The Mozilla Browser received backports for security problems in 1.8.1.14.

The following security issues were fixed :

  - Mozilla security researcher moz_bug_r_a4 reported that     an XBL binding, when attached to an unloaded document,     can be used to violate the same-origin policy and     execute arbitrary JavaScript within the context of a     different website. moz_bug_r_a4 also reported two     vulnerabilities by which page content can pollute     XPCNativeWrappers and run arbitary JavaScript with     chrome priviliges. Thunderbird shares the browser engine     with Firefox and could be vulnerable if JavaScript were     to be enabled in mail. This is not the default setting     and we strongly discourage users from running JavaScript     in mail. Workaround Disable JavaScript until a version     containing these fixes can be installed. (MFSA 2008-68 /     CVE-2008-5512 / CVE-2008-5511)

  - Kojima Hajime reported that unlike literal null     characters which were handled correctly, the escaped     form '\0' was ignored by the CSS parser and treated as     if it was not present in the CSS input string. This     issue could potentially be used to bypass script     sanitization routines in web applications. The severity     of this issue was determined to be low. (MFSA 2008-67 /     CVE-2008-5510)

  - Perl developer Chip Salzenberg reported that certain     control characters, when placed at the beginning of a     URL, would lead to incorrect parsing resulting in a     malformed URL being output by the parser. IBM     researchers Justin Schuh, Tom Cross, and Peter William     also reported a related symptom as part of their     research that resulted in MFSA 2008-37. There was no     direct security impact from this issue and its effect     was limited to the improper rendering of hyperlinks     containing specific characters. The severity of this     issue was determined to be low. (MFSA 2008-66 /     CVE-2008-5508)

  - Google security researcher Chris Evans reported that a     website could access a limited amount of data from a     different domain by loading a same-domain JavaScript URL     which redirects to an off-domain target resource     containing data which is not parsable as JavaScript.
    Upon attempting to load the data as JavaScript a syntax     error is generated that can reveal some of the file     context via the window.onerror DOM API. This issue could     be used by a malicious website to steal private data     from users who are authenticated on the redirected     website. How much data could be at risk would depend on     the format of the data and how the JavaScript parser     attempts to interpret it. For most files the amount of     data that can be recovered would be limited to the first     word or two. Some data files might allow deeper probing     with repeated loads. Thunderbird shares the browser     engine with Firefox and could be vulnerable if     JavaScript were to be enabled in mail. This is not the     default setting and we strongly discourage users from     running JavaScript in mail. Workaround Disable     JavaScript until a version containing these fixes can be     installed. (MFSA 2008-65 / CVE-2008-5507)

  - Marius Schilder of Google Security reported that when a     XMLHttpRequest is made to a same-origin resource which     302 redirects to a resource in a different domain, the     response from the cross-domain resource is readable by     the site issuing the XHR. Cookies marked HttpOnly were     not readable, but other potentially sensitive data could     be revealed in the XHR response including URL parameters     and content in the response body. Thunderbird shares the     browser engine with Firefox and could be vulnerable if     JavaScript were to be enabled in mail. This is not the     default setting and we strongly discourage users from     running JavaScript in mail. Workaround Disable     JavaScript until a version containing these fixes can be     installed. (MFSA 2008-64 / CVE-2008-5506)

  - Mozilla developer Boris Zbarsky reported that XBL     bindings could be used to read data from other domains,     a violation of the same-origin policy. The severity of     this issue was determined to be moderate due to several     mitigating factors:. (MFSA 2008-61 / CVE-2008-5503)

The target document requires a bindingsi element in the XBL namespace in order to be read. The reader of the data needs to know the id attribute of the binding being read in advance. It is unlikely that web services will expose private data in the manner described above.

Firefox 3 is not affected by this issue. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Workaround Products built from the Mozilla 1.9.0 branch and later, Firefox 3 for example, are not affected by this issue. Upgrading to one of these products is a reliable workaround for this particular issue and it is also Mozilla's recommendation that the most current version of any Mozilla product be used. Alternatively, you can disable JavaScript until a version containing these fixes can be installed.

