10 - RHSA-2010:0332

Executive Summary

Summary
Title	firefox security update

Informations
Name	RHSA-2010:0332	First vendor Publication	2010-03-30
Vendor	RedHat	Last vendor Modification	2010-03-30
Severity (Vendor)	Critical	Revision	01

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:L/Au:N/C:C/I:C/A:C)
Cvss Base Score	10	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Low
Cvss Expoit Score	10	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Problem Description:

Updated firefox packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

2. Relevant releases/architectures:

RHEL Desktop Workstation (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, ppc, s390x, x86_64 Red Hat Enterprise Linux AS version 4 - i386, ia64, ppc, s390, s390x, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 Red Hat Enterprise Linux Desktop version 4 - i386, x86_64 Red Hat Enterprise Linux ES version 4 - i386, ia64, x86_64 Red Hat Enterprise Linux WS version 4 - i386, ia64, x86_64

3. Description:

Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox.

Several use-after-free flaws were found in Firefox. Visiting a web page containing malicious content could result in Firefox executing arbitrary code with the privileges of the user running Firefox. (CVE-2010-0175, CVE-2010-0176, CVE-2010-0177)

A flaw was found in Firefox that could allow an applet to generate a drag and drop action from a mouse click. Such an action could be used to execute arbitrary JavaScript with the privileges of the user running Firefox. (CVE-2010-0178)

A privilege escalation flaw was found in Firefox when the Firebug add-on is in use. The XMLHttpRequestSpy module in the Firebug add-on exposes a Chrome privilege escalation flaw that could be used to execute arbitrary JavaScript with the privileges of the user running Firefox. (CVE-2010-0179)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2010-0174)

For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 3.0.19. You can find a link to the Mozilla advisories in the References section of this erratum.

All Firefox users should upgrade to these updated packages, which contain Firefox version 3.0.19, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

4. Solution:

Before applying this update, make sure all previously-released errata relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at http://kbase.redhat.com/faq/docs/DOC-11259

5. Bugs fixed (http://bugzilla.redhat.com/):

578147 - CVE-2010-0174 Mozilla crashes with evidence of memory corruption 578149 - CVE-2010-0175 Mozilla remote code execution with use-after-free in nsTreeSelection 578150 - CVE-2010-0176 Mozilla Dangling pointer vulnerability in nsTreeContentView 578152 - CVE-2010-0177 Mozilla Dangling pointer vulnerability in nsPluginArray 578154 - CVE-2010-0178 Firefox Chrome privilege escalation via forced URL drag and drop 578155 - CVE-2010-0179 Firefox Arbitrary code execution with Firebug XMLHttpRequestSpy

Original Source

Url : https://rhn.redhat.com/errata/RHSA-2010-0332.html

CWE : Common Weakness Enumeration

%	Id	Name
60 %	CWE-399	Resource Management Errors
40 %	CWE-94	Failure to Control Generation of Code ('Code Injection')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10460

Oval ID:	oval:org.mitre.oval:def:10460
Title:	Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
Description:	Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0178	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND firefox is earlier than 0:3.0.19-1.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5 AND firefox is earlier than 0:3.0.19-1.el5_5 AND xulrunner is earlier than 0:1.9.0.19-1.el5_5

Definition Id: oval:org.mitre.oval:def:10833

Oval ID:	oval:org.mitre.oval:def:10833
Title:	Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
Description:	Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0177	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.52.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.52.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.52.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.52.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section firefox is earlier than 0:3.0.19-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-54.el4_8 AND seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8 AND seamonkey-chat is earlier than 0:1.0.9-54.el4_8 AND seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8 AND seamonkey-devel is earlier than 0:1.0.9-54.el4_8 AND seamonkey is earlier than 0:1.0.9-54.el4_8 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5 AND firefox is earlier than 0:3.0.19-1.el5_5 AND xulrunner is earlier than 0:1.9.0.19-1.el5_5

Definition Id: oval:org.mitre.oval:def:11052

Oval ID:	oval:org.mitre.oval:def:11052
Title:	Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
Description:	Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0176	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.52.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.52.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.52.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.52.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section firefox is earlier than 0:3.0.19-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-54.el4_8 AND seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8 AND seamonkey-chat is earlier than 0:1.0.9-54.el4_8 AND seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8 AND seamonkey-devel is earlier than 0:1.0.9-54.el4_8 AND seamonkey is earlier than 0:1.0.9-54.el4_8 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5 AND firefox is earlier than 0:3.0.19-1.el5_5 AND xulrunner is earlier than 0:1.9.0.19-1.el5_5

