9.3 - USN-975-2

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	Firefox and Xulrunner regression

Informations
Name	USN-975-2	First vendor Publication	2010-09-16
Vendor	Ubuntu	Last vendor Modification	2010-09-16
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

A security issue affects the following Ubuntu releases:

Ubuntu 8.04 LTS Ubuntu 9.04 Ubuntu 9.10 Ubuntu 10.04 LTS

This advisory also applies to the corresponding versions of Kubuntu, Edubuntu, and Xubuntu.

The problem can be corrected by upgrading your system to the following package versions:

Ubuntu 8.04 LTS:
firefox-3.0 3.6.10+build1+nobinonly-0ubuntu0.8.04.1
xulrunner-1.9.2 1.9.2.10+build1+nobinonly-0ubuntu0.8.04.1

Ubuntu 9.04:
abrowser 3.6.10+build1+nobinonly-0ubuntu0.9.04.1
firefox-3.0 3.6.10+build1+nobinonly-0ubuntu0.9.04.1
xulrunner-1.9.2 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1

Ubuntu 9.10:
firefox-3.5 3.6.10+build1+nobinonly-0ubuntu0.9.10.1
xulrunner-1.9.1 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1
xulrunner-1.9.2 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1

Ubuntu 10.04 LTS:
abrowser 3.6.10+build1+nobinonly-0ubuntu0.10.04.1
firefox 3.6.10+build1+nobinonly-0ubuntu0.10.04.1
xulrunner-1.9.2 1.9.2.10+build1+nobinonly-0ubuntu0.10.04.1

After a standard system update you need to restart Firefox and any applications that use Xulrunner to make all the necessary changes.

Details follow:

USN-975-1 fixed vulnerabilities in Firefox and Xulrunner. Some users reported stability problems under certain circumstances. This update fixes the problem.

We apologize for the inconvenience.

Original advisory details:

Several dangling pointer vulnerabilities were discovered in Firefox. An
attacker could exploit this to crash the browser or possibly run arbitrary
code as the user invoking the program. (CVE-2010-2760, CVE-2010-2767,
CVE-2010-3167)

Blake Kaplan and Michal Zalewski discovered several weaknesses in the
XPCSafeJSObjectWrapper (SJOW) security wrapper. If a user were tricked into
viewing a malicious site, a remote attacker could use this to run arbitrary
JavaScript with chrome privileges. (CVE-2010-2762)

Matt Haggard discovered that Firefox did not honor same-origin policy when
processing the statusText property of an XMLHttpRequest object. If a user
were tricked into viewing a malicious site, a remote attacker could use
this to gather information about servers on internal private networks.
(CVE-2010-2764)

Chris Rohlf discovered an integer overflow when Firefox processed the HTML
frameset element. If a user were tricked into viewing a malicious site, a
remote attacker could use this to crash the browser or possibly run
arbitrary code as the user invoking the program. (CVE-2010-2765)

Several issues were discovered in the browser engine. If a user were
tricked into viewing a malicious site, a remote attacker could use this to
crash the browser or possibly run arbitrary code as the user invoking the
program. (CVE-2010-2766, CVE-2010-3168)

David Huang and Collin Jackson discovered that the

Original Source

Url : http://www.ubuntu.com/usn/USN-975-2

CWE : Common Weakness Enumeration

%	Id	Name
25 %	CWE-399	Resource Management Errors
25 %	CWE-119	Failure to Constrain Operations within the Bounds of a Memory Buffer
17 %	CWE-264	Permissions, Privileges, and Access Controls
17 %	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)
8 %	CWE-189	Numeric Errors (CWE/SANS Top 25)
8 %	CWE-94	Failure to Control Generation of Code ('Code Injection')