  - Mozilla developers identified and fixed several     stability bugs in the browser engine used in Firefox and     other Mozilla-based products. Some of these crashes     showed evidence of memory corruption under certain     circumstances and we presume that with enough effort at     least some of these could be exploited to run arbitrary     code. Thunderbird shares the browser engine with Firefox     and could be vulnerable if JavaScript were to be enabled     in mail. This is not the default setting and we strongly     discourage users from running JavaScript in mail.
    Without further investigation we cannot rule out the     possibility that for some of these an attacker might be     able to prepare memory for exploitation through some     means other than JavaScript such as large images.
    Workaround Disable JavaScript until a version containing     these fixes can be installed. (MFSA 2008-60 /     CVE-2008-5500)

The installed version of Firefox is earlier than 2.0.0.19.  Such versions are potentially affected by the following security issues :

  - There are several stability bugs in the browser engine     that may lead to crashes with evidence of memory     corruption. (MFSA 2008-60)

  - XBL bindings can be used to read data from other     domains. (MFSA 2008-61)

  - The feed preview still allows for JavaScript privilege     escalation. (MFSA 2008-62)

  - Sensitive data may be disclosed in an XHR response when     an XMLHttpRequest is made to a same-origin resource,     which 302 redirects to a resource in a different     domain. (MFSA 2008-64)

  - A website may be able to access a limited amount of     data from a different domain by loading a same-domain     JavaScript URL which redirects to an off-domain target     resource containing data which is not parsable as     JavaScript. (MFSA 2008-65)

  - Errors arise when parsing URLs with leading whitespace     and control characters. (MFSA 2008-66)

  - An escaped null byte is ignored by the CSS parser and     treated as if it was not present in the CSS input     string. (MFSA 2008-67)

  - Cross-site scripting and JavaScript privilege escalation     are possible. (MFSA 2008-68)

  - Cross-site scripting vulnerabilities in SessionStore may     allow for violating the browser's same-origin policy and     performing an XSS attack or running arbitrary     JavaScript with chrome privileges. (MFSA 2008-69)

  - Creating a Select object with a very large length can     result in memory exhaustion, causing a denial of     service. (CVE-2009-2535)

Note that Mozilla is not planning further security / stability updates for Firefox 2.

The installed version of Thunderbird is earlier than 2.0.0.19.  Such versions are potentially affected by the following security issues :

  - There are several stability bugs in the browser engine     that could lead to crashes with evidence of memory     corruption. (MFSA 2008-60)

  - XBL bindings can be used to read data from other     domains. (MFSA 2008-61)

  - Sensitive data could be disclosed in an XHR response     when an XMLHttpRequest is made to a same-origin     resource, which 302 redirects to a resource in a     different domain. (MFSA 2008-64)

  - A website may be able to access a limited amount of     data from a different domain by loading a same-domain     JavaScript URL, which redirects to an off-domain target     resource containing data that is not parsable as     JavaScript. (MFSA 2008-65)

  - Errors arise when parsing URLs with leading whitespace     and control characters. (MFSA 2008-66)

  - An escaped null byte is ignored by the CSS parser and     treated as if it was not present in the CSS input     string. (MFSA 2008-67)

  - XSS and JavaScript privilege escalation are possible.
    (MFSA 2008-68)

The Mozilla XULRunner 1.8.1 engine received backports for security problems in 1.9.0.5.

The following security issues were fixed :

MFSA 2008-68 / CVE-2008-5512 / CVE-2008-5511: Mozilla security researcher moz_bug_r_a4 reported that an XBL binding, when attached to an unloaded document, can be used to violate the same-origin policy and execute arbitrary JavaScript within the context of a different website. moz_bug_r_a4 also reported two vulnerabilities by which page content can pollute XPCNativeWrappers and run arbitary JavaScript with chrome priviliges. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Workaround Disable JavaScript until a version containing these fixes can be installed.

