10 matches found
CVE-2010-0169
The CSSLoaderImpl::DoSheetComplete function in layout/style/nsCSSLoader.cpp in Mozilla Firefox 3.0.x before 3.0.18, 3.5.x before 3.5.8, and 3.6.x before 3.6.2; Thunderbird before 3.0.2; and SeaMonkey before 2.0.3 changes the case of certain strings in a stylesheet before adding this stylesheet to...
Firefox 3.6.x < 3.6.2 Multiple Vulnerabilities
The installed version of Firefox 3.6.x is earlier than 3.6.2. Such versions are potentially affected by multiple security issues : - The WOFF decoder contains an integer overflow in a font decompression routine. MFSA 2010-08 - Deleted image frames are reused when handling...
Browser chrome defacement via cached XUL stylesheets — Mozilla
Mozilla developer Wladimir Palant reported that stylesheets used in remote XUL documents can wind up in the XUL cache where it can later be accessed by browser chrome for use in styling the user interface. A malicious website could use this issue to pollute a user's XUL cache and change style...
Mozilla Firefox 3.6.x < 3.6.2 Multiple Vulnerabilities
Binary data 5485.prm...
Mozilla Firefox < 3.6.2 Multiple Vulnerabilities.
The remote host is running a version of Mozilla Firefox 3.6.x earlier than 3.6.2. Such versions are potentially affected by multiple security issues : - The WOFF decoder contains an integer overflow in a font decrompression routine. MFSA 2010-08 - Deleted image frames are reused when handling...
Mozilla Thunderbird < 3.0.2 Multiple Vulnerabilities
Binary data 5355.prm...
Mozilla Thunderbird < 3.0.2 Multiple Vulnerabilities
Binary data 801210.prm...
Mozilla Thunderbird < 3.0.2 Multiple Vulnerabilities
The installed version of Thunderbird is earlier than 3.0.2. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-01 - The HTML parser incorrectly frees used memory when insufficient space is available to...
SeaMonkey < 2.0.3 Multiple Vulnerabilities
The installed version of SeaMonkey is earlier than 2.0.3. Such versions are potentially affected by the following security issues : - Multiple crashes can result in arbitrary code execution. MFSA 2010-01 - The implementation of 'Web Workers' contained an error in its handling of array data types...