Definition Id: oval:org.mitre.oval:def:12939

Oval ID:	oval:org.mitre.oval:def:12939
Title:	USN-920-1 -- firefox-3.0, xulrunner-1.9 vulnerabilities
Description:	Martijn Wargers, Josh Soref, Jesse Ruderman, and Ehsan Akhgari discovered flaws in the browser engine of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. It was discovered that Firefox could be made to access previously freed memory. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. Paul Stone discovered that Firefox could be made to change a mouse click into a drag and drop event. If the user could be tricked into performing this action twice on a crafted website, an attacker could execute arbitrary JavaScript with chrome privileges. It was discovered that the XMLHttpRequestSpy module as used by the Firebug add-on could be used to escalate privileges within the browser. If the user had the Firebug add-on installed and were tricked into viewing a malicious website, an attacker could potentially run arbitrary JavaScript
Family:	unix	Class:	patch
Reference(s):	USN-920-1 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178 CVE-2010-0179	Version:	5
Platform(s):	Ubuntu 8.10 Ubuntu 8.04 Ubuntu 9.04	Product(s):	firefox-3.0 xulrunner-1.9
Definition Synopsis:
Release section Ubuntu 8.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section abrowser DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-granparadiso-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-granparadiso-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-granparadiso DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9-venkman DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-granparadiso-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk-venkman DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9-dom-inspector DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-venkman DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-libthai DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section firefox-3.0 DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9-dev DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-branding DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9-gnome-support DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9 DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND abrowser-3.0-branding DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.10.1 AND xulrunner-dev DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.10.1 OR Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section firefox-trunk DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9-venkman DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-venkman DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9-dom-inspector DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-venkman DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-libthai DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section firefox-3.0 DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9-dev DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9-gnome-support DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9 DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.8.04.1 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section abrowser DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9-venkman DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk-venkman DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9-dom-inspector DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-venkman DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-libthai DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-dom-inspector DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section firefox-3.0 DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9-dev DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-branding DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9-gnome-support DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9 DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND abrowser-3.0-branding DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-dev DPKG is earlier than 3.0.19+nobinonly-0ubuntu0.9.04.1 AND xulrunner-dev DPKG is earlier than 1.9.0.19+nobinonly-0ubuntu0.9.04.1

Definition Id: oval:org.mitre.oval:def:13517

Oval ID:	oval:org.mitre.oval:def:13517
Title:	DSA-2027-1 xulrunner -- several
Description:	Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-0174 Jesse Ruderman and Ehsan Akhgari discovered crashes in the layout engine, which might allow the execution of arbitrary code. CVE-2010-0175 It was discovered that incorrect memory handling in the XUL event handler might allow the execution of arbitrary code. CVE-2010-0176 It was discovered that incorrect memory handling in the XUL event handler might allow the execution of arbitrary code. CVE-2010-0177 It was discovered that incorrect memory handling in the plugin code might allow the execution of arbitrary code. CVE-2010-0178 Paul Stone discovered that forced drag-and-drop events could lead to Chrome privilege escalation. CVE-2010-0179 It was discovered that a programming error in the XMLHttpRequestSpy module could lead to the execution of arbitrary code. For the stable distribution, these problems have been fixed in version 1.9.0.19-1. For the unstable distribution, these problems will be fixed soon. We recommend that you upgrade your xulrunner packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2027-1 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178 CVE-2010-0179	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independet section Installed architecture is all AND libmozillainterfaces-java DPKG is earlier than 1.9.0.19-1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is hppa AND Packages section libmozjs-dev DPKG is earlier than 1.9.0.19-1 AND spidermonkey-bin DPKG is earlier than 1.9.0.19-1 AND xulrunner-1.9-gnome-support DPKG is earlier than 1.9.0.19-1 AND xulrunner-1.9 DPKG is earlier than 1.9.0.19-1 AND libmozjs1d-dbg DPKG is earlier than 1.9.0.19-1 AND libmozjs1d DPKG is earlier than 1.9.0.19-1 AND python-xpcom DPKG is earlier than 1.9.0.19-1 AND xulrunner-1.9-dbg DPKG is earlier than 1.9.0.19-1 AND xulrunner-dev DPKG is earlier than 1.9.0.19-1

Definition Id: oval:org.mitre.oval:def:22144

Oval ID:	oval:org.mitre.oval:def:22144
Title:	RHSA-2010:0332: firefox security update (Critical)
Description:	Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0332-01 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178 CVE-2010-0179	Version:	81
Platform(s):	Red Hat Enterprise Linux 5	Product(s):	firefox xulrunner
Definition Synopsis:
The operating system installed on the system is Red Hat Enterprise Linux 5 Packages section xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5 AND firefox is earlier than 0:3.0.19-1.el5_5

Definition Id: oval:org.mitre.oval:def:22767

Oval ID:	oval:org.mitre.oval:def:22767
Title:	ELSA-2010:0332: firefox security update (Critical)
Description:	Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0332-01 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178 CVE-2010-0179	Version:	29
Platform(s):	Oracle Linux 5	Product(s):	firefox xulrunner
Definition Synopsis:
Oracle Linux 5.x rpm test xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5 AND firefox is earlier than 0:3.0.19-1.el5_5

Definition Id: oval:org.mitre.oval:def:6971

Oval ID:	oval:org.mitre.oval:def:6971
Title:	Mozilla Firefox and SeaMonkey Arbitrary Code Execution With Firebug XMLHttpRequestSpy Module Vulnerability
Description:	Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0179	Version:	15
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is before 3.0.19 AND Mozilla Firefox Mainline version is 3.5.x before 3.5.8 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version is less than 2.0.3

Definition Id: oval:org.mitre.oval:def:6975

Oval ID:	oval:org.mitre.oval:def:6975
Title:	Mozilla Firefox and SeaMonkey Chrome Privilege Escalation Vulnerability
Description:	Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, does not prevent applets from interpreting mouse clicks as drag-and-drop actions, which allows remote attackers to execute arbitrary JavaScript with Chrome privileges by loading a chrome: URL and then loading a javascript: URL.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0178	Version:	15
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.0.19 AND Mozilla Firefox Mainline version is 3.5.x before 3.5.9 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.2 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.4

Definition Id: oval:org.mitre.oval:def:7222

Oval ID:	oval:org.mitre.oval:def:7222
Title:	Mozilla Firefox/Thunderbird/SeaMonkey XUL Tree Optgroup Dangling Pointer Vulnerability
Description:	Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 do not properly manage reference counts for option elements in a XUL tree optgroup, which might allow remote attackers to execute arbitrary code via unspecified vectors that trigger access to deleted elements, related to a "dangling pointer vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0176	Version:	24
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.0.19 AND Mozilla Firefox Mainline version is 3.5.x before 3.5.9 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.2 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.4 OR Check for vulnerable Thunderbird Mainline Mozilla Thunderbird Mainline release is installed AND Mozilla Thunderbird version less than 3.0.4