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:11492

Oval ID:	oval:org.mitre.oval:def:11492
Title:	Mozilla Multiple Products SafeJSObjectWrapper XPCSafeJSObjectWrapper Class Chrome Privileged Object Arbitrary JavaScript Code Execution
Description:	The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox 3.6.x before 3.6.9 and Thunderbird 3.1.x before 3.1.3 does not properly restrict objects at the end of scope chains, which allows remote attackers to execute arbitrary JavaScript code with chrome privileges via vectors related to a chrome privileged object and a chain ending in an outer object.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2762	Version:	18
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable Thunderbird Mainline Mozilla Thunderbird Mainline release is installed AND Mozilla Thunderbird 3.1.x before 3.1.3

Definition Id: oval:org.mitre.oval:def:11519

Oval ID:	oval:org.mitre.oval:def:11519
Title:	Mozilla Multiple Products FRAMESET Element cols Attribute Handling Overflow
Description:	Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a large number of values in the cols (aka columns) attribute, leading to a heap-based buffer overflow.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2765	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:11684

Oval ID:	oval:org.mitre.oval:def:11684
Title:	Mozilla Multiple Products XMLHttpRequest Object statusText Property Cross-origin Request Intranet Server Enumeration
Description:	Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict read access to the statusText property of XMLHttpRequest objects, which allows remote attackers to discover the existence of intranet web servers via cross-origin requests.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2764	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:11735

Oval ID:	oval:org.mitre.oval:def:11735
Title:	Mozilla Multiple Products Document Charset OBJECT Element UTF-7 XSS Protection Mechanism Bypass
Description:	Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document's charset, which allows remote attackers to bypass cross-site scripting (XSS) protection mechanisms via UTF-7 encoding.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2768	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:11778

Oval ID:	oval:org.mitre.oval:def:11778
Title:	Mozilla Multiple Products normalizeDocument Function DOM Node Removal Deleted Object Arbitrary Code Execution
Description:	The normalizeDocument function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle the removal of DOM nodes during normalization, which might allow remote attackers to execute arbitrary code via vectors involving access to a deleted object.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2766	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:11799

Oval ID:	oval:org.mitre.oval:def:11799
Title:	Mozilla Multiple Products nsTreeSelection Selection Range Calculation Overflow
Description:	Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via vectors involving a XUL tree selection, related to a "dangling pointer vulnerability." NOTE: this issue exists because of an incomplete fix for CVE-2010-2753.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2760	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:11969

Oval ID:	oval:org.mitre.oval:def:11969
Title:	Mozilla Multiple Products navigator.plugins DOM Plugin Array Destruction Navigator Object Dangling Pointer Arbitrary Code Execution
Description:	The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle destruction of the DOM plugin array, which might allow remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted access to the navigator object, related to a "dangling pointer vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2767	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:12001

Oval ID:	oval:org.mitre.oval:def:12001
Title:	Mozilla Multiple Products XUL Tree Removal Property Change Role Restriction Weakness DoS
Description:	Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, which allows remote attackers to cause a denial of service (deleted memory access and application crash) or possibly execute arbitrary code by setting unspecified properties.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-3168	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:12136

Oval ID:	oval:org.mitre.oval:def:12136
Title:	Mozilla Multiple Products nsTreeContentView Function XUL Tree Node Removal Deleted Memory Dangling Pointer Arbitrary Code Execution
Description:	The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, which allows remote attackers to execute arbitrary code via vectors involving access to deleted memory, related to a "dangling pointer vulnerability."
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-3167	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:12145

Oval ID:	oval:org.mitre.oval:def:12145
Title:	Mozilla Multiple Products Browser Engine Unspecified Memory Corruption
Description:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-3169	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:12186

Oval ID:	oval:org.mitre.oval:def:12186
Title:	Mozilla Multiple Products nsTextFrameUtils::TransformText Function Bidirectional Text Run Overflow
Description:	Heap-based buffer overflow in the nsTextFrameUtils::TransformText function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to execute arbitrary code via a bidirectional text run.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-3166	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:12192

