, resulting in a...

Mozilla Firefox 3.5.x and SeaMonkey 2.0.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/38132/info Mozilla Firefox and SeaMonkey are prone to a remote denial-of-service vulnerability. Successful exploits may allow an attacker to crash the affected browser, resulting in a denial-of-service condition. Given the nature of this issue, memory...