Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (9)
| Vulnerability |
Summary |
Aliases |
|
VCID-5h1w-mvpk-c7h8
|
Multiple vulnerabilities have been reported in Mozilla Thunderbird, some of
which may allow user-assisted arbitrary remote code execution.
|
CVE-2007-0775
|
|
VCID-9yms-2e8t-sfa5
|
Multiple vulnerabilities have been reported in SeaMonkey, some of which may
allow user-assisted arbitrary remote code execution.
|
CVE-2007-0780
|
|
VCID-ar1e-t65c-4yax
|
moz_bug_r_a4 reports that the fix for
MFSA 2006-72 in Firefox 1.5.0.9 and Firefox 2.0.0.1
introduced a regression that allows scripts from web content
to execute arbitrary code by setting the src
attribute of an IMG tag to a specially crafted
javascript: URI.The same regression also caused javascript: URIs in
IMG tags to be executed even if JavaScript
execution was disabled in the global preferences. This facet was
noted by moz_bug_r_a4 and reported independently by
Anbo Motohiko.Thunderbird is not affected by this flaw as it will not execute
javascript: URIs in IMG tags.
|
CVE-2007-0994
|
|
VCID-ctyb-btzs-kubf
|
Multiple vulnerabilities have been reported in SeaMonkey, some of which may
allow user-assisted arbitrary remote code execution.
|
CVE-2007-0779
|
|
VCID-dzxs-qh6q-nkfc
|
Michal Zalewski reported a memory corruption vulnerability in Firefox
2.0.0.1 involving mixing the onUnload event handler and self-modifying
document.write() calls. This flaw was introduced in Firefox 2.0.0.1
and 1.5.0.9 and does not affect earlier versions; it is fixed in
Firefox 2.0.0.2 and 1.5.0.10
|
CVE-2007-1092
|
|
VCID-khgu-a7t9-rbdc
|
Multiple vulnerabilities have been reported in Mozilla Thunderbird, some of
which may allow user-assisted arbitrary remote code execution.
|
CVE-2007-0008
|
|
VCID-qxqf-6kdy-nyap
|
Multiple vulnerabilities have been reported in SeaMonkey, some of which may
allow user-assisted arbitrary remote code execution.
|
CVE-2007-0995
|
|
VCID-z276-uc3n-8fhx
|
Multiple vulnerabilities have been reported in SeaMonkey, some of which may
allow user-assisted arbitrary remote code execution.
|
CVE-2007-0981
|
|
VCID-zthy-y4qb-eyes
|
Multiple vulnerabilities have been reported in SeaMonkey, some of which may
allow user-assisted arbitrary remote code execution.
|
CVE-2007-0778
|