remote code execution in Mozilla Firefox

2005-03-1614:07:55

lists.opensuse.org

0.965 High

EPSS

Percentile

99.5%

JSON

This security update for Mozilla Firefox fixes following problems: - CAN-2005-0231: “Fire tabbing” The javascript security manager usually prevents that a javascript: URL from one host is opened in a window displaying content from another host. But when the link is dropped to a tab, the security manager does not kick in.

Solution

Please install the updated packages. There is no workaround (except using a different browser).

OSVersionArchitecturePackageVersionFilename
openSUSE9.2x86_64mozillafirefox< 1.0.1-9.1MozillaFirefox-1.0.1-9.1.x86_64.rpm
openSUSE9.1i586mozillafirefox< 1.0.1-9.1MozillaFirefox-1.0.1-9.1.i586.rpm
openSUSE9.0x86_64mozillafirebird< 1.0.1-2MozillaFirebird-1.0.1-2.x86_64.rpm
openSUSE9.1x86_64mozillafirefox< 1.0.1-9.1MozillaFirefox-1.0.1-9.1.x86_64.rpm
openSUSE9.0i586mozillafirebird< 1.0.1-2MozillaFirebird-1.0.1-2.i586.rpm
openSUSE9.2i586mozillafirefox< 1.0.1-9.1MozillaFirefox-1.0.1-9.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
openSUSE	9.2	x86_64	mozillafirefox	< 1.0.1-9.1	MozillaFirefox-1.0.1-9.1.x86_64.rpm
openSUSE	9.1	i586	mozillafirefox	< 1.0.1-9.1	MozillaFirefox-1.0.1-9.1.i586.rpm
openSUSE	9.0	x86_64	mozillafirebird	< 1.0.1-2	MozillaFirebird-1.0.1-2.x86_64.rpm
openSUSE	9.1	x86_64	mozillafirefox	< 1.0.1-9.1	MozillaFirefox-1.0.1-9.1.x86_64.rpm
openSUSE	9.0	i586	mozillafirebird	< 1.0.1-2	MozillaFirebird-1.0.1-2.i586.rpm
openSUSE	9.2	i586	mozillafirefox	< 1.0.1-9.1	MozillaFirefox-1.0.1-9.1.i586.rpm

remote code execution in Mozilla Firefox

Solution

Related