Definition Id: oval:org.mitre.oval:def:7432

Oval ID:	oval:org.mitre.oval:def:7432
Title:	DSA-2027 xulrunner -- several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems: Jesse Ruderman and Ehsan Akhgari discovered crashes in the layout engine, which might allow the execution of arbitrary code. It was discovered that incorrect memory handling in the XUL event handler might allow the execution of arbitrary code. It was discovered that incorrect memory handling in the XUL event handler might allow the execution of arbitrary code. It was discovered that incorrect memory handling in the plugin code might allow the execution of arbitrary code. Paul Stone discovered that forced drag-and-drop events could lead to Chrome privilege escalation. It was discovered that a programming error in the XMLHttpRequestSpy module could lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-2027 CVE-2010-0174 CVE-2010-0175 CVE-2010-0176 CVE-2010-0177 CVE-2010-0178 CVE-2010-0179	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independent section Installed architecture is all AND libmozillainterfaces-java is earlier than 1.9.0.19-1 OR Architecture dependent section Supported architectures section Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is armel AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is hppa AND Packages section libmozjs-dev is earlier than 1.9.0.19-1 AND spidermonkey-bin is earlier than 1.9.0.19-1 AND xulrunner-1.9-gnome-support is earlier than 1.9.0.19-1 AND xulrunner-1.9 is earlier than 1.9.0.19-1 AND libmozjs1d-dbg is earlier than 1.9.0.19-1 AND libmozjs1d is earlier than 1.9.0.19-1 AND python-xpcom is earlier than 1.9.0.19-1 AND xulrunner-1.9-dbg is earlier than 1.9.0.19-1 AND xulrunner-dev is earlier than 1.9.0.19-1

Definition Id: oval:org.mitre.oval:def:7546

Oval ID:	oval:org.mitre.oval:def:7546
Title:	Mozilla Firefox/Thunderbird/SeaMonkey nsTreeSelection Use-After-Free Vulnerability
Description:	Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0175	Version:	24
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is before 3.0.19 AND Mozilla Firefox Mainline version is 3.5.x before 3.5.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.4 OR Check for vulnerable Thunderbird Mainline Mozilla Thunderbird Mainline release is installed AND Mozilla Thunderbird version less than 3.0.4

Definition Id: oval:org.mitre.oval:def:7615

Oval ID:	oval:org.mitre.oval:def:7615
Title:	Mozilla Firefox/Thunderbird/SeaMonkey Memory Corruption Vulnerabilities
Description:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0174	Version:	24
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.0.19 AND Mozilla Firefox Mainline version is 3.5.x before 3.5.9 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.2 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.4 OR Check for vulnerable Thunderbird Mainline Mozilla Thunderbird Mainline release is installed AND Mozilla Thunderbird version less than 3.0.4

Definition Id: oval:org.mitre.oval:def:7622

Oval ID:	oval:org.mitre.oval:def:7622
Title:	Mozilla Firefox and SeaMonkey window.navigator.plugins Object Dangling Pointer Vulnerability
Description:	Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2, and SeaMonkey before 2.0.4, frees the contents of the window.navigator.plugins array while a reference to an array element is still active, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors, related to a "dangling pointer vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-0177	Version:	15
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.0.19 AND Mozilla Firefox Mainline version is 3.5.x before 3.5.9 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.2 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.4

Definition Id: oval:org.mitre.oval:def:9446

Oval ID:	oval:org.mitre.oval:def:9446
Title:	Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
Description:	Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, when the XMLHttpRequestSpy module in the Firebug add-on is used, does not properly handle interaction between the XMLHttpRequestSpy object and chrome privileged objects, which allows remote attackers to execute arbitrary JavaScript via a crafted HTTP response.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0179	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND firefox is earlier than 0:3.0.19-1.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5 AND firefox is earlier than 0:3.0.19-1.el5_5 AND xulrunner is earlier than 0:1.9.0.19-1.el5_5

Definition Id: oval:org.mitre.oval:def:9502

Oval ID:	oval:org.mitre.oval:def:9502
Title:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Description:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.0.19, 3.5.x before 3.5.9, and 3.6.x before 3.6.2; Thunderbird before 3.0.4; and SeaMonkey before 2.0.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0174	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.52.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.52.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.52.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.52.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section firefox is earlier than 0:3.0.19-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-54.el4_8 AND seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8 AND seamonkey-chat is earlier than 0:1.0.9-54.el4_8 AND seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8 AND seamonkey-devel is earlier than 0:1.0.9-54.el4_8 AND seamonkey is earlier than 0:1.0.9-54.el4_8 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5 AND firefox is earlier than 0:3.0.19-1.el5_5 AND xulrunner is earlier than 0:1.9.0.19-1.el5_5