Oval ID:	oval:org.mitre.oval:def:12192
Title:	Mozilla Multiple Products Document Selection Addition designMode Property XSS
Description:	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allows user-assisted remote attackers to inject arbitrary web script or HTML via a selection that is added to a document in which the designMode property is enabled.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2769	Version:	23
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 AND Mozilla Firefox Mainline version is 3.6.x before 3.6.9 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Thunderbird version is 3.1.x before 3.1.3 or 3.0.x before 3.0.7 Mozilla Thunderbird 3.1.x before 3.1.3 AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:12717

Oval ID:	oval:org.mitre.oval:def:12717
Title:	DSA-2106-2 xulrunner -- several
Description:	DSA-2106-1 introduced a regression that could lead to an application crash. This update fixes this problem. For reference, the text of the original advisory is provided below. Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems: - - Implementation errors in XUL processing allow the execution of arbitrary code - - An implementation error in the XPCSafeJSObjectWrapper wrapper allows the bypass of the same origin policy - - An integer overflow in frame handling allows the execution of arbitrary code - - An implementation error in DOM handling allows the execution of arbitrary code - - Incorrect pointer handling in the plugin code allow the execution of arbitrary code - - Incorrect handling of an object tag may lead to the bypass of cross site scripting filters - - Incorrect copy and paste handling could lead to cross site scripting - - Crashes in the layout engine may lead to the execution of arbitrary code For the stable distribution, the problem has been fixed in version 1.9.0.19-5. The packages for the mips architecture are not included in this update. They will be released as soon as they become available. We recommend that you upgrade your xulrunner packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2106-2 CVE-2010-2760 CVE-2010-2763 CVE-2010-2765 CVE-2010-2766 CVE-2010-2767 CVE-2010-2768 CVE-2010-2769 CVE-2010-3167 CVE-2010-3168 CVE-2010-3169	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independet section Installed architecture is all AND libmozillainterfaces-java DPKG is earlier than 1.9.0.19-5 AND libmozjs-dev DPKG is earlier than 1.9.0.19-5 AND spidermonkey-bin DPKG is earlier than 1.9.0.19-5 AND xulrunner-1.9-gnome-support DPKG is earlier than 1.9.0.19-5 AND xulrunner-1.9 DPKG is earlier than 1.9.0.19-5 AND libmozjs1d-dbg DPKG is earlier than 1.9.0.19-5 AND libmozjs1d DPKG is earlier than 1.9.0.19-5 AND python-xpcom DPKG is earlier than 1.9.0.19-5 AND xulrunner-1.9-dbg DPKG is earlier than 1.9.0.19-5 AND xulrunner-dev DPKG is earlier than 1.9.0.19-5

Definition Id: oval:org.mitre.oval:def:12733

Oval ID:	oval:org.mitre.oval:def:12733
Title:	DSA-2106-1 xulrunner -- several
Description:	Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems: - - Implementation errors in XUL processing allow the execution of arbitrary code - - An implementation error in the XPCSafeJSObjectWrapper wrapper allows the bypass of the same origin policy - - An integer overflow in frame handling allows the execution of arbitrary code - - An implementation error in DOM handling allows the execution of arbitrary code - - Incorrect pointer handling in the plugin code allow the execution of arbitrary code - - Incorrect handling of an object tag may lead to the bypass of cross site scripting filters - - Incorrect copy and paste handling could lead to cross site scripting - - Crashes in the layout engine may lead to the execution of arbitrary code For the stable distribution, these problems have been fixed in version 1.9.0.19-4. For the unstable distribution, these problems have been fixed in version 3.5.12-1 of the iceweasel source package. For the experimental distribution, these problems have been fixed in version 3.6.9-1 of the iceweasel source package. We recommend that you upgrade your xulrunner packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2106-1 CVE-2010-2760 CVE-2010-2763 CVE-2010-2765 CVE-2010-2766 CVE-2010-2767 CVE-2010-2768 CVE-2010-2769 CVE-2010-3167 CVE-2010-3168 CVE-2010-3169	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independet section Installed architecture is all AND libmozillainterfaces-java DPKG is earlier than 1.9.0.19-4 OR Architecture depended section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Packages section libmozjs-dev DPKG is earlier than 1.9.0.19-4 AND spidermonkey-bin DPKG is earlier than 1.9.0.19-4 AND xulrunner-dev DPKG is earlier than 1.9.0.19-4 AND xulrunner-1.9 DPKG is earlier than 1.9.0.19-4 AND libmozjs1d-dbg DPKG is earlier than 1.9.0.19-4 AND libmozjs1d DPKG is earlier than 1.9.0.19-4 AND python-xpcom DPKG is earlier than 1.9.0.19-4 AND xulrunner-1.9-dbg DPKG is earlier than 1.9.0.19-4 AND xulrunner-1.9-gnome-support DPKG is earlier than 1.9.0.19-4

