Mozilla Foundation Security Advisory 2008-60

Mozilla Foundation Security Advisory 2008-60 Title: Crashes with evidence of memory corruption rv:1.9.0.5/1.8.1.19 Impact: Critical Announced: December 16, 2008 Reporter: Mozilla developers Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.5 Firefox 2.0.0.19 Thunderbird 2.0.0.19...

SeaMonkey < 1.1.14 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.14. Such versions are potentially affected by the following security issues : - There are several stability bugs in the browser engine that may lead to crashes with evidence of memory corruption. MFSA 2008-60 - XBL bindings can be used to rea...

Firefox 3.0.x < 3.0.5 Multiple Vulnerabilities

The installed version of Firefox 3.0 is earlier than 3.0.5. Such versions are potentially affected by the following security issues : - There are several stability bugs in the browser engine that may lead to crashes with evidence of memory corruption. MFSA 2008-60 - The 'persist' attribute in XUL...

Security fix for the ALT Linux 6 package freeradius version 2.1.3-1

Dec. 4, 2008 John Dennis &[email protected] - 2.1.3-1 - upgrade to latest upstream release, upstream summary follows: The focus of this release is stability. Feature Improvements: Allow running with "user=radiusd" and binding to secure sockets. Start sending Status-Server "are you alive"...

Mozilla Thunderbird < 2.0.0.18 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 2.0.0.18. Such versions are potentially affected by the following security issues : - The canvas element can be used in conjunction with an HTTP redirect to bypass same-origin restrictions and gain access to the content in arbitrary images from...

SeaMonkey < 1.1.13 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.13. Such versions are potentially affected by the following security issues : - Locally saved '.url' shortcut files can be used to read information stored in the local cache. MFSA 2008-47 - The canvas element can be used in conjunction with a...

Firefox < 2.0.0.18 Multiple Vulnerabilities

The installed version of Firefox is earlier than 2.0.0.18. Such versions are potentially affected by the following security issues : - Locally saved '.url' shortcut files can be used to read information stored in the local cache. MFSA 2008-47 - The canvas element can be used in conjunction with a...

SeaMonkey < 1.1.13 Multiple Vulnerabilities

Binary data 4753.prm...

Crashes with evidence of memory corruption (rv:1.9.0.4/1.8.1.18) — Mozilla

Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be...

[SECURITY] Fedora 8 Update: emacspeak-28.0-3.fc8

Emacspeak is a speech interface that allows visually impaired users to interact independently and efficiently with the computer. Emacspeak has dramatically changed how the author and hundreds of blind and visually impaired users around the world interact with the personal computer and the Interne...

Mozilla Foundation Security Advisory 2008-42

Mozilla Foundation Security Advisory 2008-42 Title: Crashes with evidence of memory corruption rv:1.9.0.2/1.8.1.17 Impact: Critical Announced: September 23, 2008 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.2 Firefox 2.0.0.17 Thunderbi...

Mozilla Firefox < 3.0.2 Multiple Vulnerabilities

Binary data 4691.prm...

Firefox 3.0.x < 3.0.2 Multiple Vulnerabilities

The installed version of Firefox 3.0 is earlier than 3.0.2. Such versions are potentially affected by the following security issues : - An attacker can cause the content window to move while the mouse is being clicked, causing an item to be dragged rather than clicked-on MFSA 2008-40. - Privilege...

SeaMonkey < 1.1.12 Multiple Vulnerabilities

The installed version of SeaMonkey is affected by various security issues : - Using a specially crafted UTF-8 URL in a hyperlink, an attacker might be able to exploit a stack buffer overflow in the Mozilla URL parsing routes to execute arbitrary code. MFSA 2008-37 - It is possible to bypass the...

Firefox < 2.0.0.17 Multiple Vulnerabilities

The installed version of Firefox is affected by various security issues : - Using a specially crafted UTF-8 URL in a hyperlink, an attacker might be able to exploit a stack buffer overflow in the Mozilla URL parsing routes to execute arbitrary code MFSA 2008-37. - It is possible to bypass the...

Crashes with evidence of memory corruption (rv:1.9.0.2/1.8.1.17) — Mozilla

Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be...

Fedora 8 : bitlbee-1.2.2-1.fc8 (2008-7712)

Upstream released Bitlbee 1.2.2 with the following changes to the former release: - Security bugfix: It was possible to hijack accounts without gaining access to the old account, it's simply an overwrite - Some more stability improvements. - Fixed bug where people with non-lowercase nicks couldn'...

Fedora 9 : bitlbee-1.2.2-1.fc9 (2008-7274)

Upstream released Bitlbee 1.2.2 with the following changes to the former release: - Security bugfix: It was possible to hijack accounts without gaining access to the old account, it's simply an overwrite - Some more stability improvements. - Fixed bug where people with non-lowercase nicks couldn'...

Mozilla Thunderbird < 2.0.0.16 Multiple Vulnerabilities

Binary data 4609.prm...

Mozilla Thunderbird < 2.0.0.16 Multiple Vulnerabilities

The installed version of Thunderbird is affected by various security issues : - Several stability bugs exist leading to crashes which, in some cases, show traces of memory corruption MFSA 2008-21. - By taking advantage of the privilege level stored in the pre-compiled 'fastload' file, an attacker...