SuSE 10 Security Update : Mozilla XULRunner (ZYPP Patch Number 6616)

The Mozilla XULRunner engine was updated to version 1.9.0.15 to fix various bugs and security issues. The following security issues have been fixed : - Security researcher Paul Stone reported that a user's form history, both from web content as well as the smart location bar, was vulnerable to...

Firefox document.getSelect跨域信息泄露漏洞

BUGTRAQ ID: 36858 CVE ID: CVE-2009-3375 Firefox是一款流行的开源WEB浏览器。 Firefox的content/html/document/src/nsHTMLDocument.cpp允许远程攻击者通过document.getSelection函数绕过同源策略，读取其他域中的高亮显示的文本。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1922-1）以及相应补丁: DSA-1922-1：New xulrunner...

Firefox下载管理器完全可写文件本地权限提升漏洞

BUGTRAQ ID: 36852 CVECAN ID: CVE-2009-3274 Firefox是一款流行的开源WEB浏览器。 Linux平台上的Firefox对从“下载”窗口所选择的文件使用了可预测的/tmp路径名。如果攻击者拥有对机器的本地访问并知道了用户通过下载管理器所要打开文件的名称，就可以在用于保存临时下载文件的完全可写目录中放置恶意文件，在打开该文件时浏览器就会选择错误的文件。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x 厂商补丁： Debian ------...

Mozilla Firefox下载文件名欺骗漏洞

BUGTRAQ ID: 36867 CVE ID: CVE-2009-3376 Firefox是一款流行的开源WEB浏览器。 在下载文件名中包含有从右到左（RTL）覆盖字符的文件时对话框标题栏中所显示的名称可能与对话体所显示的名称不一致。攻击者可以利用这个漏洞迷惑将要下载和打开的文件名和扩展名，诱骗用户打开非预期的恶意文件。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x Mozilla SeaMonkey 1.1.x 厂商补丁： Debian ------ Debian已经为此发布了一个安全公告（DSA-1922-1）以及相应补丁:...

USN-853-1: Firefox and Xulrunner vulnerabilities

Alin Rad Pop discovered a heap-based buffer overflow in Firefox when it converted strings to floating point numbers. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoki...

Mozilla Firefox libpr0n GIF解析器堆溢出漏洞

BUGTRAQ ID: 36855 CVE ID: CVE-2009-3373 Firefox是一款流行的开源WEB浏览器。 Firefox的libpr0n GIF解析器使用gifimageheader语句解释单个单个图形/帧描述记录。一个GIF文件可能包含有多个图形，每个图形都关联到不同的颜色映射。 在处理多图形GIF文件中后面图形颜色映射的变化时没有正确地管理内存重新分配，用户受骗打开包含有GIF文件的恶意网页就可能触发堆溢出，导致执行任意指令。 Mozilla Firefox 3.5.x Mozilla Firefox 3.0.x Mozilla SeaMonkey 1.1.x...

[SECURITY] Fedora 11 Update: xulrunner-1.9.1.4-1.fc11

XULRunner provides the XUL Runtime environment for Gecko applications...

CentOS 4 : firefox (CESA-2009:1530)

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime...

[SECURITY] [DSA 1922-1] New xulrunner packages fix several vulnerabilities

------------------------------------------------------------------------ Debian Security Advisory DSA-1922-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff October 28, 2009 http://www.debian.org/security/faq -...

firefox, nspr security update

CentOS Errata and Security Advisory CESA-2009:1530 Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5. This update has been rated as having critical security impact by the Red Hat Security Response Team. Mozilla Firefox is an open sour...

firefox security update

firefox: 3.0.15-3.0.1.el54 - Update firstrun and homepage URLs in specfile - Added patch oracle-firefox-branding.patch - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html and removed the corresponding Red Hat ones 3.0.15-3 - Rebuild due to Mozilla's respin 3.0.15-2 -...

DSA-1922-1 xulrunner - several vulnerabilities

Bulletin has no description...

RHEL 4 / 5 : firefox (RHSA-2009:1530)

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1530 advisory. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. nspr provides the...

SuSE Security Update: Security update for Mozilla Firefox (firefox35upgrade-6562)

This update brings the Mozilla Firefox 3.5 webbrowser to version 3.5.3, the Mozilla XULRunner 1.9.0 engine to the 1.9.0.14 stable release, and the Mozilla XULRunner 1.9.1 engine to the 1.9.1.3 stable release. It also fixes various security issues: MFSA 2009-47 / CVE-2009-3069 / CVE-2009-3070 /...

SLES10: Security update for epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-xulrunner More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for Epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-xulrunner More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for gecko-sdk and mozilla-xulrunner

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-xulrunner More details may also be found by searching for the SuSE Enterprise Server 10 patch database located at...

SLES10: Security update for Epiphany

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-xulrunner More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SLES10: Security update for gecko-sdk and mozilla-xulrunner

The remote host is missing updates to packages that affect the security of your system. One or more of the following packages are affected: mozilla-xulrunner More details may also be found by searching for the SuSE Enterprise Server 10 patch database linked in the references...

SuSE 11 Security Update : Epiphany (SAT Patch Number 1342)

This update fixes a regression with the epiphany browser which did not work with the newer Mozilla XULRunner 1.9.1 engine. Epiphany now explicitly uses the old 1.9.0 engine again. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were...