Critical: Red Hat Security Advisory: firefox security update

Updated firefox packages that fix one security issue are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

Ubuntu 6.06 LTS / 7.10 / 8.04 LTS / 8.10 : firefox, firefox-3.0, xulrunner-1.9 vulnerabilities (USN-745-1)

It was discovered that Firefox did not properly perform XUL garbage collection. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or execute arbitrary code with the privileges of the user invoking the program. This issue only affected Ubunt...

Fedora 10 : Miro-2.0.3-2.fc10 / blam-1.8.5-8.fc10 / devhelp-0.22-6.fc10 / epiphany-2.24.3-4.fc10 / etc (2009-3100)

A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. CVE-2009-1169 A flaw was discovered in the way Firefox handles...

Firefox 3 Layout engine crashes

The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service application crash and possibly trigger memory corruption via vectors related to 1 nsAsyncInstantiateEvent::Run, 2...

Mozilla Firefox XUL解析器开始标签拒绝服务漏洞

BUGTRAQ ID: 34522 CVE ID：CVE-2009-1232 CNCVE ID：CNCVE-20091232 Mozilla Firefox是一款开放源代码的WEB浏览器。 Mozilla Firefox处理包含大量start标签的XML页存在问题，可导致XML XUL解析器触发内存破坏，而导致应用程序崩溃。 Mozilla Firefox 3.0.8 Mozilla Firefox 3.0.7 Mozilla Firefox 3.0.6 Mozilla Firefox 3.0.5 Mozilla Firefox 3.0.4 Mozilla Firefox 3.0.3...

SUSE: Security Advisory for MozillaFirefox (SUSE-SA:2009:022)

The remote host is missing updates announced in advisory SUSE-SA:2009:022. Copyright C 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software...

SuSE Security Advisory SUSE-SA:2009:022 (MozillaFirefox)

The remote host is missing updates announced in advisory SUSE-SA:2009:022. OpenVAS Vulnerability Test $Id: susesa2009022.nasl 6668 2017-07-11 13:34:29Z cfischer $ Description: Auto-generated from advisory SUSE-SA:2009:022 MozillaFirefox Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft In...

Phorum Cross Site Scripting / Request Forgery

=cicatriz ==advisories= / / / / // / / // / o / / .-/ =Phorum 5.2.10 Cross-Site Scripting/Request Forgery==/= == =Advisory & Vulnerability Information=== Title: Phorum 5.2.10 Cross-Site Scripting/Request Forgery Advisory ID: VUDO-2009-1504 Advisory URL: http://research.voodoo-labs.org/advisories/...

Firefox XUL Parsing Denial of Service Vulnerability (Windows)

The host is installed with Mozilla Firefox browser and is prone to XUL Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxxulparsingdosvulnwin.nasl 4865 2016-12-28 16:16:43Z teissa $ Firefox XUL Parsing Denial of Service Vulnerability Windows Authors: Sharath S Copyright: Copyright c...

Firefox XUL Parsing Denial of Service Vulnerability (Linux)

The host is installed with Mozilla Firefox browser and is prone to XUL Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbfirefoxxulparsingdosvulnlin.nasl 4865 2016-12-28 16:16:43Z teissa $ Firefox XUL Parsing Denial of Service Vulnerability Linux Authors: Sharath S Copyright: Copyright c...

Firefox < 3.6.3 XUL Parsing DoS Vulnerability - Windows

Mozilla Firefox browser is prone to an XUL parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Firefox XUL Parsing Denial of Service Vulnerability - Linux

Mozilla Firefox is prone to a XUL parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:mozilla:firefox";...

Fedora Core 10 FEDORA-2009-3100 (firefox)

The remote host is missing an update to firefox announced via advisory FEDORA-2009-3100. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by th...

Ubuntu USN-745-1 (xulrunner-1.9)

The remote host is missing an update to xulrunner-1.9 announced via advisory USN-745-1. OpenVAS Vulnerability Test $Id: ubuntu7451.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7451.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-745-1 xulrunner-1.9 Author...

RedHat Security Advisory RHSA-2009:0398

The remote host is missing updates announced in advisory RHSA-2009:0398. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A memory corruption flaw was discovered in the way SeaMonkey handles XML files containing an XSLT transform. A remote...

RedHat Security Advisory RHSA-2009:0398

The remote host is missing updates announced in advisory RHSA-2009:0398. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A memory corruption flaw was discovered in the way SeaMonkey handles XML files containing an XSLT transform. A remote...

Mozilla Firefox '_moveToEdgeShift' 远程代码执行漏洞

BUGTRAQ ID: 34181 CVE ID：CVE-2009-1044 CNCVE ID：CNCVE-20091044 Mozilla Firefox是一款开放源码WEB浏览器。 Mozilla Firefox处理XUL树方法moveToEdgeShift存在缺陷，远程攻击者可以利用漏洞以应用程序上下文执行任意代码。 在部分情况下，XUL树方法moveToEdgeShift会在当前仍旧在使用的对象上执行垃圾收集例程，在这个情况下，当尝试访问之前破坏的对象时浏览器会崩溃，攻击者可以利用这个崩溃在目标用户系统上执行任意代码。 Mozilla Firefox...

Mozilla Foundation Security Advisory 2009-13

Mozilla Foundation Security Advisory 2009-13 Title: Arbitrary code execution via XUL tree element Impact: Critical Announced: March 27, 2009 Reporter: Nils Products: Firefox Fixed in: Firefox 3.0.8 Description Security researcher Nils reported via TippingPoint's Zero Day Initiative that the XUL...

Firefox _moveToEdgeShift方式远程代码执行漏洞

BUGTRAQ ID: 34181 CVECAN ID: CVE-2009-1044 Firefox是一款非常流行的开放源码WEB浏览器。 Firefox中XUL树方式moveToEdgeShift在某些情况下可能会对仍在使用的对象触发垃圾收集例程，之后浏览器在试图访问之前已被释放的对象时会崩溃。攻击者可以利用这种崩溃在用户机器上执行任意指令。 Mozilla Firefox 3.0.8 Debian ------ Debian已经为此发布了一个安全公告（DSA-1756-1）以及相应补丁: DSA-1756-1：New xulrunner packages fix multiple...

ZDI-09-015: Mozilla Firefox XUL _moveToEdgeShift&#40;&#41; Memory Corruption Vulnerability

ZDI-09-015: Mozilla Firefox XUL moveToEdgeShift Memory Corruption Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-09-015 March 30, 2009 -- CVE ID: CVE-2009-1044 -- Affected Vendors: Mozilla Firefox -- Affected Products: Mozilla Firefox 3.0.x -- Vulnerability Details: This...