Definition Id: oval:org.mitre.oval:def:9834

Oval ID:	oval:org.mitre.oval:def:9834
Title:	Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
Description:	Use-after-free vulnerability in the nsTreeSelection implementation in Mozilla Firefox before 3.0.19 and 3.5.x before 3.5.9, Thunderbird before 3.0.4, and SeaMonkey before 2.0.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via unspecified vectors that trigger a call to the handler for the select event for XUL tree items.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2010-0175	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.52.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.52.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.52.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.52.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.52.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.52.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section firefox is earlier than 0:3.0.19-1.el4 AND seamonkey-mail is earlier than 0:1.0.9-54.el4_8 AND seamonkey-js-debugger is earlier than 0:1.0.9-54.el4_8 AND seamonkey-chat is earlier than 0:1.0.9-54.el4_8 AND seamonkey-dom-inspector is earlier than 0:1.0.9-54.el4_8 AND seamonkey-devel is earlier than 0:1.0.9-54.el4_8 AND seamonkey is earlier than 0:1.0.9-54.el4_8 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section xulrunner-devel-unstable is earlier than 0:1.9.0.19-1.el5_5 AND xulrunner-devel is earlier than 0:1.9.0.19-1.el5_5 AND firefox is earlier than 0:3.0.19-1.el5_5 AND xulrunner is earlier than 0:1.9.0.19-1.el5_5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mozilla Firefox cpe:2.3:a:mozilla:firefox:3.6:::::::* cpe:2.3:a:mozilla:firefox:3.5.7:::::::* cpe:2.3:a:mozilla:firefox:3.5.6:::::::* cpe:2.3:a:mozilla:firefox:3.5.5:::::::* cpe:2.3:a:mozilla:firefox:3.5.4:::::::* cpe:2.3:a:mozilla:firefox:3.5.3:::::::* cpe:2.3:a:mozilla:firefox:3.5.2:::::::* cpe:2.3:a:mozilla:firefox:3.5.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.5.2::linux::::: cpe:2.3:a:mozilla:firefox:3.5.2::~~~linux~~::::: cpe:2.3:a:mozilla:firefox:3.5.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.5.1:::::::* cpe:2.3:a:mozilla:firefox:3.5.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.5.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.5:::::::* cpe:2.3:a:mozilla:firefox:3.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.2:beta2:::::: cpe:2.3:a:mozilla:firefox:3.2:beta3:::::: cpe:2.3:a:mozilla:firefox:3.2:beta1:::::: cpe:2.3:a:mozilla:firefox:3.1:beta1:::::: cpe:2.3:a:mozilla:firefox:3.0beta5:::::::* cpe:2.3:a:mozilla:firefox:3.0.9:::::::* cpe:2.3:a:mozilla:firefox:3.0.9:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.9:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.8:::::::* cpe:2.3:a:mozilla:firefox:3.0.8:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.8:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.7:::::::* cpe:2.3:a:mozilla:firefox:3.0.7:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.7:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.6:::::::* cpe:2.3:a:mozilla:firefox:3.0.6:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.6:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.5:::::::* cpe:2.3:a:mozilla:firefox:3.0.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.4:::::::* cpe:2.3:a:mozilla:firefox:3.0.4:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.4:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.3:::::::* cpe:2.3:a:mozilla:firefox:3.0.3:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.3:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.2:::::::* cpe:2.3:a:mozilla:firefox:3.0.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.19:::::::* cpe:2.3:a:mozilla:firefox:3.0.18:::::::* cpe:2.3:a:mozilla:firefox:3.0.17:::::::* cpe:2.3:a:mozilla:firefox:3.0.16:::::::* cpe:2.3:a:mozilla:firefox:3.0.15:::::::* cpe:2.3:a:mozilla:firefox:3.0.14:::::::* cpe:2.3:a:mozilla:firefox:3.0.13:::::::* cpe:2.3:a:mozilla:firefox:3.0.13:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.13:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.12:::::::* cpe:2.3:a:mozilla:firefox:3.0.12:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.12:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.11:::::::* cpe:2.3:a:mozilla:firefox:3.0.11:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.11:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.10:::::::* cpe:2.3:a:mozilla:firefox:3.0.10:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.10:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.1:::::::* cpe:2.3:a:mozilla:firefox:3.0.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0:-:::::: cpe:2.3:a:mozilla:firefox:3.0:alpha:::::: cpe:2.3:a:mozilla:firefox:3.0:beta5:::::: cpe:2.3:a:mozilla:firefox:3.0:beta2:::::: cpe:2.3:a:mozilla:firefox:3.0:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.21:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.20:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.20:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.20:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.19:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.19:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.19:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.18:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.18:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.18:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.17:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.17:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.17:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.16:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.16:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.16:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.15:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.15:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.15:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.14:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.14:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.14:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0_8:::::::* cpe:2.3:a:mozilla:firefox:2.0_.9:::::::* cpe:2.3:a:mozilla:firefox:2.0_.7:::::::* cpe:2.3:a:mozilla:firefox:2.0_.6:::::::* cpe:2.3:a:mozilla:firefox:2.0_.5:::::::* cpe:2.3:a:mozilla:firefox:2.0_.4:::::::* cpe:2.3:a:mozilla:firefox:2.0_.10:::::::* cpe:2.3:a:mozilla:firefox:2.0_.1:::::::* cpe:2.3:a:mozilla:firefox:2.0:::::::* cpe:2.3:a:mozilla:firefox:2.0:beta1:::::: cpe:2.3:a:mozilla:firefox:2.0:beta_1:::::: cpe:2.3:a:mozilla:firefox:2.0:rc3:::::: cpe:2.3:a:mozilla:firefox:2.0:rc2:::::: cpe:2.3:a:mozilla:firefox:2.0:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:1.