MFSA 2008-67 / CVE-2008-5510: Kojima Hajime reported that unlike literal null characters which were handled correctly, the escaped form '\0' was ignored by the CSS parser and treated as if it was not present in the CSS input string. This issue could potentially be used to bypass script sanitization routines in web applications. The severity of this issue was determined to be low.

MFSA 2008-66 / CVE-2008-5508: Perl developer Chip Salzenberg reported that certain control characters, when placed at the beginning of a URL, would lead to incorrect parsing resulting in a malformed URL being output by the parser. IBM researchers Justin Schuh, Tom Cross, and Peter William also reported a related symptom as part of their research that resulted in MFSA 2008-37. There was no direct security impact from this issue and its effect was limited to the improper rendering of hyperlinks containing specific characters. The severity of this issue was determined to be low.

MFSA 2008-65 / CVE-2008-5507: Google security researcher Chris Evans reported that a website could access a limited amount of data from a different domain by loading a same-domain JavaScript URL which redirects to an off-domain target resource containing data which is not parsable as JavaScript. Upon attempting to load the data as JavaScript a syntax error is generated that can reveal some of the file context via the window.onerror DOM API. This issue could be used by a malicious website to steal private data from users who are authenticated on the redirected website. How much data could be at risk would depend on the format of the data and how the JavaScript parser attempts to interpret it. For most files the amount of data that can be recovered would be limited to the first word or two. Some data files might allow deeper probing with repeated loads. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail.
Workaround Disable JavaScript until a version containing these fixes can be installed.

MFSA 2008-64 / CVE-2008-5506: Marius Schilder of Google Security reported that when a XMLHttpRequest is made to a same-origin resource which 302 redirects to a resource in a different domain, the response from the cross-domain resource is readable by the site issuing the XHR. Cookies marked HttpOnly were not readable, but other potentially sensitive data could be revealed in the XHR response including URL parameters and content in the response body. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Workaround Disable JavaScript until a version containing these fixes can be installed.

MFSA 2008-61 / CVE-2008-5503: Mozilla developer Boris Zbarsky reported that XBL bindings could be used to read data from other domains, a violation of the same-origin policy. The severity of this issue was determined to be moderate due to several mitigating factors: The target document requires a <bindingsi> element in the XBL namespace in order to be read. The reader of the data needs to know the id attribute of the binding being read in advance. It is unlikely that web services will expose private data in the manner described above.
Firefox 3 is not affected by this issue. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Workaround Products built from the Mozilla 1.9.0 branch and later, Firefox 3 for example, are not affected by this issue. Upgrading to one of these products is a reliable workaround for this particular issue and it is also Mozilla's recommendation that the most current version of any Mozilla product be used. Alternatively, you can disable JavaScript until a version containing these fixes can be installed.

MFSA 2008-60 / CVE-2008-5500: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Without further investigation we cannot rule out the possibility that for some of these an attacker might be able to prepare memory for exploitation through some means other than JavaScript such as large images. Workaround Disable JavaScript until a version containing these fixes can be installed.

Several remote vulnerabilities have been discovered in Iceape an unbranded version of the SeaMonkey internet suite. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2008-0016     Justin Schuh, Tom Cross and Peter Williams discovered a     buffer overflow in the parser for UTF-8 URLs, which may     lead to the execution of arbitrary code. (MFSA 2008-37)

  - CVE-2008-0304     It was discovered that a buffer overflow in MIME     decoding can lead to the execution of arbitrary code.
    (MFSA 2008-26)

  - CVE-2008-2785     It was discovered that missing boundary checks on a     reference counter for CSS objects can lead to the     execution of arbitrary code. (MFSA 2008-34)

  - CVE-2008-2798     Devon Hubbard, Jesse Ruderman and Martijn Wargers     discovered crashes in the layout engine, which might     allow the execution of arbitrary code. (MFSA 2008-21)

