MDVSA-2009:111-1

Executive Summary

Informations
Name	MDVSA-2009:111-1	First vendor Publication	2009-05-13
Vendor	Mandriva	Last vendor Modification	2009-05-13
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentification	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Security vulnerabilities have been discovered in previous versions, and corrected in the latest Mozilla Firefox 3.x, version 3.0.10. (CVE-2009-1302, CVE-2009-1303, CVE-2009-1304, CVE-2009-1305, CVE-2009-0652, CVE-2009-1306, CVE-2009-1307, CVE-2009-1308, CVE-2009-1309, CVE-2009-1310, CVE-2009-1311, CVE-2009-1312, CVE-2009-1313)

This update provides the latest Mozilla Firefox 3.x to correct these issues.

Additionally, some packages which require so, have been rebuilt and are being provided as updates.

Update:

The recent Mozilla Firefox update missed the Firefox language packs for Mandriva Linux 2009. This update provides them, fixing the issue.

Original Source

Url : http://www.mandriva.com/security/advisories?name=MDVSA-2009:111-1

CWE : Common Weakness Enumeration

id	Name
CWE-399	Resource Management Errors
CWE-16	Configuration
CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting')
CWE-200	Information Exposure
CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11396

Oval ID:	oval:org.mitre.oval:def:11396
Title:	The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability than CVE-2005-0233. NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected.
Description:	The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by homoglyphs of the / (slash) and ? (question mark) characters in a subdomain of a .cn domain name, a different vulnerability than CVE-2005-0233. NOTE: some third parties claim that 3.0.6 is not affected, but much older versions perhaps are affected.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-0652	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.37.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.37.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.37.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.37.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section firefox is earlier than 0:3.0.9-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-41.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-41.el4 AND seamonkey-chat is earlier than 0:1.0.9-41.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4 AND seamonkey-devel is earlier than 0:1.0.9-41.el4 AND seamonkey is earlier than 0:1.0.9-41.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:7030

Oval ID:	oval:org.mitre.oval:def:7030
Title:	Mozilla Thunderbird, Seamonkey and Firefox Denial of Service Vulnerability
Description:	The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1302	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird Mozilla Seamonkey Mozilla Firefox
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21 AND Seamonkey version is less than or equal to 1.1.16 AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:6170

Oval ID:	oval:org.mitre.oval:def:6170
Title:	Mozilla Thunderbird Denial of Service Vulnerability
Description:	The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1302	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:6070

Oval ID:	oval:org.mitre.oval:def:6070
Title:	Mozilla Seamonkey Denial of Service Vulnerability
Description:	The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1302	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:5527

Oval ID:	oval:org.mitre.oval:def:5527
Title:	Mozilla Firefox Denial of Service Vulnerability
Description:	The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1302	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Mozilla Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:10106

Oval ID:	oval:org.mitre.oval:def:10106
Title:	The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
Description:	The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1302	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND firefox is earlier than 0:3.0.9-1.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:9455

Oval ID:	oval:org.mitre.oval:def:9455
Title:	The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
Description:	The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1303	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.37.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.37.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.37.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.37.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-js-debugger is earlier than 0:1.0.9-41.el4 AND thunderbird is earlier than 0:1.5.0.12-23.el4 AND seamonkey is earlier than 0:1.0.9-41.el4 AND firefox is earlier than 0:3.0.9-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-41.el4 AND seamonkey-chat is earlier than 0:1.0.9-41.el4 AND seamonkey-devel is earlier than 0:1.0.9-41.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND thunderbird is earlier than 0:2.0.0.22-2.el5_3 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:6646

Oval ID:	oval:org.mitre.oval:def:6646
Title:	Mozilla Thunderbird, Firefox and Seamonkey Denial of Service Vulnerability
Description:	The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1303	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Seamonkey
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16 AND Firefox version is less than or equal to 3.0.8 AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:6151

Oval ID:	oval:org.mitre.oval:def:6151
Title:	Mozilla Thunderbird Denial of Service Vulnerability
Description:	The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1303	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:5992

Oval ID:	oval:org.mitre.oval:def:5992
Title:	Mozilla Firefox Denial of Service Vulnerability
Description:	The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1303	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:5810