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.1:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.9:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.12:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.11:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.10:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.5:-:::::: cpe:2.3:a:mozilla:firefox:1.5:beta2:::::: cpe:2.3:a:mozilla:firefox:1.5:beta1:::::: cpe:2.3:a:mozilla:firefox:1.4.1:::::::* cpe:2.3:a:mozilla:firefox:1.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.0.6::linux::::: cpe:2.3:a:mozilla:firefox:1.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.0:preview_release:::::: cpe:2.3:a:mozilla:firefox:1.0:-:::::: cpe:2.3:a:mozilla:firefox:0.9.3:::::::* cpe:2.3:a:mozilla:firefox:0.9.2:::::::* cpe:2.3:a:mozilla:firefox:0.9.1:::::::* cpe:2.3:a:mozilla:firefox:0.9_rc:::::::* cpe:2.3:a:mozilla:firefox:0.9:rc:::::: cpe:2.3:a:mozilla:firefox:0.9:::::::* cpe:2.3:a:mozilla:firefox:0.8:::::::* cpe:2.3:a:mozilla:firefox:0.7.1:::::::* cpe:2.3:a:mozilla:firefox:0.7:::::::* cpe:2.3:a:mozilla:firefox:0.6.1:::::::* cpe:2.3:a:mozilla:firefox:0.6:::::::* cpe:2.3:a:mozilla:firefox:0.5:::::::* cpe:2.3:a:mozilla:firefox:0.4:::::::* cpe:2.3:a:mozilla:firefox:0.3:::::::* cpe:2.3:a:mozilla:firefox:0.2:::::::* cpe:2.3:a:mozilla:firefox:0.10.1:::::::* cpe:2.3:a:mozilla:firefox:0.10:::::::* cpe:2.3:a:mozilla:firefox:0.1:::::::* cpe:2.3:a:mozilla:firefox:::::::: cpe:2.3:a:mozilla:firefox:::::::x86:* cpe:2.3:a:mozilla:firefox::::::x86::* cpe:2.3:a:mozilla:firefox::::::iphone_os::* cpe:2.3:a:mozilla:firefox::::::-::* cpe:2.3:a:mozilla:firefox::::::android::* cpe:2.3:a:mozilla:firefox:::::android:::* cpe:2.3:a:mozilla:firefox:-:::::::* cpe:2.3:a:mozilla:firefox:-:::::iphone_os::	212
Application	Mozilla Seamonkey cpe:2.3:a:mozilla:seamonkey:2.0a1pre:::::::* cpe:2.3:a:mozilla:seamonkey:2.0a1::pre::::: cpe:2.3:a:mozilla:seamonkey:2.0.4:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.3:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.2:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.1:::::::* cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:::::: cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:::::: cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:::::: cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:::::: cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:::::: cpe:2.3:a:mozilla:seamonkey:2.0:rc2:::::: cpe:2.3:a:mozilla:seamonkey:2.0:rc1:::::: cpe:2.3:a:mozilla:seamonkey:2.0:::::::* cpe:2.3:a:mozilla:seamonkey:2.:beta3:::::: cpe:2.3:a:mozilla:seamonkey:1.5.0.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.5.0.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.5.0.10:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:::::: cpe:2.3:a:mozilla:seamonkey:1.1.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.19:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.18:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.17:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.16:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.15:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.14:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.13:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.12:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.11:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.10:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.1:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.1:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.99:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.0:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.0:::::::* cpe:2.3:a:mozilla:seamonkey:1.0::dev::::: cpe:2.3:a:mozilla:seamonkey:1.0::alpha::::: cpe:2.3:a:mozilla:seamonkey:1.0::beta::::: cpe:2.3:a:mozilla:seamonkey:::::::: cpe:2.3:a:mozilla:seamonkey:-:::::::*	59
Application	Mozilla Thunderbird cpe:2.3:a:mozilla:thunderbird:3.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:3.0:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:3.0:alpha2:::::: cpe:2.3:a:mozilla:thunderbird:3.0:alpha3:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:3.0:rc1:::::: cpe:2.3:a:mozilla:thunderbird:3.0:rc2:::::: cpe:2.3:a:mozilla:thunderbird:3.0:-:::::: cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.24:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.23:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.22:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.21:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.20:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.19:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.18:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.17:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.16:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.15:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.14:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:rc1:::::: cpe:2.3:a:mozilla:thunderbird:2.0_8:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.9:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.6:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.5:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.4:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.14:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.13:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.12:::::::* cpe:2.3:a:mozilla:thunderbird:2.0:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:2.0:-:::::: cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5:beta2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:beta1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:-:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha2:::::: cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:::::: cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.0:rc:::::: cpe:2.3:a:mozilla:thunderbird:1.0:-:::::: cpe:2.3:a:mozilla:thunderbird:0.9:::::::* cpe:2.3:a:mozilla:thunderbird:0.8:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:0.7:rc:::::: cpe:2.3:a:mozilla:thunderbird:0.7:-:::::: cpe:2.3:a:mozilla:thunderbird:0.6:::::::* cpe:2.3:a:mozilla:thunderbird:0.5:::::::* cpe:2.3:a:mozilla:thunderbird:0.4:::::::* cpe:2.3:a:mozilla:thunderbird:0.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.1:::::::* cpe:2.3:a:mozilla:thunderbird:::::::: cpe:2.3:a:mozilla:thunderbird:::::::x86:* cpe:2.3:a:mozilla:thunderbird:-:::::::*	102