  - CVE-2008-2799     Igor Bukanov, Jesse Ruderman and Gary Kwong discovered     crashes in the JavaScript engine, which might allow the     execution of arbitrary code. (MFSA 2008-21)

  - CVE-2008-2800     'moz_bug_r_a4' discovered several cross-site scripting     vulnerabilities. (MFSA 2008-22)

  - CVE-2008-2801     Collin Jackson and Adam Barth discovered that JavaScript     code could be executed in the context or signed JAR     archives. (MFSA 2008-23)

  - CVE-2008-2802     'moz_bug_r_a4' discovered that XUL documements can     escalate privileges by accessing the pre-compiled     'fastload' file. (MFSA 2008-24)

  - CVE-2008-2803     'moz_bug_r_a4' discovered that missing input sanitising     in the mozIJSSubScriptLoader.loadSubScript() function     could lead to the execution of arbitrary code. Iceape     itself is not affected, but some addons are. (MFSA     2008-25)

  - CVE-2008-2805     Claudio Santambrogio discovered that missing access     validation in DOM parsing allows malicious websites to     force the browser to upload local files to the server,     which could lead to information disclosure. (MFSA     2008-27)

  - CVE-2008-2807     Daniel Glazman discovered that a programming error in     the code for parsing .properties files could lead to     memory content being exposed to addons, which could lead     to information disclosure. (MFSA 2008-29)

  - CVE-2008-2808     Masahiro Yamada discovered that file URLs in directory     listings were insufficiently escaped. (MFSA 2008-30)

  - CVE-2008-2809     John G. Myers, Frank Benkstein and Nils Toedtmann     discovered that alternate names on self-signed     certificates were handled insufficiently, which could     lead to spoofings of secure connections. (MFSA 2008-31)

  - CVE-2008-2810     It was discovered that URL shortcut files could be used     to bypass the same-origin restrictions. This issue does     not affect current Iceape, but might occur with     additional extensions installed. (MFSA 2008-32)

  - CVE-2008-2811     Greg McManus discovered a crash in the block reflow     code, which might allow the execution of arbitrary code.
    (MFSA 2008-33)

  - CVE-2008-2933     Billy Rios discovered that passing an URL containing a     pipe symbol to Iceape can lead to Chrome privilege     escalation. (MFSA 2008-35)

  - CVE-2008-3835     'moz_bug_r_a4' discovered that the same-origin check in     nsXMLDocument::OnChannelRedirect() could be bypassed.
    (MFSA 2008-38)

  - CVE-2008-3836     'moz_bug_r_a4' discovered that several vulnerabilities     in feedWriter could lead to Chrome privilege escalation.
    (MFSA 2008-39)

  - CVE-2008-3837     Paul Nickerson discovered that an attacker could move     windows during a mouse click, resulting in unwanted     action triggered by drag-and-drop. (MFSA 2008-40)

  - CVE-2008-4058     'moz_bug_r_a4' discovered a vulnerability which can     result in Chrome privilege escalation through     XPCNativeWrappers. (MFSA 2008-41)

  - CVE-2008-4059     'moz_bug_r_a4' discovered a vulnerability which can     result in Chrome privilege escalation through     XPCNativeWrappers. (MFSA 2008-41)

  - CVE-2008-4060     Olli Pettay and 'moz_bug_r_a4' discovered a Chrome     privilege escalation vulnerability in XSLT handling.
    (MFSA 2008-41)

  - CVE-2008-4061     Jesse Ruderman discovered a crash in the layout engine,     which might allow the execution of arbitrary code. (MFSA     2008-42)

  - CVE-2008-4062     Igor Bukanov, Philip Taylor, Georgi Guninski and Antoine     Labour discovered crashes in the JavaScript engine,     which might allow the execution of arbitrary code. (MFSA     2008-42)

  - CVE-2008-4065     Dave Reed discovered that some Unicode byte order marks     are stripped from JavaScript code before execution,     which can result in code being executed, which were     otherwise part of a quoted string. (MFSA 2008-43)