Oval ID:	oval:org.mitre.oval:def:5810
Title:	Mozilla Seamonkey Denial of Service Vulnerability
Description:	The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1303	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:9535

Oval ID:	oval:org.mitre.oval:def:9535
Title:	The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
Description:	The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1304	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND firefox is earlier than 0:3.0.9-1.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:7516

Oval ID:	oval:org.mitre.oval:def:7516
Title:	Mozilla Firefox, Thunderbird and Seamonkey Memory corruption Vulnerabilities
Description:	The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1304	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Seamonkey
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21 AND Seamonkey version is less than or equal to 1.1.16 AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:6015

Oval ID:	oval:org.mitre.oval:def:6015
Title:	Mozilla Firefox Memory corruption Vulnerabilities
Description:	The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1304	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:5480

Oval ID:	oval:org.mitre.oval:def:5480
Title:	Mozilla Seamonkey Memory corruption Vulnerabilities
Description:	The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1304	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:5319

Oval ID:	oval:org.mitre.oval:def:5319
Title:	Mozilla Thunderbird Memory corruption Vulnerabilities
Description:	The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1304	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:6921

Oval ID:	oval:org.mitre.oval:def:6921
Title:	Mozilla Firefox, Thunderbird and Seamonkey DoS and Memory Corruption Vulnerability
Description:	The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1305	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Seamonkey
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8 AND Thunderbird version is less than or equal to 2.0.0.21 AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:6248

Oval ID:	oval:org.mitre.oval:def:6248
Title:	Mozilla Seamonkey DoS and Memory Corruption Vulnerability
Description:	The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1305	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:6232

Oval ID:	oval:org.mitre.oval:def:6232
Title:	Mozilla Firefox DoS and Memory Corruption Vulnerability
Description:	The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1305	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:6090

Oval ID:	oval:org.mitre.oval:def:6090
Title:	Mozilla Thunderbird DoS and Memory Corruption Vulnerability
Description:	The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1305	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:10110

Oval ID:	oval:org.mitre.oval:def:10110
Title:	The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
Description:	The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1305	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.37.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.37.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.37.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.37.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-js-debugger is earlier than 0:1.0.9-41.el4 AND thunderbird is earlier than 0:1.5.0.12-23.el4 AND seamonkey is earlier than 0:1.0.9-41.el4 AND firefox is earlier than 0:3.0.9-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-41.el4 AND seamonkey-chat is earlier than 0:1.0.9-41.el4 AND seamonkey-devel is earlier than 0:1.0.9-41.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND thunderbird is earlier than 0:2.0.0.22-2.el5_3 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:6710

Oval ID:	oval:org.mitre.oval:def:6710
Title:	Mozilla Thunderbird, Firefox and Seamonkey Cross Site Scripting Vulnerability
Description:	The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1306	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Seamonkey
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21 AND Firefox version is less than or equal to 3.0.8 AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:6312

Oval ID:	oval:org.mitre.oval:def:6312
Title:	Mozilla Thunderbird Cross Site Scripting Vulnerability
Description:	The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1306	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:6194

Oval ID:	oval:org.mitre.oval:def:6194
Title:	Mozilla Seamonkey Cross Site Scripting Vulnerability
Description:	The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1306	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:6021

Oval ID:	oval:org.mitre.oval:def:6021
Title:	Mozilla Firefox Cross Site Scripting Vulnerability
Description:	The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1306	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:10150

Oval ID:	oval:org.mitre.oval:def:10150
Title:	The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.
Description:	The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Disposition header of the inner URI, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via an uploaded .jar file with a "Content-Disposition: attachment" designation.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1306	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.37.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.37.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.37.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.37.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-js-debugger is earlier than 0:1.0.9-41.el4 AND thunderbird is earlier than 0:1.5.0.12-23.el4 AND seamonkey is earlier than 0:1.0.9-41.el4 AND firefox is earlier than 0:3.0.9-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-41.el4 AND seamonkey-chat is earlier than 0:1.0.9-41.el4 AND seamonkey-devel is earlier than 0:1.0.9-41.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND thunderbird is earlier than 0:2.0.0.22-2.el5_3 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:7008