OpenVAS Exploits

Date	Description
2012-07-30	Name : CentOS Update for firefox CESA-2010:0966 centos4 x86_64 File : nvt/gb_CESA-2010_0966_firefox_centos4_x86_64.nasl
2011-08-09	Name : CentOS Update for thunderbird CESA-2010:0545 centos5 i386 File : nvt/gb_CESA-2010_0545_thunderbird_centos5_i386.nasl
2011-01-31	Name : CentOS Update for firefox CESA-2010:0966 centos4 i386 File : nvt/gb_CESA-2010_0966_firefox_centos4_i386.nasl
2011-01-11	Name : SuSE Update for MozillaFirefox,MozillaThunderbird,Seamonkey SUSE-SA:2011:003 File : nvt/gb_suse_2011_003.nasl
2010-12-28	Name : Fedora Update for gnome-web-photo FEDORA-2010-18773 File : nvt/gb_fedora_2010_18773_gnome-web-photo_fc14.nasl
2010-12-28	Name : Mandriva Update for firefox MDVSA-2010:251-2 (firefox) File : nvt/gb_mandriva_MDVSA_2010_251_2.nasl
2010-12-28	Name : Mandriva Update for firefox MDVSA-2010:251-1 (firefox) File : nvt/gb_mandriva_MDVSA_2010_251_1.nasl
2010-12-28	Name : Fedora Update for xulrunner FEDORA-2010-18775 File : nvt/gb_fedora_2010_18775_xulrunner_fc13.nasl
2010-12-28	Name : Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-18775 File : nvt/gb_fedora_2010_18775_perl-Gtk2-MozEmbed_fc13.nasl
2010-12-28	Name : Fedora Update for mozvoikko FEDORA-2010-18775 File : nvt/gb_fedora_2010_18775_mozvoikko_fc13.nasl
2010-12-28	Name : Fedora Update for gnome-web-photo FEDORA-2010-18775 File : nvt/gb_fedora_2010_18775_gnome-web-photo_fc13.nasl
2010-12-28	Name : Fedora Update for gnome-python2-extras FEDORA-2010-18775 File : nvt/gb_fedora_2010_18775_gnome-python2-extras_fc13.nasl
2010-12-28	Name : Fedora Update for galeon FEDORA-2010-18775 File : nvt/gb_fedora_2010_18775_galeon_fc13.nasl
2010-12-28	Name : Fedora Update for firefox FEDORA-2010-18775 File : nvt/gb_fedora_2010_18775_firefox_fc13.nasl
2010-12-28	Name : Fedora Update for xulrunner FEDORA-2010-18773 File : nvt/gb_fedora_2010_18773_xulrunner_fc14.nasl
2010-12-28	Name : Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-18773 File : nvt/gb_fedora_2010_18773_perl-Gtk2-MozEmbed_fc14.nasl
2010-12-28	Name : Fedora Update for mozvoikko FEDORA-2010-18773 File : nvt/gb_fedora_2010_18773_mozvoikko_fc14.nasl
2010-12-28	Name : Fedora Update for gnome-python2-extras FEDORA-2010-18773 File : nvt/gb_fedora_2010_18773_gnome-python2-extras_fc14.nasl
2010-12-28	Name : Fedora Update for galeon FEDORA-2010-18773 File : nvt/gb_fedora_2010_18773_galeon_fc14.nasl
2010-12-28	Name : Fedora Update for firefox FEDORA-2010-18773 File : nvt/gb_fedora_2010_18773_firefox_fc14.nasl
2010-12-23	Name : RedHat Update for firefox RHSA-2010:0966-01 File : nvt/gb_RHSA-2010_0966-01_firefox.nasl
2010-12-23	Name : Mandriva Update for firefox MDVSA-2010:251 (firefox) File : nvt/gb_mandriva_MDVSA_2010_251.nasl
2010-07-23	Name : RedHat Update for thunderbird RHSA-2010:0544-01 File : nvt/gb_RHSA-2010_0544-01_thunderbird.nasl
2010-04-29	Name : Mandriva Update for firefox MDVSA-2010:070-1 (firefox) File : nvt/gb_mandriva_MDVSA_2010_070_1.nasl
2010-04-29	Name : SuSE Update for MozillaFirefox,MozillaThunderbird,seamonkey,mozilla-nss SUSE-... File : nvt/gb_suse_2010_021.nasl
2010-04-21	Name : Debian Security Advisory DSA 2027-1 (xulrunner) File : nvt/deb_2027_1.nasl
2010-04-19	Name : Mandriva Update for firefox MDVA-2010:121 (firefox) File : nvt/gb_mandriva_MDVA_2010_121.nasl
2010-04-16	Name : Ubuntu Update for Firefox 3.5 and Xulrunner vulnerabilities USN-921-1 File : nvt/gb_ubuntu_USN_921_1.nasl
2010-04-16	Name : Mandriva Update for firefox MDVSA-2010:070 (firefox) File : nvt/gb_mandriva_MDVSA_2010_070.nasl
2010-04-16	Name : Mandriva Update for firefox-ext-plasmanotify MDVA-2010:118 (firefox-ext-plasm... File : nvt/gb_mandriva_MDVA_2010_118.nasl
2010-04-16	Name : Ubuntu Update for Firefox 3.0 and Xulrunner vulnerabilities USN-920-1 File : nvt/gb_ubuntu_USN_920_1.nasl
2010-04-13	Name : Mozilla Products Multiple vulnerabilities apr-10 (Win) File : nvt/gb_mozilla_prdts_mult_code_exec_vuln_win.nasl
2010-04-13	Name : Mozilla Products Multiple Code Execution vulnerabilities (Windows) File : nvt/gb_mozilla_prdts_mult_vuln_win01_apr10.nasl
2010-04-13	Name : Mozilla Products 'nsTreeSelection' Denial of Service vulnerability (Windows) File : nvt/gb_mozilla_prdts_ns_tree_code_exec_vuln_win.nasl
2010-04-13	Name : Mozilla Products Firebug Code Execution Vulnerability (Windows) File : nvt/gb_mozilla_prdts_firebug_code_exec_vuln_win.nasl
2010-04-09	Name : CentOS Update for seamonkey CESA-2010:0333 centos4 i386 File : nvt/gb_CESA-2010_0333_seamonkey_centos4_i386.nasl
2010-04-09	Name : CentOS Update for seamonkey CESA-2010:0333 centos3 i386 File : nvt/gb_CESA-2010_0333_seamonkey_centos3_i386.nasl
2010-04-09	Name : CentOS Update for firefox CESA-2010:0332 centos4 i386 File : nvt/gb_CESA-2010_0332_firefox_centos4_i386.nasl