Definition Id: oval:org.mitre.oval:def:12797

Oval ID:	oval:org.mitre.oval:def:12797
Title:	DSA-2124-1 xulrunner -- several
Description:	Several vulnerabilities have been discovered in Xulrunner, the component that provides the core functionality of Iceweasel, Debian's variant of Mozilla's browser technology. The Common Vulnerabilities and Exposures project identifies the following problems: CVE-2010-3765 Xulrunner allows remote attackers to execute arbitrary code via vectors related to nsCSSFrameConstructor::ContentAppended, the appendChild method, incorrect index tracking, and the creation of multiple frames, which triggers memory corruption. CVE-2010-3174 CVE-2010-3176 Multiple unspecified vulnerabilities in the browser engine in Xulrunner allow remote attackers to cause a denial of service or possibly execute arbitrary code via unknown vectors. CVE-2010-3177 Multiple cross-site scripting vulnerabilities in the Gopher parser in Xulrunner allow remote attackers to inject arbitrary web script or HTML via a crafted name of a file or directory on a Gopher server. CVE-2010-3178 Xulrunner does not properly handle certain modal calls made by javascript: URLs in circumstances related to opening a new window and performing cross-domain navigation, which allows remote attackers to bypass the Same Origin Policy via a crafted HTML document. CVE-2010-3179 Stack-based buffer overflow in the text-rendering functionality in Xulrunner allows remote attackers to execute arbitrary code or cause a denial of service via a long argument to the document.write method. CVE-2010-3180 Use-after-free vulnerability in the nsBarProp function in Xulrunner allows remote attackers to execute arbitrary code by accessing the locationbar property of a closed window. CVE-2010-3183 The LookupGetterOrSetter function in Xulrunner does not properly support window.__lookupGetter__ function calls that lack arguments, which allows remote attackers to execute arbitrary code or cause a denial of service via a crafted HTML document. In addition, this security update includes corrections for regressions caused by the fixes for CVE-2010-0654 and CVE-2010-2769 in DSA-2075-1 and DSA-2106-1. For the stable distribution, these problems have been fixed in version 1.9.0.19-6. For the unstable distribution and the upcoming stable distribution, these problems have been fixed in version 3.5.15-1 of the iceweasel package. We recommend that you upgrade your Xulrunner packages.
Family:	unix	Class:	patch
Reference(s):	DSA-2124-1 CVE-2010-3765 CVE-2010-3174 CVE-2010-3176 CVE-2010-3177 CVE-2010-3178 CVE-2010-3179 CVE-2010-3180 CVE-2010-3183 CVE-2010-0654 CVE-2010-2769	Version:	5
Platform(s):	Debian GNU/Linux 5.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 5.0 is installed Architecture section Architecture independet section Installed architecture is all AND libmozillainterfaces-java DPKG is earlier than 1.9.0.19-6 AND libmozjs-dev DPKG is earlier than 1.9.0.19-6 AND spidermonkey-bin DPKG is earlier than 1.9.0.19-6 AND xulrunner-1.9-gnome-support DPKG is earlier than 1.9.0.19-6 AND xulrunner-1.9 DPKG is earlier than 1.9.0.19-6 AND libmozjs1d-dbg DPKG is earlier than 1.9.0.19-6 AND libmozjs1d DPKG is earlier than 1.9.0.19-6 AND python-xpcom DPKG is earlier than 1.9.0.19-6 AND xulrunner-1.9-dbg DPKG is earlier than 1.9.0.19-6 AND xulrunner-dev DPKG is earlier than 1.9.0.19-6