Oval ID:	oval:org.mitre.oval:def:7008
Title:	Mozilla Thunderbird, Firefox and Seamonkey arbitrary code execution Vulnerability
Description:	The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1307	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird Mozilla Seamonkey Mozilla Firefox
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8 AND Seamonkey version is less than or equal to 1.1.16 AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:6266

Oval ID:	oval:org.mitre.oval:def:6266
Title:	Mozilla Thunderbird arbitrary code execution Vulnerability
Description:	The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1307	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:6154

Oval ID:	oval:org.mitre.oval:def:6154
Title:	Mozilla Firefox arbitrary code execution Vulnerability
Description:	The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1307	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:5933

Oval ID:	oval:org.mitre.oval:def:5933
Title:	Mozilla Seamonkey arbitrary code execution Vulnerability
Description:	The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1307	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:10972

Oval ID:	oval:org.mitre.oval:def:10972
Title:	The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
Description:	The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly implement the Same Origin Policy, which allows remote attackers to (1) bypass crossdomain.xml restrictions and connect to arbitrary web sites via a Flash file; (2) read, create, or modify Local Shared Objects via a Flash file; or (3) bypass unspecified restrictions and render content via vectors involving a jar: URI.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1307	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.37.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.37.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.37.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.37.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-js-debugger is earlier than 0:1.0.9-41.el4 AND thunderbird is earlier than 0:1.5.0.12-23.el4 AND seamonkey is earlier than 0:1.0.9-41.el4 AND firefox is earlier than 0:3.0.9-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-41.el4 AND seamonkey-chat is earlier than 0:1.0.9-41.el4 AND seamonkey-devel is earlier than 0:1.0.9-41.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND thunderbird is earlier than 0:2.0.0.22-2.el5_3 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:7285

Oval ID:	oval:org.mitre.oval:def:7285
Title:	Mozilla Thunderbird, Firefox and Seamonkey XSS and arbitrary injection Vulnerabilities
Description:	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1308	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird Mozilla Seamonkey Mozilla Firefox
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8 AND Seamonkey version is less than or equal to 1.1.16 AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:6296

Oval ID:	oval:org.mitre.oval:def:6296
Title:	Mozilla Thunderbird XSS and arbitrary injection Vulnerabilities
Description:	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1308	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:6185

Oval ID:	oval:org.mitre.oval:def:6185
Title:	Mozilla Firefox XSS and arbitrary injection Vulnerabilities
Description:	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1308	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:6173

Oval ID:	oval:org.mitre.oval:def:6173
Title:	Mozilla Seamonkey XSS and arbitrary injection Vulnerabilities
Description:	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1308	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:10428

Oval ID:	oval:org.mitre.oval:def:10428
Title:	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
Description:	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote attackers to inject arbitrary web script or HTML via vectors involving XBL JavaScript bindings and remote stylesheets, as exploited in the wild by a March 2009 eBay listing.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1308	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND firefox is earlier than 0:3.0.9-1.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND thunderbird is earlier than 0:2.0.0.22-2.el5_3 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:9494

Oval ID:	oval:org.mitre.oval:def:9494
Title:	Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
Description:	Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1309	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.37.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.37.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.37.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.37.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-js-debugger is earlier than 0:1.0.9-41.el4 AND thunderbird is earlier than 0:1.5.0.12-23.el4 AND seamonkey is earlier than 0:1.0.9-41.el4 AND firefox is earlier than 0:3.0.9-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-41.el4 AND seamonkey-chat is earlier than 0:1.0.9-41.el4 AND seamonkey-devel is earlier than 0:1.0.9-41.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND thunderbird is earlier than 0:2.0.0.22-2.el5_3 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:6831

Oval ID:	oval:org.mitre.oval:def:6831
Title:	Mozilla Firefox, Thunderbird, and Seamonkey Multiple XSS Vulnerabilities
Description:	Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1309	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla Seamonkey
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21 AND Seamonkey version is less than or equal to 1.1.16 AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:6139

Oval ID:	oval:org.mitre.oval:def:6139
Title:	Mozilla Firefox Multiple XSS Vulnerabilities
Description:	Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1309	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:5591