2010-04-06	Name : Fedora Update for pcmanx-gtk2 FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_pcmanx-gtk2_fc11.nasl
2010-04-06	Name : Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_perl-Gtk2-MozEmbed_fc11.nasl
2010-04-06	Name : Fedora Update for xulrunner FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_xulrunner_fc11.nasl
2010-04-06	Name : Fedora Update for yelp FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_yelp_fc11.nasl
2010-04-06	Name : Fedora Update for sunbird FEDORA-2010-5526 File : nvt/gb_fedora_2010_5526_sunbird_fc11.nasl
2010-04-06	Name : Fedora Update for thunderbird FEDORA-2010-5526 File : nvt/gb_fedora_2010_5526_thunderbird_fc11.nasl
2010-04-06	Name : Fedora Update for sunbird FEDORA-2010-5539 File : nvt/gb_fedora_2010_5539_sunbird_fc12.nasl
2010-04-06	Name : Fedora Update for thunderbird FEDORA-2010-5539 File : nvt/gb_fedora_2010_5539_thunderbird_fc12.nasl
2010-04-06	Name : Fedora Update for seamonkey FEDORA-2010-5840 File : nvt/gb_fedora_2010_5840_seamonkey_fc12.nasl
2010-04-06	Name : Fedora Update for epiphany-extensions FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_epiphany-extensions_fc11.nasl
2010-04-06	Name : Fedora Update for blam FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_blam_fc11.nasl
2010-04-06	Name : FreeBSD Ports: seamonkey File : nvt/freebsd_seamonkey0.nasl
2010-04-06	Name : RedHat Update for firefox RHSA-2010:0332-01 File : nvt/gb_RHSA-2010_0332-01_firefox.nasl
2010-04-06	Name : RedHat Update for seamonkey RHSA-2010:0333-01 File : nvt/gb_RHSA-2010_0333-01_seamonkey.nasl
2010-04-06	Name : Fedora Update for Miro FEDORA-2010-5506 File : nvt/gb_fedora_2010_5506_Miro_fc12.nasl
2010-04-06	Name : Fedora Update for firefox FEDORA-2010-5506 File : nvt/gb_fedora_2010_5506_firefox_fc12.nasl
2010-04-06	Name : Fedora Update for galeon FEDORA-2010-5506 File : nvt/gb_fedora_2010_5506_galeon_fc12.nasl
2010-04-06	Name : Fedora Update for gnome-python2-extras FEDORA-2010-5506 File : nvt/gb_fedora_2010_5506_gnome-python2-extras_fc12.nasl
2010-04-06	Name : Fedora Update for gnome-web-photo FEDORA-2010-5506 File : nvt/gb_fedora_2010_5506_gnome-web-photo_fc12.nasl
2010-04-06	Name : Fedora Update for mozvoikko FEDORA-2010-5506 File : nvt/gb_fedora_2010_5506_mozvoikko_fc12.nasl
2010-04-06	Name : Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-5506 File : nvt/gb_fedora_2010_5506_perl-Gtk2-MozEmbed_fc12.nasl
2010-04-06	Name : Fedora Update for xulrunner FEDORA-2010-5506 File : nvt/gb_fedora_2010_5506_xulrunner_fc12.nasl
2010-04-06	Name : Fedora Update for Miro FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_Miro_fc11.nasl
2010-04-06	Name : Fedora Update for mozvoikko FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_mozvoikko_fc11.nasl
2010-04-06	Name : Fedora Update for chmsee FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_chmsee_fc11.nasl
2010-04-06	Name : Fedora Update for epiphany FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_epiphany_fc11.nasl
2010-04-06	Name : Fedora Update for evolution-rss FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_evolution-rss_fc11.nasl
2010-04-06	Name : Fedora Update for firefox FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_firefox_fc11.nasl
2010-04-06	Name : Fedora Update for galeon FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_galeon_fc11.nasl
2010-04-06	Name : Fedora Update for gnome-python2-extras FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_gnome-python2-extras_fc11.nasl
2010-04-06	Name : Fedora Update for gnome-web-photo FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_gnome-web-photo_fc11.nasl
2010-04-06	Name : Fedora Update for google-gadgets FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_google-gadgets_fc11.nasl
2010-04-06	Name : Fedora Update for hulahop FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_hulahop_fc11.nasl
2010-04-06	Name : Fedora Update for kazehakase FEDORA-2010-5515 File : nvt/gb_fedora_2010_5515_kazehakase_fc11.nasl
2010-02-22	Name : Mandriva Update for blogtk MDVA-2010:070-1 (blogtk) File : nvt/gb_mandriva_MDVA_2010_070_1.nasl
2010-02-19	Name : Mandriva Update for blogtk MDVA-2010:070 (blogtk) File : nvt/gb_mandriva_MDVA_2010_070.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
63637	Mozilla Multiple Products Firebug Add-on XMLHttpRequestSpy Module Privileged ...
63465	Mozilla Multiple Browsers window.navigator.plugins Object nsPluginArray Dangl...
63464	Mozilla Multiple Browsers Forced URL Drag and Drop Chrome Privilege Escalation
63463	Mozilla Multiple Browsers nsTreeSelection Event Handler Manipulation Arbitrar...
63462	Mozilla Multiple Products nsTreeContentView XUL Tree optgroup Dangling Pointe...
63461	Mozilla Multiple Products Browser Engine Multiple Unspecified Memory Corrupti...