Definition Id: oval:org.mitre.oval:def:13194

Oval ID:	oval:org.mitre.oval:def:13194
Title:	USN-978-1 -- thunderbird vulnerabilities
Description:	Several dangling pointer vulnerabilities were discovered in Thunderbird. An attacker could exploit this to crash Thunderbird or possibly run arbitrary code as the user invoking the program. It was discovered that the XPCSafeJSObjectWrapper security wrapper did not always honor the same-origin policy. If JavaScript was enabled, an attacker could exploit this to run untrusted JavaScript from other domains. Matt Haggard discovered that Thunderbird did not honor same-origin policy when processing the statusText property of an XMLHttpRequest object. If a user were tricked into viewing a malicious site, a remote attacker could use this to gather information about servers on internal private networks. Chris Rohlf discovered an integer overflow when Thunderbird processed the HTML frameset element. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash Thunderbird or possibly run arbitrary code as the user invoking the program. Several issues were discovered in the browser engine. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash Thunderbird or possibly run arbitrary code as the user invoking the program. David Huang and Collin Jackson discovered that the <object> tag could override the charset of a framed HTML document in another origin. An attacker could utilize this to perform cross-site scripting attacks. Paul Stone discovered that with designMode enabled an HTML selection containing JavaScript could be copied and pasted into a document and have the JavaScript execute within the context of the site where the code was dropped. If JavaScript was enabled, an attacker could utilize this to perform cross-site scripting attacks. A buffer overflow was discovered in Thunderbird when processing text runs. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash Thunderbird or possibly run arbitrary code as the user invoking the program. Peter Van der Beken, Jason Oster, Jesse Ruderman, Igor Bukanov, Jeff Walden, Gary Kwong and Olli Pettay discovered several flaws in the browser engine. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash Thunderbird or possibly run arbitrary code as the user invoking the program
Family:	unix	Class:	patch
Reference(s):	USN-978-1 CVE-2010-2760 CVE-2010-2767 CVE-2010-3167 CVE-2010-2763 CVE-2010-2764 CVE-2010-2765 CVE-2010-2766 CVE-2010-3168 CVE-2010-2768 CVE-2010-2769 CVE-2010-3166 CVE-2010-3169	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	thunderbird
Definition Synopsis:
Ubuntu 10.04 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc Packages section thunderbird-gnome-support-dbg DPKG is earlier than 3.0.7+build1+nobinonly-0ubuntu0.10.04.1 AND thunderbird-dbg DPKG is earlier than 3.0.7+build1+nobinonly-0ubuntu0.10.04.1 AND thunderbird DPKG is earlier than 3.0.7+build1+nobinonly-0ubuntu0.10.04.1 AND thunderbird-dev DPKG is earlier than 3.0.7+build1+nobinonly-0ubuntu0.10.04.1 AND thunderbird-gnome-support DPKG is earlier than 3.0.7+build1+nobinonly-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:13297