Oval ID:	oval:org.mitre.oval:def:5591
Title:	Mozilla Thunderbird Multiple XSS Vulnerabilities
Description:	Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1309	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Thunderbird
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Thunderbird version is less than or equal to 2.0.0.21

Definition Id: oval:org.mitre.oval:def:5265

Oval ID:	oval:org.mitre.oval:def:5265
Title:	Mozilla Seamonkey Multiple XSS Vulnerabilities
Description:	Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHttpRequest, involving a mismatch for a document's principal, and (2) XPCNativeWrapper.toString, involving an incorrect __proto__ scope, which allows remote attackers to conduct cross-site scripting (XSS) attacks and possibly other attacks via a crafted document.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1309	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:6242

Oval ID:	oval:org.mitre.oval:def:6242
Title:	Mozilla Firefox XSS nadn HTML injection Vulnerabilities
Description:	Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1310	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:11520

Oval ID:	oval:org.mitre.oval:def:11520
Title:	Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.
Description:	Cross-site scripting (XSS) vulnerability in the MozSearch plugin implementation in Mozilla Firefox before 3.0.9 allows user-assisted remote attackers to inject arbitrary web script or HTML via a javascript: URI in the SearchForm element.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1310	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND firefox is earlier than 0:3.0.9-1.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:7235

Oval ID:	oval:org.mitre.oval:def:7235
Title:	Mozilla Firefox and Seamonkey Information Disclosure Vulnerability
Description:	Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1311	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox Mozilla Seamonkey
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16 AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:6222

Oval ID:	oval:org.mitre.oval:def:6222
Title:	Mozilla Firefox Information Disclosure Vulnerability
Description:	Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1311	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:6200

Oval ID:	oval:org.mitre.oval:def:6200
Title:	Mozilla Seamonkey Information Disclosure Vulnerability
Description:	Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1311	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:10939

Oval ID:	oval:org.mitre.oval:def:10939
Title:	Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.
Description:	Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODE_FILEONLY save of the inner frame.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1311	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.37.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.37.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.37.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.37.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section firefox is earlier than 0:3.0.9-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-41.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-41.el4 AND seamonkey-chat is earlier than 0:1.0.9-41.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4 AND seamonkey-devel is earlier than 0:1.0.9-41.el4 AND seamonkey is earlier than 0:1.0.9-41.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:9818

Oval ID:	oval:org.mitre.oval:def:9818
Title:	Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
Description:	Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1312	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.37.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.37.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.37.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.37.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.37.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.37.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section firefox is earlier than 0:3.0.9-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-41.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-41.el4 AND seamonkey-chat is earlier than 0:1.0.9-41.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-41.el4 AND seamonkey-devel is earlier than 0:1.0.9-41.el4 AND seamonkey is earlier than 0:1.0.9-41.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.9-1.el5 AND firefox is earlier than 0:3.0.9-1.el5 AND xulrunner is earlier than 0:1.9.0.9-1.el5

Definition Id: oval:org.mitre.oval:def:6731

Oval ID:	oval:org.mitre.oval:def:6731
Title:	Mozilla Firefox and Seamonkey XSS Vulnerability
Description:	Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1312	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey Mozilla Firefox
Definition Synopsis:
IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16 AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:6131

Oval ID:	oval:org.mitre.oval:def:6131
Title:	Mozilla Seamonkey XSS Vulnerability
Description:	Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1312	Version:	1
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Seamonkey
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Seamonkey version is less than or equal to 1.1.16

Definition Id: oval:org.mitre.oval:def:6064

Oval ID:	oval:org.mitre.oval:def:6064
Title:	Mozilla Firefox XSS Vulnerability
Description:	Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting (XSS) attacks via vectors related to (1) injecting a Refresh header or (2) specifying the content of a Refresh header. NOTE: it was later reported that Firefox 3.6 a1 pre and Mozilla 1.7.x and earlier are also affected.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-1312	Version:	3
Platform(s):	Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista	Product(s):	Mozilla Firefox
Definition Synopsis:
IF IF Microsoft Windows XP (x86) SP2 is installed AND Microsoft Windows XP (x86) SP3 is installed AND Microsoft Windows Vista (32-bit) is installed AND Microsoft Windows Vista (32-bit) Service Pack 1 is installed AND Microsoft Windows Server 2003 SP1 (x86) is installed AND Microsoft Windows Server 2003 SP2 (x86) is installed AND Firefox version is less than or equal to 3.0.8