  - CVE-2008-4067     Boris Zbarsky discovered that resource: URLs allow     directory traversal when using URL-encoded slashes.
    (MFSA 2008-44)

  - CVE-2008-4068     Georgi Guninski discovered that resource: URLs could     bypass local access restrictions. (MFSA 2008-44)

  - CVE-2008-4069     Billy Hoffman discovered that the XBM decoder could     reveal uninitialised memory. (MFSA 2008-45)

  - CVE-2008-4070     It was discovered that a buffer overflow could be     triggered via a long header in a news article, which     could lead to arbitrary code execution. (MFSA 2008-46)

  - CVE-2008-5012     Georgi Guninski, Michal Zalewski and Chris Evan     discovered that the canvas element could be used to     bypass same-origin restrictions. (MFSA 2008-48)

  - CVE-2008-5013     It was discovered that insufficient checks in the Flash     plugin glue code could lead to arbitrary code execution.
    (MFSA 2008-49)

  - CVE-2008-5014     Jesse Ruderman discovered that a programming error in     the window.__proto__.__proto__ object could lead to     arbitrary code execution. (MFSA 2008-50)

  - CVE-2008-5017     It was discovered that crashes in the layout engine     could lead to arbitrary code execution. (MFSA 2008-52)

  - CVE-2008-0017     Justin Schuh discovered that a buffer overflow in     http-index-format parser could lead to arbitrary code     execution. (MFSA 2008-54)

  - CVE-2008-5021     It was discovered that a crash in the nsFrameManager     might lead to the execution of arbitrary code. (MFSA     2008-55)

  - CVE-2008-5022     'moz_bug_r_a4' discovered that the same-origin check in     nsXMLHttpRequest::NotifyEventListeners() could be     bypassed. (MFSA 2008-56)

  - CVE-2008-5024     Chris Evans discovered that quote characters were     improperly escaped in the default namespace of E4X     documents. (MFSA 2008-58)

  - CVE-2008-4582     Liu Die Yu discovered an information leak through local     shortcut files. (MFSA 2008-59)

  - CVE-2008-5500     Jesse Ruderman discovered that the layout engine is     vulnerable to DoS attacks that might trigger memory     corruption and an integer overflow. (MFSA 2008-60)

  - CVE-2008-5503     Boris Zbarsky discovered that an information disclosure     attack could be performed via XBL bindings. (MFSA     2008-61)

  - CVE-2008-5506     Marius Schilder discovered that it is possible to obtain     sensible data via a XMLHttpRequest. (MFSA 2008-64)

  - CVE-2008-5507     Chris Evans discovered that it is possible to obtain     sensible data via a JavaScript URL. (MFSA 2008-65)

  - CVE-2008-5508     Chip Salzenberg discovered possible phishing attacks via     URLs with leading whitespaces or control characters.
    (MFSA 2008-66)

  - CVE-2008-5511     It was discovered that it is possible to perform     cross-site scripting attacks via an XBL binding to an     'unloaded document.' (MFSA 2008-68)

  - CVE-2008-5512     It was discovered that it is possible to run arbitrary     JavaScript with chrome privileges via unknown vectors.
    (MFSA 2008-68)

The remote Redhat Enterprise Linux 4 / 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2009:0002 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    Several flaws were found in the processing of malformed HTML mail content.
    An HTML mail message containing malicious content could cause Thunderbird     to crash or, potentially, execute arbitrary code as the user running     Thunderbird. (CVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5511,     CVE-2008-5512, CVE-2008-5513)

    Several flaws were found in the way malformed content was processed. An     HTML mail message containing specially-crafted content could potentially     trick a Thunderbird user into surrendering sensitive information.
    (CVE-2008-5503, CVE-2008-5506, CVE-2008-5507)

    Note: JavaScript support is disabled by default in Thunderbird; the above     issues are not exploitable unless JavaScript is enabled.