Snort® IPS/IDS

Date	Description
2018-01-17	Mozilla Firefox nsTreeContentView double-free memory corruption attempt RuleID : 45176 - Revision : 1 - Type : BROWSER-FIREFOX
2017-08-31	Mozilla Firefox nsTreeContentView double-free memory corruption attempt RuleID : 43778 - Revision : 2 - Type : BROWSER-FIREFOX

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_seamonkey-101213.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_mozilla-xulrunner191-101213.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_MozillaThunderbird-101213.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_MozillaFirefox-101213.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0966.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0544.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0332.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0545.nasl - Type : ACT_GATHER_INFO
2013-01-08	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201301-01.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100330_firefox_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20101209_firefox_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100720_thunderbird_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100720_thunderbird_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100330_seamonkey_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100330_firefox_on_SL5_x.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_MozillaFirefox-101212.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_MozillaThunderbird-101213.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_mozilla-xulrunner191-101212.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_1_seamonkey-101213.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_seamonkey-101213.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_mozilla-xulrunner191-101213.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaThunderbird-101213.nasl - Type : ACT_GATHER_INFO
2011-05-05	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaFirefox-101213.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2011-03-17	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-100407.nasl - Type : ACT_GATHER_INFO
2011-01-28	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0966.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-101213.nasl - Type : ACT_GATHER_INFO
2011-01-21	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner191-101213.nasl - Type : ACT_GATHER_INFO
2011-01-04	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-7280.nasl - Type : ACT_GATHER_INFO
2010-12-12	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_1d8ff4a2044511e08e32000f20797ede.nasl - Type : ACT_GATHER_INFO
2010-12-12	Name : The remote Fedora host is missing one or more security updates. File : fedora_2010-18773.nasl - Type : ACT_GATHER_INFO
2010-12-12	Name : The remote Fedora host is missing one or more security updates. File : fedora_2010-18775.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-251.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote Windows host contains a web browser affected by multiple vulnerabi... File : mozilla_firefox_3613.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote Windows host contains a web browser affected by multiple vulnerabi... File : mozilla_firefox_3516.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote Windows host contains a web browser affected by multiple vulnerabi... File : seamonkey_2011.nasl - Type : ACT_GATHER_INFO
2010-12-10	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0966.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-100406.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner190-100406.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner190-6971.nasl - Type : ACT_GATHER_INFO
2010-10-11	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-6979.nasl - Type : ACT_GATHER_INFO
2010-08-09	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0544.nasl - Type : ACT_GATHER_INFO
2010-07-28	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0544.nasl - Type : ACT_GATHER_INFO
2010-07-23	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0545.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing one or more security updates. File : fedora_2010-5539.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing one or more security updates. File : fedora_2010-5506.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing one or more security updates. File : fedora_2010-5561.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing one or more security updates. File : fedora_2010-5515.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-5840.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing a security update. File : fedora_2010-6236.nasl - Type : ACT_GATHER_INFO
2010-07-01	Name : The remote Fedora host is missing one or more security updates. File : fedora_2010-5526.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0332.nasl - Type : ACT_GATHER_INFO
2010-05-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_firefox35upgrade-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-070.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaFirefox-100412.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_1_MozillaFirefox-branding-openSUSE-100413.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_0_mozilla-xulrunner190-100407.nasl - Type : ACT_GATHER_INFO
2010-04-14	Name : The remote openSUSE host is missing a security update. File : suse_11_0_firefox35upgrade-100407.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaThunderbird-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner190-6976.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote openSUSE host is missing a security update. File : suse_11_2_seamonkey-100406.nasl - Type : ACT_GATHER_INFO
2010-04-13	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-6970.nasl - Type : ACT_GATHER_INFO
2010-04-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-920-1.nasl - Type : ACT_GATHER_INFO
2010-04-12	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-921-1.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0333.nasl - Type : ACT_GATHER_INFO
2010-04-09	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0332.nasl - Type : ACT_GATHER_INFO
2010-04-05	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2027.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_3019.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_359.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a mail client that is affected by multiple v... File : mozilla_thunderbird_304.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_9ccfee393c3b11df9edc000f20797ede.nasl - Type : ACT_GATHER_INFO
2010-03-31	Name : The remote Windows host contains a web browser that is affected by multiple v... File : seamonkey_204.nasl - Type : ACT_GATHER_INFO
2010-03-23	Name : The remote Windows host contains a web browser that is affected by Multiple V... File : mozilla_firefox_362.nasl - Type : ACT_GATHER_INFO
2010-02-18	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_358.nasl - Type : ACT_GATHER_INFO
2010-02-18	Name : The remote Windows host contains a web browser that is affected by multiple v... File : seamonkey_203.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 11:53:25	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	5
Oval ID(s)	17
CPE ID(s)	373
osvdb(s)	6
Openvas Exploit(s)	74
Snort® Rule(s)	2
Nessus® Exploit(s)	78

	Related
10	CVE-2010-0174
9.3	CVE-2010-0177
9.3	CVE-2010-0176
9.3	CVE-2010-0175
7.6	CVE-2010-0178
5.1	CVE-2010-0179
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 6 more Alert(s)

10 - RHSA-2010:0332

Executive Summary

Security-Database Scoring CVSS v3

Security-Database Scoring CVSS v2

Detail

Original Source

CWE : Common Weakness Enumeration

OVAL Definitions

CPE : Common Platform Enumeration

OpenVAS Exploits

Open Source Vulnerability Database (OSVDB)

Snort® IPS/IDS

Nessus® Vulnerability Scanner

Alert History

Global Informations

Open Standards

Other Databases

COMPANY

STANDARDS

RECENT POSTS

MENU