Definition Id: oval:org.mitre.oval:def:10446

Oval ID:	oval:org.mitre.oval:def:10446
Title:	The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.
Description:	The nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox 3.0.9 allows remote attackers to cause a denial of service (memory corruption) and probably execute arbitrary code via unspecified vectors. NOTE: this vulnerability reportedly exists because of an incorrect fix for CVE-2009-1302.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2009-1313	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND firefox is earlier than 0:3.0.10-1.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.10-1.el5 AND xulrunner-devel is earlier than 0:1.9.0.10-1.el5 AND firefox is earlier than 0:3.0.10-1.el5 AND xulrunner is earlier than 0:1.9.0.10-1.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mozilla Firefox cpe:/a:mozilla:firefox:3.0beta5 cpe:/a:mozilla:firefox:3.0.9 cpe:/a:mozilla:firefox:3.0.8 cpe:/a:mozilla:firefox:3.0.7 cpe:/a:mozilla:firefox:3.0.6 cpe:/a:mozilla:firefox:3.0.5 cpe:/a:mozilla:firefox:3.0.4 cpe:/a:mozilla:firefox:3.0.3 cpe:/a:mozilla:firefox:3.0.2 cpe:/a:mozilla:firefox:3.0.1 cpe:/a:mozilla:firefox:3.0:beta2 cpe:/a:mozilla:firefox:3.0:beta5 cpe:/a:mozilla:firefox:3.0:alpha cpe:/a:mozilla:firefox:3.0 cpe:/a:mozilla:firefox:2.0.0.9 cpe:/a:mozilla:firefox:2.0.0.8 cpe:/a:mozilla:firefox:2.0.0.7 cpe:/a:mozilla:firefox:2.0.0.6 cpe:/a:mozilla:firefox:2.0.0.5 cpe:/a:mozilla:firefox:2.0.0.4 cpe:/a:mozilla:firefox:2.0.0.3 cpe:/a:mozilla:firefox:2.0.0.21 cpe:/a:mozilla:firefox:2.0.0.20 cpe:/a:mozilla:firefox:2.0.0.2 cpe:/a:mozilla:firefox:2.0.0.19 cpe:/a:mozilla:firefox:2.0.0.18 cpe:/a:mozilla:firefox:2.0.0.17 cpe:/a:mozilla:firefox:2.0.0.16 cpe:/a:mozilla:firefox:2.0.0.15 cpe:/a:mozilla:firefox:2.0.0.14 cpe:/a:mozilla:firefox:2.0.0.13 cpe:/a:mozilla:firefox:2.0.0.12 cpe:/a:mozilla:firefox:2.0.0.11 cpe:/a:mozilla:firefox:2.0.0.10 cpe:/a:mozilla:firefox:2.0.0.1 cpe:/a:mozilla:firefox:2.0_8 cpe:/a:mozilla:firefox:2.0_.9 cpe:/a:mozilla:firefox:2.0_.7 cpe:/a:mozilla:firefox:2.0_.6 cpe:/a:mozilla:firefox:2.0_.5 cpe:/a:mozilla:firefox:2.0_.4 cpe:/a:mozilla:firefox:2.0_.10 cpe:/a:mozilla:firefox:2.0_.1 cpe:/a:mozilla:firefox:2.0:beta_1 cpe:/a:mozilla:firefox:2.0:rc3 cpe:/a:mozilla:firefox:2.0:beta1 cpe:/a:mozilla:firefox:2.0:rc2 cpe:/a:mozilla:firefox:2.0 cpe:/a:mozilla:firefox:1.8 cpe:/a:mozilla:firefox:1.5.8 cpe:/a:mozilla:firefox:1.5.7 cpe:/a:mozilla:firefox:1.5.6 cpe:/a:mozilla:firefox:1.5.5 cpe:/a:mozilla:firefox:1.5.4 cpe:/a:mozilla:firefox:1.5.3 cpe:/a:mozilla:firefox:1.5.2 cpe:/a:mozilla:firefox:1.5.1 