SeaMonkey was upgraded to version 2.5 in order to fix the following security problems :

dbg114-seamonkey-5487 new_updateinfo seamonkey-5487 MFSA 2011-47/CVE-2011-3648 (bmo#690225) Potential XSS against sites using Shift-JIS

dbg114-seamonkey-5487 new_updateinfo seamonkey-5487 MFSA 2011-48/CVE-2011-3651/CVE-2011-3652/CVE-2011-3654 Miscellaneous memory safety hazards

dbg114-seamonkey-5487 new_updateinfo seamonkey-5487 MFSA 2011-49/CVE-2011-3650 (bmo#674776) Memory corruption while profiling using Firebug

dbg114-seamonkey-5487 new_updateinfo seamonkey-5487 MFSA 2011-52/CVE-2011-3655 (bmo#672182) Code execution via NoWaiverWrapper

The remote host is affected by the vulnerability described in GLSA-201301-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information,       bypass restrictions and protection mechanisms, force file downloads,       conduct XML injection attacks, conduct XSS attacks, bypass the Same       Origin Policy, spoof URL&rsquo;s for phishing attacks, trigger a vertical       scroll, spoof the location bar, spoof an SSL indicator, modify the       browser&rsquo;s font, conduct clickjacking attacks, or have other unspecified       impact.
    A local attacker could gain escalated privileges, obtain sensitive       information, or replace an arbitrary downloaded file.
  Workaround :

    There is no known workaround at this time.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2011-389:08 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and     portability.
    XULRunner provides the XUL Runtime environment for Gecko applications.
    Security issues fixed with this release:
    CVE-2011-3647     The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly     handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for     remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a     related issue to CVE-2011-3004.
    CVE-2011-3648     Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and     Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or     HTML via crafted text with Shift JIS encoding.
    CVE-2011-3650     Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not     properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers     to cause a denial of service (memory corruption and application crash) or possibly have unspecified other     impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of Thunderbird 3.1 is earlier than 3.1.16. Such versions are potentially affected by the following security issues :

  - There is an error within the JSSubScriptLoader that     incorrectly unwraps 'XPCNativeWrappers'. By tricking     a user into installing a malicious plug-in, an attacker     could exploit this issue to execute arbitrary code.
    (CVE-2011-3647)

  - Certain invalid sequences are not handled properly in     'Shift-JIS' encoding, which can allow cross-site     scripting attacks. (CVE-2011-3648)

  - Profiling JavaScript files with many functions can cause     the application to crash. It may be possible to trigger     this behavior even when the debugging APIs are not being     used. (CVE-2011-3650)

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian.

  - CVE-2011-3647     'moz_bug_r_a4' discovered a privilege escalation     vulnerability in addon handling.

  - CVE-2011-3648     Yosuke Hasegawa discovered that incorrect handling of     Shift-JIS encodings could lead to cross-site scripting.

  - CVE-2011-3650     Marc Schoenefeld discovered that profiling the     JavaScript code could lead to memory corruption.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2011-1439 advisory.

    [3.1.16-2.0.1.el6_1]
    - Replaced thunderbird-redhat-default-prefs.js with       thunderbird-oracle-default-prefs.js
    - Replace clean.gif in tarball

    [3.1.16-2]
    - Update to 3.1.16

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of Thunderbird 7.x is potentially affected by the following security issues :

  - Certain invalid sequences are not handled properly in     'Shift-JIS' encoding, which can allow cross-site     scripting attacks. (CVE-2011-3648)

  - Profiling JavaScript files with many functions can cause     the application to crash. It may be possible to trigger     this behavior even when the debugging APIs are not being     used. (CVE-2011-3650)

  - Multiple memory safety issues exist. (CVE-2011-3651)

  - An unchecked memory allocation failure can cause the     application to crash. (CVE-2011-3652)

  - An issue with WebGL graphics and GPU drivers can allow     cross-origin image theft. (CVE-2011-3653)

  - An error exists related to SVG 'mpath' linking to a     non-SVG element, which can result in potentially     exploitable application crashes. (CVE-2011-3654)

  - An error in internal privilege checking can allow     web content to obtain elevated privileges.
    (CVE-2011-3655)

The remote Solaris system is missing necessary patches to address security updates :

  - Cross-site scripting (XSS) vulnerability in Mozilla     Firefox before 3.6.24 and 4.x through 7.0 and     Thunderbird before 3.1.6 and 5.0 through 7.0 allows     remote attackers to inject arbitrary web script or HTML     via crafted text with Shift JIS encoding.
    (CVE-2011-3648)

