CVE-2010-0169

The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to...

Browser chrome defacement via cached XUL stylesheets — Mozilla

Mozilla developer Wladimir Palant reported that stylesheets used in remote XUL documents can wind up in the XUL cache where it can later be accessed by browser chrome for use in styling the user interface. A malicious website could use this issue to pollute a user's XUL cache and change style...

Mozilla Firefox 3.6.x < 3.6.2 Multiple Vulnerabilities

Binary data 5485.prm...

Firefox 3.6.x < 3.6.2 Multiple Vulnerabilities

The installed version of Firefox 3.6.x is earlier than 3.6.2. Such versions are potentially affected by multiple security issues : - The WOFF decoder contains an integer overflow in a font decompression routine. MFSA 2010-08 - Deleted image frames are reused when handling...

Mozilla Firefox < 3.6.2 Multiple Vulnerabilities.

The remote host is running a version of Mozilla Firefox 3.6.x earlier than 3.6.2. Such versions are potentially affected by multiple security issues : - The WOFF decoder contains an integer overflow in a font decrompression routine. MFSA 2010-08 - Deleted image frames are reused when handling...

Mozilla Thunderbird < 3.0.2 Multiple Vulnerabilities

Binary data 5355.prm...

Mozilla Thunderbird < 3.0.2 Multiple Vulnerabilities

Binary data 801210.prm...

Mozilla Thunderbird < 3.0.2 Multiple Vulnerabilities

The installed version of Thunderbird is earlier than 3.0.2. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-01 - The HTML parser incorrectly frees used memory when insufficient space is available to...

Mozilla Firefox < 3.0.18 / 3.5.8 / 3.6 Multiple Vulnerabilities

Binary data 5342.prm...

SeaMonkey < 2.0.3 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.3. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-01 - The implementation of 'Web Workers' contained an error in its handling of array data types...