cpe:/a:mozilla:firefox:1.5.0.9 cpe:/a:mozilla:firefox:1.5.0.8 cpe:/a:mozilla:firefox:1.5.0.7 cpe:/a:mozilla:firefox:1.5.0.6 cpe:/a:mozilla:firefox:1.5.0.5 cpe:/a:mozilla:firefox:1.5.0.4 cpe:/a:mozilla:firefox:1.5.0.3 cpe:/a:mozilla:firefox:1.5.0.2 cpe:/a:mozilla:firefox:1.5.0.12 cpe:/a:mozilla:firefox:1.5.0.11 cpe:/a:mozilla:firefox:1.5.0.10 cpe:/a:mozilla:firefox:1.5.0.1 cpe:/a:mozilla:firefox:1.5:beta1 cpe:/a:mozilla:firefox:1.5:beta2 cpe:/a:mozilla:firefox:1.5 cpe:/a:mozilla:firefox:1.0.8 cpe:/a:mozilla:firefox:1.0.7 cpe:/a:mozilla:firefox:1.0.6::linux cpe:/a:mozilla:firefox:1.0.6 cpe:/a:mozilla:firefox:1.0.5 cpe:/a:mozilla:firefox:1.0.4 cpe:/a:mozilla:firefox:1.0.3 cpe:/a:mozilla:firefox:1.0.2 cpe:/a:mozilla:firefox:1.0.1 cpe:/a:mozilla:firefox:1.0:preview_release cpe:/a:mozilla:firefox:1.0 cpe:/a:mozilla:firefox:0.9.3 cpe:/a:mozilla:firefox:0.9.2 cpe:/a:mozilla:firefox:0.9.1 cpe:/a:mozilla:firefox:0.9_rc cpe:/a:mozilla:firefox:0.9 cpe:/a:mozilla:firefox:0.9:rc cpe:/a:mozilla:firefox:0.8 cpe:/a:mozilla:firefox:0.7.1 cpe:/a:mozilla:firefox:0.7 cpe:/a:mozilla:firefox:0.6.1 cpe:/a:mozilla:firefox:0.6 cpe:/a:mozilla:firefox:0.5 cpe:/a:mozilla:firefox:0.4 cpe:/a:mozilla:firefox:0.3 cpe:/a:mozilla:firefox:0.2 cpe:/a:mozilla:firefox:0.10.1 cpe:/a:mozilla:firefox:0.10 cpe:/a:mozilla:firefox:0.1	101
Application	Mozilla Seamonkey cpe:/a:mozilla:seamonkey:1.5.0.9 cpe:/a:mozilla:seamonkey:1.5.0.8 cpe:/a:mozilla:seamonkey:1.5.0.10 cpe:/a:mozilla:seamonkey:1.1.9 cpe:/a:mozilla:seamonkey:1.1.8 cpe:/a:mozilla:seamonkey:1.1.7 cpe:/a:mozilla:seamonkey:1.1.6 cpe:/a:mozilla:seamonkey:1.1.5:1.1.10 cpe:/a:mozilla:seamonkey:1.1.5 cpe:/a:mozilla:seamonkey:1.1.4 cpe:/a:mozilla:seamonkey:1.1.3 cpe:/a:mozilla:seamonkey:1.1.2 cpe:/a:mozilla:seamonkey:1.1.16 cpe:/a:mozilla:seamonkey:1.1.15 cpe:/a:mozilla:seamonkey:1.1.14 cpe:/a:mozilla:seamonkey:1.1.13 cpe:/a:mozilla:seamonkey:1.1.12 cpe:/a:mozilla:seamonkey:1.1.11 cpe:/a:mozilla:seamonkey:1.1.10 cpe:/a:mozilla:seamonkey:1.1.1 cpe:/a:mozilla:seamonkey:1.1 cpe:/a:mozilla:seamonkey:1.1::beta cpe:/a:mozilla:seamonkey:1.1::alpha cpe:/a:mozilla:seamonkey:1.1:beta cpe:/a:mozilla:seamonkey:1.1:alpha cpe:/a:mozilla:seamonkey:1.0.99 cpe:/a:mozilla:seamonkey:1.0.9 cpe:/a:mozilla:seamonkey:1.0.8 cpe:/a:mozilla:seamonkey:1.0.7 cpe:/a:mozilla:seamonkey:1.0.6 cpe:/a:mozilla:seamonkey:1.0.5 cpe:/a:mozilla:seamonkey:1.0.4 cpe:/a:mozilla:seamonkey:1.0.3 cpe:/a:mozilla:seamonkey:1.0.2 cpe:/a:mozilla:seamonkey:1.0.1 cpe:/a:mozilla:seamonkey:1.0:alpha cpe:/a:mozilla:seamonkey:1.0 cpe:/a:mozilla:seamonkey:1.0:beta cpe:/a:mozilla:seamonkey:1.0::alpha cpe:/a:mozilla:seamonkey:1.0::dev cpe:/a:mozilla:seamonkey:1.0::beta cpe:/a:mozilla:seamonkey	42