Oval ID:	oval:org.mitre.oval:def:13297
Title:	USN-975-1 -- firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.1, xulrunner-1.9.2 vulnerabilities
Description:	Several dangling pointer vulnerabilities were discovered in Firefox. An attacker could exploit this to crash the browser or possibly run arbitrary code as the user invoking the program. Blake Kaplan and Michal Zalewski discovered several weaknesses in the XPCSafeJSObjectWrapper security wrapper. If a user were tricked into viewing a malicious site, a remote attacker could use this to run arbitrary JavaScript with chrome privileges. Matt Haggard discovered that Firefox did not honor same-origin policy when processing the statusText property of an XMLHttpRequest object. If a user were tricked into viewing a malicious site, a remote attacker could use this to gather information about servers on internal private networks. Chris Rohlf discovered an integer overflow when Firefox processed the HTML frameset element. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash the browser or possibly run arbitrary code as the user invoking the program. Several issues were discovered in the browser engine. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash the browser or possibly run arbitrary code as the user invoking the program. David Huang and Collin Jackson discovered that the <object> tag could override the charset of a framed HTML document in another origin. An attacker could utilize this to perform cross-site scripting attacks. Paul Stone discovered that with designMode enabled an HTML selection containing JavaScript could be copied and pasted into a document and have the JavaScript execute within the context of the site where the code was dropped. An attacker could utilize this to perform cross-site scripting attacks. A buffer overflow was discovered in Firefox when processing text runs. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash the browser or possibly run arbitrary code as the user invoking the program. Peter Van der Beken, Jason Oster, Jesse Ruderman, Igor Bukanov, Jeff Walden, Gary Kwong and Olli Pettay discovered several flaws in the browser engine. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash the browser or possibly run arbitrary code as the user invoking the program
Family:	unix	Class:	patch
Reference(s):	USN-975-1 CVE-2010-2760 CVE-2010-2767 CVE-2010-3167 CVE-2010-2762 CVE-2010-2764 CVE-2010-2765 CVE-2010-2766 CVE-2010-3168 CVE-2010-2768 CVE-2010-2769 CVE-2010-3166 CVE-2010-3169	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.04 Ubuntu 9.10	Product(s):	firefox firefox-3.0 firefox-3.5 xulrunner-1.9.1 xulrunner-1.9.2
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section firefox-3.0 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND abrowser DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-libthai DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section firefox-gnome-support-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.8.04.1 AND abrowser-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.8.04.1 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section firefox-3.5-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.0 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND abrowser-3.5-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-libthai DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9 DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.5 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND abrowser-3.5 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.5-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.5-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.5-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND abrowser DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.0-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-dom-inspector DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section firefox-gnome-support-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.10.04.1 AND abrowser-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.10.04.1 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section firefox-3.0 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-libthai DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND abrowser-3.0-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND abrowser DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is lpia AND Packages section firefox-gnome-support-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND abrowser-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.04.1 OR Architecture depended section Installed architecture is sparc AND Packages section xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.04.1 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section firefox-3.1-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.0-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9 DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.5-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.1 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.5-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.5-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.0-dom-inspector DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.1-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND abrowser DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND abrowser-3.5-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-dom-inspector DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.5-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.0 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.0-venkman DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.1-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.1-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.5 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND abrowser-3.5 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.0-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND abrowser-3.1 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND abrowser-3.0 DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND abrowser-3.0-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-3.0-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND abrowser-3.1-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is lpia AND Packages section firefox-gnome-support-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-dbg DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-dev DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.1-dbg DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-testsuite-dev DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND abrowser-branding DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-gnome-support DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.1 DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.1-dev DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND firefox-gnome-support DPKG is earlier than 3.6.9+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-testsuite DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 OR Architecture depended section Installed architecture is sparc AND Packages section xulrunner-1.9.1-dbg DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.1-testsuite DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-testsuite-dev DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.1 DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-dev DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.9+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-gnome-support DPKG is earlier than 1.9.1.12+build1+nobinonly-0ubuntu0.9.10.2