  - Mozilla Firefox before 3.6.24 and 4.x through 7.0 and     Thunderbird before 3.1.6 and 5.0 through 7.0 do not     properly handle JavaScript files that contain many     functions, which allows user-assisted remote attackers     to cause a denial of service (memory corruption and     application crash) or possibly have unspecified other     impact via a crafted file that is accessed by debugging     APIs, as demonstrated by Firebug. (CVE-2011-3650)

  - Multiple unspecified vulnerabilities in the browser     engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow     remote attackers to cause a denial of service (memory     corruption and application crash) or possibly execute     arbitrary code via unknown vectors. (CVE-2011-3651)

  - The browser engine in Mozilla Firefox before 8.0 and     Thunderbird before 8.0 does not properly allocate     memory, which allows remote attackers to cause a denial     of service (memory corruption and application crash) or     possibly execute arbitrary code via unspecified vectors.
    (CVE-2011-3652)

  - The browser engine in Mozilla Firefox before 8.0 and     Thunderbird before 8.0 does not properly handle links     from SVG mpath elements to non-SVG elements, which     allows remote attackers to cause a denial of service     (memory corruption and application crash) or possibly     execute arbitrary code via unspecified vectors.
    (CVE-2011-3654)

  - Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0     through 7.0 perform access control without checking for     use of the NoWaiverWrapper wrapper, which allows remote     attackers to gain privileges via a crafted web site.
    (CVE-2011-3655)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1437 advisory.

    Mozilla Firefox is an open source web browser. XULRunner provides the XUL     Runtime environment for Mozilla Firefox.

    A flaw was found in the way Firefox handled certain add-ons. A web page     containing malicious content could cause an add-on to grant itself full     browser privileges, which could lead to arbitrary code execution with the     privileges of the user running Firefox. (CVE-2011-3647)

    A cross-site scripting (XSS) flaw was found in the way Firefox handled     certain multibyte character sets. A web page containing malicious content     could cause Firefox to run JavaScript code with the permissions of a     different website. (CVE-2011-3648)

    A flaw was found in the way Firefox handled large JavaScript scripts. A web     page containing malicious JavaScript could cause Firefox to crash or,     potentially, execute arbitrary code with the privileges of the user running     Firefox. (CVE-2011-3650)

    For technical details regarding these flaws, refer to the Mozilla security     advisories for Firefox 3.6.24. You can find a link to the Mozilla     advisories in the References section of this erratum.

    All Firefox users should upgrade to these updated packages, which contain     Firefox version 3.6.24, which corrects these issues. After installing the     update, Firefox must be restarted for the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update to version 3.13.1 of mozilla-nss fixes the following issues :

  - Explicitly distrust DigiCert Sdn. Bhd (bmo#698753)

  - Better SHA-224 support (bmo#647706)

  - Fix a regression (causing hangs in some situations)     introduced in 3.13 (bmo#693228)

  - SSL 2.0 is disabled by default

  - A defense against the SSL 3.0 and TLS 1.0 CBC chosen     plaintext attack demonstrated by Rizzo and Duong     (CVE-2011-3389) has been enabled by default. Set the     SSL_CBC_RANDOM_IV SSL option to PR_FALSE to disable it.

  - Support SHA-224

  - Add PORT_ErrorToString and PORT_ErrorToName to return     the error message and symbolic name of an NSS error code

  - Add NSS_GetVersion to return the NSS version string

  - Add experimental support of RSA-PSS to the softoken only

  - NSS_NoDB_Init does not try to open /pkcs11.txt and     /secmod.db anymore (bmo#641052)

The installed version of Thunderbird is earlier than 8.0 and thus, is potentially affected by the following security issues :

  - Certain invalid sequences are not handled properly in     'Shift-JIS' encoding and can allow cross-site scripting     attacks. (CVE-2011-3648)

  - The addition of the 'Azure' graphics functionality re-     introduced a cross-origin information disclosure issue     previously described in CVE-2011-2986. (CVE-2011-3649)

  - Profiling JavaScript files with many functions can cause     the application to crash. It may be possible to trigger     this behavior even when the debugging APIs are not being     used. (CVE-2011-3650)

  - Multiple memory safety issues exist. (CVE-2011-3651)

  - An unchecked memory allocation failure can cause the     application to crash. (CVE-2011-3652)

  - An issue with WebGL graphics and GPU drivers can allow     allow cross-origin image theft. (CVE-2011-3653)

  - An error exists related to SVG 'mpath' linking to a     non-SVG element and can result in potentially     exploitable application crashes. (CVE-2011-3654)

  - An error in internal privilege checking can allow     web content to obtain elevated privileges.
    (CVE-2011-3655)

Security issues were identified and fixed in mozilla NSS, firefox and thunderbird :

22 weak 512-bit certificates issued by the DigiCert Sdn. Bhd certificate authority has been revoked from the root CA storage. This was fixed with rootcerts-20111103.00 and nss-3.13. DigiCert Sdn. Bhd is a Malaysian subordinate CA under Entrust and Verizon (GTE CyberTrust). It bears no affiliation whatsoever with the US-based corporation DigiCert, Inc., which is a member of Mozilla's root program.