Application	Mozilla Thunderbird cpe:/a:mozilla:thunderbird:2.0.14 cpe:/a:mozilla:thunderbird:2.0.0.9 cpe:/a:mozilla:thunderbird:2.0.0.8 cpe:/a:mozilla:thunderbird:2.0.0.7 cpe:/a:mozilla:thunderbird:2.0.0.6 cpe:/a:mozilla:thunderbird:2.0.0.5 cpe:/a:mozilla:thunderbird:2.0.0.4 cpe:/a:mozilla:thunderbird:2.0.0.3 cpe:/a:mozilla:thunderbird:2.0.0.21 cpe:/a:mozilla:thunderbird:2.0.0.20 cpe:/a:mozilla:thunderbird:2.0.0.2 cpe:/a:mozilla:thunderbird:2.0.0.19 cpe:/a:mozilla:thunderbird:2.0.0.18 cpe:/a:mozilla:thunderbird:2.0.0.17 cpe:/a:mozilla:thunderbird:2.0.0.16 cpe:/a:mozilla:thunderbird:2.0.0.15 cpe:/a:mozilla:thunderbird:2.0.0.14 cpe:/a:mozilla:thunderbird:2.0.0.13 cpe:/a:mozilla:thunderbird:2.0.0.12 cpe:/a:mozilla:thunderbird:2.0.0.11 cpe:/a:mozilla:thunderbird:2.0.0.1 cpe:/a:mozilla:thunderbird:2.0.0.0 cpe:/a:mozilla:thunderbird:2.0_8 cpe:/a:mozilla:thunderbird:2.0_.9 cpe:/a:mozilla:thunderbird:2.0_.6 cpe:/a:mozilla:thunderbird:2.0_.5 cpe:/a:mozilla:thunderbird:2.0_.4 cpe:/a:mozilla:thunderbird:2.0_.14 cpe:/a:mozilla:thunderbird:2.0_.13 cpe:/a:mozilla:thunderbird:2.0_.12 cpe:/a:mozilla:thunderbird:1.7.3 cpe:/a:mozilla:thunderbird:1.7.1 cpe:/a:mozilla:thunderbird:1.5.2 cpe:/a:mozilla:thunderbird:1.5.1 cpe:/a:mozilla:thunderbird:1.5.0.9 cpe:/a:mozilla:thunderbird:1.5.0.8 cpe:/a:mozilla:thunderbird:1.5.0.7 cpe:/a:mozilla:thunderbird:1.5.0.6 cpe:/a:mozilla:thunderbird:1.5.0.5 cpe:/a:mozilla:thunderbird:1.5.0.4 cpe:/a:mozilla:thunderbird:1.5.0.3 cpe:/a:mozilla:thunderbird:1.5.0.2 cpe:/a:mozilla:thunderbird:1.5.0.14 cpe:/a:mozilla:thunderbird:1.5.0.13 cpe:/a:mozilla:thunderbird:1.5.0.12 cpe:/a:mozilla:thunderbird:1.5.0.11 cpe:/a:mozilla:thunderbird:1.5.0.10 cpe:/a:mozilla:thunderbird:1.5.0.1 cpe:/a:mozilla:thunderbird:1.5:beta2 cpe:/a:mozilla:thunderbird:1.5 cpe:/a:mozilla:thunderbird:1.0.8 cpe:/a:mozilla:thunderbird:1.0.7 cpe:/a:mozilla:thunderbird:1.0.6 cpe:/a:mozilla:thunderbird:1.0.5:beta cpe:/a:mozilla:thunderbird:1.0.5 cpe:/a:mozilla:thunderbird:1.0.4 cpe:/a:mozilla:thunderbird:1.0.3 cpe:/a:mozilla:thunderbird:1.0.2 cpe:/a:mozilla:thunderbird:1.0.1 cpe:/a:mozilla:thunderbird:1.0 cpe:/a:mozilla:thunderbird:0.9 cpe:/a:mozilla:thunderbird:0.8 cpe:/a:mozilla:thunderbird:0.7.3 cpe:/a:mozilla:thunderbird:0.7.2 cpe:/a:mozilla:thunderbird:0.7.1 cpe:/a:mozilla:thunderbird:0.7 cpe:/a:mozilla:thunderbird:0.6 cpe:/a:mozilla:thunderbird:0.5 cpe:/a:mozilla:thunderbird:0.4 cpe:/a:mozilla:thunderbird:0.3 cpe:/a:mozilla:thunderbird:0.2 cpe:/a:mozilla:thunderbird:0.1 cpe:/a:mozilla:thunderbird	73