Definition Id: oval:org.mitre.oval:def:13381

Oval ID:	oval:org.mitre.oval:def:13381
Title:	USN-978-2 -- thunderbird regression
Description:	USN-978-1 fixed vulnerabilities in Thunderbird. Some users reported stability problems under certain circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Several dangling pointer vulnerabilities were discovered in Thunderbird. An attacker could exploit this to crash Thunderbird or possibly run arbitrary code as the user invoking the program. It was discovered that the XPCSafeJSObjectWrapper security wrapper did not always honor the same-origin policy. If JavaScript was enabled, an attacker could exploit this to run untrusted JavaScript from other domains. Matt Haggard discovered that Thunderbird did not honor same-origin policy when processing the statusText property of an XMLHttpRequest object. If a user were tricked into viewing a malicious site, a remote attacker could use this to gather information about servers on internal private networks. Chris Rohlf discovered an integer overflow when Thunderbird processed the HTML frameset element. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash Thunderbird or possibly run arbitrary code as the user invoking the program. Several issues were discovered in the browser engine. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash Thunderbird or possibly run arbitrary code as the user invoking the program. David Huang and Collin Jackson discovered that the <object> tag could override the charset of a framed HTML document in another origin. An attacker could utilize this to perform cross-site scripting attacks. Paul Stone discovered that with designMode enabled an HTML selection containing JavaScript could be copied and pasted into a document and have the JavaScript execute within the context of the site where the code was dropped. If JavaScript was enabled, an attacker could utilize this to perform cross-site scripting attacks. A buffer overflow was discovered in Thunderbird when processing text runs. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash Thunderbird or possibly run arbitrary code as the user invoking the program. Peter Van der Beken, Jason Oster, Jesse Ruderman, Igor Bukanov, Jeff Walden, Gary Kwong and Olli Pettay discovered several flaws in the browser engine. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash Thunderbird or possibly run arbitrary code as the user invoking the program
Family:	unix	Class:	patch
Reference(s):	USN-978-2 CVE-2010-2760 CVE-2010-2767 CVE-2010-3167 CVE-2010-2763 CVE-2010-2764 CVE-2010-2765 CVE-2010-2766 CVE-2010-3168 CVE-2010-2768 CVE-2010-2769 CVE-2010-3166 CVE-2010-3169	Version:	5
Platform(s):	Ubuntu 10.04	Product(s):	thunderbird
Definition Synopsis:
Ubuntu 10.04 is installed Supported architectures section Installed architecture is sparc AND Installed architecture is i386 AND Installed architecture is amd64 AND Installed architecture is powerpc Packages section thunderbird-gnome-support-dbg DPKG is earlier than 3.0.8+build2+nobinonly-0ubuntu0.10.04.1 AND thunderbird-dbg DPKG is earlier than 3.0.8+build2+nobinonly-0ubuntu0.10.04.1 AND thunderbird DPKG is earlier than 3.0.8+build2+nobinonly-0ubuntu0.10.04.1 AND thunderbird-dev DPKG is earlier than 3.0.8+build2+nobinonly-0ubuntu0.10.04.1 AND thunderbird-gnome-support DPKG is earlier than 3.0.8+build2+nobinonly-0ubuntu0.10.04.1