    A flaw was found in the way malformed URLs were processed by     Thunderbird. This flaw could prevent various URL sanitization mechanisms     from properly parsing a malicious URL. (CVE-2008-5508)

    All Thunderbird users should upgrade to these updated packages, which     resolve these issues. All running instances of Thunderbird must be     restarted for the update to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Mozilla Thunderbird E-Mail client was updated to version 2.0.0.19.

The following security issues were fixed :

MFSA 2008-68 / CVE-2008-5512 / CVE-2008-5511: Mozilla security researcher moz_bug_r_a4 reported that an XBL binding, when attached to an unloaded document, can be used to violate the same-origin policy and execute arbitrary JavaScript within the context of a different website. moz_bug_r_a4 also reported two vulnerabilities by which page content can pollute XPCNativeWrappers and run arbitary JavaScript with chrome priviliges. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Workaround Disable JavaScript until a version containing these fixes can be installed.

MFSA 2008-67 / CVE-2008-5510: Kojima Hajime reported that unlike literal null characters which were handled correctly, the escaped form '\0' was ignored by the CSS parser and treated as if it was not present in the CSS input string. This issue could potentially be used to bypass script sanitization routines in web applications. The severity of this issue was determined to be low.

MFSA 2008-66 / CVE-2008-5508: Perl developer Chip Salzenberg reported that certain control characters, when placed at the beginning of a URL, would lead to incorrect parsing resulting in a malformed URL being output by the parser. IBM researchers Justin Schuh, Tom Cross, and Peter William also reported a related symptom as part of their research that resulted in MFSA 2008-37. There was no direct security impact from this issue and its effect was limited to the improper rendering of hyperlinks containing specific characters. The severity of this issue was determined to be low.

MFSA 2008-65 / CVE-2008-5507: Google security researcher Chris Evans reported that a website could access a limited amount of data from a different domain by loading a same-domain JavaScript URL which redirects to an off-domain target resource containing data which is not parsable as JavaScript. Upon attempting to load the data as JavaScript a syntax error is generated that can reveal some of the file context via the window.onerror DOM API. This issue could be used by a malicious website to steal private data from users who are authenticated on the redirected website. How much data could be at risk would depend on the format of the data and how the JavaScript parser attempts to interpret it. For most files the amount of data that can be recovered would be limited to the first word or two. Some data files might allow deeper probing with repeated loads. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail.
Workaround Disable JavaScript until a version containing these fixes can be installed.

MFSA 2008-64 / CVE-2008-5506: Marius Schilder of Google Security reported that when a XMLHttpRequest is made to a same-origin resource which 302 redirects to a resource in a different domain, the response from the cross-domain resource is readable by the site issuing the XHR. Cookies marked HttpOnly were not readable, but other potentially sensitive data could be revealed in the XHR response including URL parameters and content in the response body. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Workaround Disable JavaScript until a version containing these fixes can be installed.

MFSA 2008-61 / CVE-2008-5503: Mozilla developer Boris Zbarsky reported that XBL bindings could be used to read data from other domains, a violation of the same-origin policy. The severity of this issue was determined to be moderate due to several mitigating factors: The target document requires a <bindingsi> element in the XBL namespace in order to be read. The reader of the data needs to know the id attribute of the binding being read in advance. It is unlikely that web services will expose private data in the manner described above.
Firefox 3 is not affected by this issue. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Workaround Products built from the Mozilla 1.9.0 branch and later, Firefox 3 for example, are not affected by this issue. Upgrading to one of these products is a reliable workaround for this particular issue and it is also Mozilla's recommendation that the most current version of any Mozilla product be used. Alternatively, you can disable JavaScript until a version containing these fixes can be installed.

MFSA 2008-60 / CVE-2008-5500: Mozilla developers identified and fixed several stability bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these crashes showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Thunderbird shares the browser engine with Firefox and could be vulnerable if JavaScript were to be enabled in mail. This is not the default setting and we strongly discourage users from running JavaScript in mail. Without further investigation we cannot rule out the possibility that for some of these an attacker might be able to prepare memory for exploitation through some means other than JavaScript such as large images. Workaround Disable JavaScript until a version containing these fixes can be installed.

