Ubuntu USN-873-1 (xulrunner-1.9)

The remote host is missing an update to xulrunner-1.9 announced via advisory USN-873-1. OpenVAS Vulnerability Test $Id: ubuntu8731.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8731.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-873-1 xulrunner-1.9 Author...

Debian Security Advisory DSA 1956-1 (xulrunner)

The remote host is missing an update to xulrunner announced via advisory DSA 1956-1. OpenVAS Vulnerability Test $Id: deb19561.nasl 6615 2017-07-07 12:09:52Z cfischer $ Description: Auto-generated from advisory DSA 1956-1 xulrunner Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

RedHat Security Advisory RHSA-2009:1674

The remote host is missing updates announced in advisory RHSA-2009:1674. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

Ubuntu USN-874-1 (xulrunner-1.9.1)

The remote host is missing an update to xulrunner-1.9.1 announced via advisory USN-874-1. OpenVAS Vulnerability Test $Id: ubuntu8741.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu8741.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-874-1 xulrunner-1.9.1...

RedHat Security Advisory RHSA-2009:1674

The remote host is missing updates announced in advisory RHSA-2009:1674. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. Several flaws were found in the processing of malformed web content. A web page containing malicious content...

Ubuntu: Security Advisory (USN-874-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu: Security Advisory (USN-873-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1956-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6736)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

SuSE 11 Security Update : XULRunner (SAT Patch Number 1716)

The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues. The following issues were fixed : - Crashes with evidence of memory corruption 1.9.0.16. MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981 - bmo487872 NTLM reflection vulnerability. MFSA...

Ubuntu 9.10 : firefox-3.5, xulrunner-1.9.1 vulnerabilities (USN-874-1)

Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Olli Pettay, and David James discovered several flaws in the browser and JavaScript engines of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary...

CentOS 4 / 5 : firefox (CESA-2009:1674)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

Firefox window.opener属性Chrome权限提升漏洞

BUGTRAQ ID: 37365 CVECAN ID: CVE-2009-3986 Firefox是一款流行的开源WEB浏览器。 chrome窗口所打开的内容窗口通过window.opener属性保持对chrome窗口的引用。使用这个引用，新窗口中的内容就可以访问 chrome窗口中的函数，如eval，并使用这些函数以chrome权限执行任意JavaScript代码。在常见的Mozilla浏览器中攻击者无法导致出现这些应用对话框，也无法利用这个漏洞自动加载攻击代码，但有些附加组件可能以这种方式打开恶意的Web内容。 Mozilla Firefox 3.5.x Mozilla Firef...

USN-874-1: Firefox 3.5 and Xulrunner 1.9.1 vulnerabilities

Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Olli Pettay, and David James discovered several flaws in the browser and JavaScript engines of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary...

USN-873-1: Firefox 3.0 and Xulrunner 1.9 vulnerabilities

Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Olli Pettay, and David James discovered several flaws in the browser and JavaScript engines of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary...

[SECURITY] Fedora 12 Update: xulrunner-1.9.1.6-1.fc12

XULRunner provides the XUL Runtime environment for Gecko applications...

[SECURITY] Fedora 11 Update: xulrunner-1.9.1.6-1.fc11

XULRunner provides the XUL Runtime environment for Gecko applications...

Firefox内容注入网页欺骗漏洞

BUGTRAQ ID: 37370 CVE ID: CVE-2009-3985 Firefox是一款流行的开源WEB浏览器。 恶意网页可以将document.location设置为无法正确显示的URL，然后向所生成的空白页中注入内容。攻击者可以利用这个漏洞在地址栏中放置看起来合法但实际上无效的URL，并向页面中注入HTML和JavaScript，执行欺骗攻击。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x Mozilla SeaMonkey 2.0 厂商补丁： Debian ------...

Fedora 12 : Miro-2.5.2-7.fc12 / blam-1.8.5-21.fc12 / firefox-3.5.6-1.fc12 / galeon-2.0.7-19.fc12 / etc (2009-13366)

Update to new upstream Firefox version 3.5.6, fixing multiple security issues detailed in the upstream advisories: http://www.mozilla.org/security/known- vulnerabilities/firefox35.htmlfirefox3.5.6 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox /...

[SECURITY] [DSA 1956-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1956-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 16, 2009 http://www.debian.org/security/faq -...