Open Source Vulnerability Database (OSVDB)

id	Description
54174	Mozilla Firefox layout/generic/nsTextFrameThebes.cpp nsTextFrame::ClearTextRu...
53972	Mozilla Multiple Products nsAsyncInstantiateEvent::Run() Frame Handling Memor...
53971	Mozilla Multiple Products nsSVGElement::BindToTree svg Handling Memory Corrup...
53970	Mozilla Multiple Products js_FindPropertyHelper Error Condition JavaScript En...
53969	Mozilla Multiple Products JavaScript Engine gvar Optimization JSOP_DEFVAR Hea...
53968	Mozilla Multiple Products XMLHttpRequest Document Creation Principal-based Se...
53967	Mozilla Multiple Products js_CheckRedeclaration Shared Object Handling JavaSc...
53966	Mozilla Multiple Products gfxSkipCharsIterator::SetOffsets Memory Corruption
53965	Mozilla Multiple Products nsStyleContext::Destroy() DOMAttrModified Window Ha...
53964	Mozilla Multiple Products PL_DHashTableOperate / nsEditor::EndUpdateViewBatch...
53963	Mozilla Multiple Products XSLT Stylesheet Compiling Memory Corruption
53962	Mozilla Multiple Products nsComputedDOMStyle::GetWidth Memory Corruption
53961	Mozilla Multiple Products nsXULDocument::SynchronizeBroadcastListener Memory ...
53960	Mozilla Multiple Products IsBindingAncestor Frame Handling Memory Corruption
53959	Mozilla Multiple Products XPCNativeWrapper.toString XSS
53958	Mozilla Multiple Products view-source: Scheme Adobe Flash Same-origin Policy ...
53957	Mozilla Multiple Products jar Scheme Content-disposition Header Bypass
53955	Mozilla Multiple Products Third-party Stylesheet XBL Binding XSS
53954	Mozilla Firefox MozSearch Plugins Empty Search Page Manipulation Weakness
53953	Mozilla Firefox Inner Frame Saving Cross Site POST Request Disclosure
53952	Mozilla Multiple Products Server Refresh Header XSS
52659	Mozilla Firefox IDN Homoglyph Character Literal Rendering URI Spoofing Weakness

Related	Severity
MDVSA-2009:111	(Critical)
CVE-2009-1313	(Critical)
CVE-2009-1307	(Medium)
CVE-2009-0652	(Medium)
CVE-2009-1305	(Medium)
CVE-2009-1304	(Medium)
CVE-2009-1303	(Medium)
CVE-2009-1302	(Medium)
CVE-2009-1312	(Medium)
CVE-2009-1311	(Medium)
CVE-2009-1310	(Medium)
CVE-2009-1309	(Medium)
CVE-2009-1308	(Medium)
CVE-2009-1306	(Medium)