From Red Hat Security Advisory 2008:1037 :

Updated SeaMonkey packages that fix security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5504, CVE-2008-5511, CVE-2008-5512, CVE-2008-5513)

Several flaws were found in the way malformed content was processed. A website containing specially crafted content could potentially trick a SeaMonkey user into surrendering sensitive information.
(CVE-2008-5503, CVE-2008-5506, CVE-2008-5507)

A flaw was found in the way malformed URLs were processed by SeaMonkey. This flaw could prevent various URL sanitization mechanisms from properly parsing a malicious URL. (CVE-2008-5508)

Note: after the errata packages are installed, SeaMonkey must be restarted for the update to take effect.

All SeaMonkey users should upgrade to these updated packages, which contain backported patches to resolve these issues.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox.
(CVE-2008-5500, CVE-2008-5501, CVE-2008-5502, CVE-2008-5511, CVE-2008-5512, CVE-2008-5513)

Several flaws were found in the way malformed content was processed. A website containing specially crafted content could potentially trick a Firefox user into surrendering sensitive information. (CVE-2008-5506, CVE-2008-5507)

A flaw was found in the way Firefox stored attributes in XML User Interface Language (XUL) elements. A website could use this flaw to track users across browser sessions, even if users did not allow the site to store cookies in the victim's browser. (CVE-2008-5505)

A flaw was found in the way malformed URLs were processed by Firefox.
This flaw could prevent various URL sanitization mechanisms from properly parsing a malicious URL. (CVE-2008-5508)

A flaw was found in Firefox's CSS parser. A malicious web page could inject NULL characters into a CSS input string, possibly bypassing an application's script sanitization routines. (CVE-2008-5510)

For technical details regarding these flaws, please see the Mozilla security advisories for Firefox 3.0.5. You can find a link to the Mozilla advisories in the References section.

Note: after the errata packages are installed, Firefox must be restarted for the update to take effect.

The remote host is affected by the vulnerability described in GLSA-201301-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information,       bypass restrictions and protection mechanisms, force file downloads,       conduct XML injection attacks, conduct XSS attacks, bypass the Same       Origin Policy, spoof URL&rsquo;s for phishing attacks, trigger a vertical       scroll, spoof the location bar, spoof an SSL indicator, modify the       browser&rsquo;s font, conduct clickjacking attacks, or have other unspecified       impact.
    A local attacker could gain escalated privileges, obtain sensitive       information, or replace an arbitrary downloaded file.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
41265	SuSE9 Security Update : Epiphany (YOU Patch Number 12326)	Nessus	SuSE Local Security Checks	2009/9/24	2021/1/14	critical
35218	Firefox < 2.0.0.19 / 3.0.5 Multiple Vulnerabilities	Nessus	Windows	2008/12/17	2026/6/23	high
35287	Mozilla Thunderbird < 2.0.0.19 Multiple Vulnerabilities	Nessus	Windows	2009/1/2	2018/11/15	high
35307	openSUSE 10 Security Update : mozilla-xulrunner181 (mozilla-xulrunner181-5881)	Nessus	SuSE Local Security Checks	2009/1/7	2021/1/14	critical
35314	Debian DSA-1697-1 : iceape - several vulnerabilities	Nessus	Debian Local Security Checks	2009/1/8	2021/1/4	critical
35315	RHEL 4 / 5 : thunderbird (RHSA-2009:0002)	Nessus	Red Hat Local Security Checks	2009/1/8	2024/11/4	medium
35325	openSUSE 10 Security Update : MozillaThunderbird (MozillaThunderbird-5900)	Nessus	SuSE Local Security Checks	2009/1/9	2021/1/14	critical
67778	Oracle Linux 3 / 4 : seamonkey (ELSA-2008-1037)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2021/1/14	critical
60506	Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	critical
63402	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	2013/1/8	2025/10/6	critical

检测

插件搜索

critical

high

high

critical

critical

medium

critical

critical

critical

critical