Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (3)
| Vulnerability |
Summary |
Aliases |
|
VCID-8a69-3km5-nfgs
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2011-1202
|
|
VCID-afcm-vccz-93a7
|
Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.
|
CVE-2011-0079
|
|
VCID-kezq-ad8j-eycq
|
Two crashes that could potentially be exploited to run malicious
code were found in the WebGL feature and fixed in Firefox 4.0.1.
In addition the WebGLES libraries could potentially be used to bypass
a security feature of recent Windows versions. The WebGL feature was
introduced in Firefox 4; older versions are not affected by these issues.Nils reported that the WebGLES libraries in the Windows
version of Firefox were compiled without ASLR protection. An attacker who
found an exploitable memory corruption flaw could then use these libraries
to bypass ASLR on Windows Vista and Windows 7, making the flaw as exploitable
on those platforms as it would be on Windows XP or other platforms.
|
CVE-2011-1302
|