Untrusted search path vulnerability in Mozilla Network Security Services (NSS) might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory (CVE-2011-3640).

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or HTML via crafted text with Shift JIS encoding (CVE-2011-3648).

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug (CVE-2011-3650).

The following vulnerabilities affetst Mandriva Linux 2011 only :

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors (CVE-2011-3651).

The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors (CVE-2011-3652).

The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors (CVE-2011-3654).

Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site (CVE-2011-3655).

The following vulnerabilities affects Mandriva Enterpriser Server 5.2 and Mandriva Linux 2010.2 only :

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004 (CVE-2011-3647).

Additionally, some packages which require so, have been rebuilt and are being provided as updates.

Yosuke Hasegawa discovered that the Mozilla browser engine mishandled invalid sequences in the Shift-JIS encoding. It may be possible to trigger this crash without the use of debugging APIs, which might allow malicious websites to exploit this vulnerability. An attacker could possibly use this flaw this to steal data or inject malicious scripts into web content. (CVE-2011-3648)

Marc Schoenefeld discovered that using Firebug to profile a JavaScript file with many functions would cause Firefox to crash. An attacker might be able to exploit this without using the debugging APIs, which could potentially remotely crash the browser, resulting in a denial of service. (CVE-2011-3650)

Jason Orendorff, Boris Zbarsky, Gregg Tavares, Mats Palmgren, Christian Holler, Jesse Ruderman, Simona Marcu, Bob Clary, and William McCloskey discovered multiple memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. An attacker might be able to use these flaws to execute arbitrary code with the privileges of the user invoking Firefox or possibly crash the browser resulting in a denial of service. (CVE-2011-3651)

It was discovered that Firefox could be caused to crash under certain conditions, due to an unchecked allocation failure, resulting in a denial of service. It might also be possible to execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2011-3652)

Aki Helin discovered that Firefox does not properly handle links from SVG mpath elements to non-SVG elements. An attacker could use this vulnerability to crash Firefox, resulting in a denial of service, or possibly execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2011-3654)

It was discovered that an internal privilege check failed to respect the NoWaiverWrappers introduced with Firefox 4. An attacker could possibly use this to gain elevated privileges within the browser for web content. (CVE-2011-3655).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
76024	openSUSE Security Update : seamonkey (openSUSE-SU-2011:1290-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	critical
63402	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	2013/1/8	2025/10/6	critical
284362	MiracleLinux 3 : firefox-3.6.24-3.0.1.AXS3, xulrunner-1.9.2.24-2.0.1.AXS3 (AXSA:2011-389:08)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	medium
56757	Thunderbird 3.1 < 3.1.16 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2011/11/9	2018/7/14	high
56759	Debian DSA-2341-1 : iceweasel - several vulnerabilities	Nessus	Debian Local Security Checks	2011/11/10	2021/1/11	high
68386	Oracle Linux 6 : thunderbird (ELSA-2011-1439)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	medium
56758	Thunderbird 7.x Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2011/11/9	2018/7/14	high
80783	Oracle Solaris Third-Party Patch Update : thunderbird (multiple_vulnerabilities_in_thunderbird2)	Nessus	Solaris Local Security Checks	2015/1/19	2021/1/14	critical
56741	RHEL 6 : firefox (RHSA-2011:1437)	Nessus	Red Hat Local Security Checks	2011/11/9	2025/4/14	medium
57226	SuSE 10 Security Update : mozilla-nss (ZYPP Patch Number 7842) (BEAST)	Nessus	SuSE Local Security Checks	2011/12/13	2022/12/5	critical
56753	Mozilla Thunderbird < 8.0 Multiple Vulnerabilities	Nessus	Windows	2011/11/9	2018/7/16	high
56765	Mandriva Linux Security Advisory : mozilla (MDVSA-2011:169)	Nessus	Mandriva Local Security Checks	2011/11/10	2021/1/6	critical
56944	Ubuntu 11.04 / 11.10 : firefox vulnerabilities (USN-1277-1)	Nessus	Ubuntu Local Security Checks	2011/11/26	2019/9/19	critical

检测

插件搜索

critical

critical

medium

high

high

medium

high

critical

medium

critical

high

critical

critical