2997 matches found
Firefox < 7.0 Multiple Vulnerabilities
The installed version of Firefox is earlier than 7.0 and thus, is potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and...
Mozilla Firefox和SeaMonkey远程缓冲区溢出漏洞
BUGTRAQ ID: 49813 CVE ID: CVE-2011-3002 Firefox是一款非常流行的开源WEB浏览器。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。 Firefox和SeaMonkey在实现上安全漏洞，远程攻击者可在受影响应用程序中执行任意代码，或造成拒绝服务。 在WebGL中使用的ANGLE库中，GrowAtomTable返回的值没有验证错误，导致使用特制请求造成缓冲区溢出。 Mozilla Firefox 3.6.x Mozilla SeaMonkey 2.x 厂商补丁： Mozilla -------...
CVE-2011-3003
CVE-2011-3003 affects Mozilla Firefox < 7.0 and SeaMonkey
CVE-2011-3003: Improper Restriction of Operations within the Bounds of a Memory Buffer
Mozilla Firefox before 7.0 and SeaMonkey before 2.4 allow remote attackers to cause a denial of service application crash or possibly execute arbitrary code via an unspecified WebGL test case that triggers a memory-allocation error and a resulting out-of-bounds write operation...
SeaMonkey < 2.4.0 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.4.0. Such versions are potentially affected by the following security issues : - If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded an...
PT-2011-4241
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 7.0 SeaMonkey versions prior to 2.4 Description The issue allows remote attackers to cause a denial of service, potentially leading to application crashes, or possibly execute arbitrary code. This is achieved...
Potentially exploitable WebGL crashes — Mozilla
Michael Jordon of Context IS reported that in the ANGLE library used by WebGL the return value from GrowAtomTable was not checked for errors. If an attacker could cause requests that exceeded the available memory those would fail and potentially lead to a buffer overrun as subsequent code wrote...
Mozilla -- multiple vulnerabilities
The Mozilla Project reports: MFSA 2011-36 Miscellaneous memory safety hazards rv:7.0 / rv:1.9.2.23 MFSA 2011-37 Integer underflow when using JavaScript RegExp MFSA 2011-38 XSS via plugins and shadowed window.location object MFSA 2011-39 Defense against multiple Location headers due to CRLF...
Mozilla Products Multiple Vulnerabilities - Sep 11 (Windows)
The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbmozillaprdtsmultvulnsep11win02.nasl 7024 2017-08-30 11:51:43Z teissa $ Mozilla Products Multiple Vulnerabilities - Sep 11 Windows Authors: Madhuri D...
seamonkey: Update to Mozilla Seamonkey 2.3 (important)
Mozilla Seamonkey suite was updated to version 2.3. The update fixes bugs and security issues. Following security issues were fixed: http://www.mozilla.org/security/announce/2011/mfsa2011-33.ht ml Mozilla Foundation Security Advisory 2011-33 MFSA 2011-33 Mozilla Foundation Security Advisory 2011-...
Ubuntu Update for firefox USN-1192-1
Ubuntu Update for Linux kernel vulnerabilities USN-1192-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN11921.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for firefox USN-1192-1 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This...
Ubuntu Update for mozvoikko USN-1192-2
Ubuntu Update for Linux kernel vulnerabilities USN-1192-2 OpenVAS Vulnerability Test $Id: gbubuntuUSN11922.nasl 7964 2017-12-01 07:32:11Z santu $ Ubuntu Update for mozvoikko USN-1192-2 Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net Th...
Ubuntu: Security Advisory (USN-1192-1)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Ubuntu: Security Advisory (USN-1192-2)
The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
CVE-2011-2988
Buffer overflow in an unspecified string class in the WebGL shader implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service application crash via a lo...
CVE-2011-2989
The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement WebGL, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code...
CVE-2011-2987
Heap-based buffer overflow in Almost Native Graphics Layer Engine ANGLE, as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products might allow remote attackers to execute arbitrary code via unspecified vectors...
CVE-2011-2989
The browser engine in Mozilla Firefox 4.x through 5, SeaMonkey 2.x before 2.3, Thunderbird before 6, and possibly other products does not properly implement WebGL, which allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code...
CVE-2011-2987
Heap-based buffer overflow in Almost Native Graphics Layer Engine ANGLE, as used in the WebGL implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products might allow remote attackers to execute arbitrary code via unspecified vectors...
Buffer overflow
Buffer overflow in an unspecified string class in the WebGL shader implementation in Mozilla Firefox 4.x through 5, Thunderbird before 6, SeaMonkey 2.x before 2.3, and possibly other products allows remote attackers to execute arbitrary code or cause a denial of service application crash via a lo...