Definition Id: oval:org.mitre.oval:def:13478

Oval ID:	oval:org.mitre.oval:def:13478
Title:	USN-975-2 -- firefox, firefox-3.0, firefox-3.5, xulrunner-1.9.1, xulrunner-1.9.2 regression
Description:	USN-975-1 fixed vulnerabilities in Firefox and Xulrunner. Some users reported stability problems under certain circumstances. This update fixes the problem. We apologize for the inconvenience. Original advisory details: Several dangling pointer vulnerabilities were discovered in Firefox. An attacker could exploit this to crash the browser or possibly run arbitrary code as the user invoking the program. Blake Kaplan and Michal Zalewski discovered several weaknesses in the XPCSafeJSObjectWrapper security wrapper. If a user were tricked into viewing a malicious site, a remote attacker could use this to run arbitrary JavaScript with chrome privileges. Matt Haggard discovered that Firefox did not honor same-origin policy when processing the statusText property of an XMLHttpRequest object. If a user were tricked into viewing a malicious site, a remote attacker could use this to gather information about servers on internal private networks. Chris Rohlf discovered an integer overflow when Firefox processed the HTML frameset element. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash the browser or possibly run arbitrary code as the user invoking the program. Several issues were discovered in the browser engine. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash the browser or possibly run arbitrary code as the user invoking the program. David Huang and Collin Jackson discovered that the <object> tag could override the charset of a framed HTML document in another origin. An attacker could utilize this to perform cross-site scripting attacks. Paul Stone discovered that with designMode enabled an HTML selection containing JavaScript could be copied and pasted into a document and have the JavaScript execute within the context of the site where the code was dropped. An attacker could utilize this to perform cross-site scripting attacks. A buffer overflow was discovered in Firefox when processing text runs. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash the browser or possibly run arbitrary code as the user invoking the program. Peter Van der Beken, Jason Oster, Jesse Ruderman, Igor Bukanov, Jeff Walden, Gary Kwong and Olli Pettay discovered several flaws in the browser engine. If a user were tricked into viewing a malicious site, a remote attacker could use this to crash the browser or possibly run arbitrary code as the user invoking the program
Family:	unix	Class:	patch
Reference(s):	USN-975-2 CVE-2010-2760 CVE-2010-2767 CVE-2010-3167 CVE-2010-2762 CVE-2010-2764 CVE-2010-2765 CVE-2010-2766 CVE-2010-3168 CVE-2010-2768 CVE-2010-2769 CVE-2010-3166 CVE-2010-3169	Version:	5
Platform(s):	Ubuntu 8.04 Ubuntu 10.04 Ubuntu 9.04 Ubuntu 9.10	Product(s):	firefox firefox-3.0 firefox-3.5 xulrunner-1.9.1 xulrunner-1.9.2
Definition Synopsis:
Release section Ubuntu 8.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section firefox-3.0 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND abrowser DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-libthai DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section firefox-gnome-support-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.8.04.1 AND abrowser-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.8.04.1 AND firefox-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.8.04.1 OR Release section Ubuntu 10.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section firefox-3.5-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.0 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND abrowser-3.5-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-libthai DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9 DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.5 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND abrowser-3.5 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.5-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.5-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.5-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND abrowser DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-3.0-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-2-dom-inspector DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 OR Architecture depended section Supported architectures section Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is i386 AND Packages section firefox-gnome-support-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.10.04.1 AND abrowser-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.10.04.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.10.04.1 AND firefox-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 OR Architecture depended section Supported architectures section Installed architecture is i386 AND Installed architecture is amd64 AND firefox-mozsymbols DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.10.04.1 OR Release section Ubuntu 9.04 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section firefox-3.0 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-2-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-2-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-2-libthai DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-2 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-granparadiso-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND abrowser-3.0-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-2-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND abrowser DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-3.0-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-trunk-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-2-dom-inspector DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-libthai DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is lpia AND Packages section firefox-gnome-support-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND abrowser-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND firefox-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.04.1 OR Architecture depended section Installed architecture is sparc AND Packages section xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.04.1 OR Release section Ubuntu 9.10 is installed AND Architecture section Architecture independet section Installed architecture is all AND Packages section firefox-3.1-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.0-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-2-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.0-dom-inspector DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-2-libthai DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9 DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.5-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.1 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.5-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.5-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-2 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND abrowser DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND abrowser-3.5-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-2-dom-inspector DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-dom-inspector DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.5-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.0 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.0-venkman DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.1-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.1-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.5 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-2-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND abrowser-3.5 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.1-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND abrowser-3.1 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND abrowser-3.0 DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND abrowser-3.0-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-2-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-3.0-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND abrowser-3.1-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is lpia AND Packages section firefox-gnome-support-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-dbg DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-dev DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-dbg DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-testsuite-dev DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND abrowser-branding DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-gnome-support DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1 DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-dev DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND firefox-gnome-support DPKG is earlier than 3.6.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-testsuite DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 OR Architecture depended section Installed architecture is sparc AND Packages section xulrunner-1.9.1-dbg DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-testsuite DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-testsuite-dev DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-testsuite-dev DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1 DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-testsuite DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2 DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-gnome-support DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-dev DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.2-dbg DPKG is earlier than 1.9.2.10+build1+nobinonly-0ubuntu0.9.10.1 AND xulrunner-1.9.1-gnome-support DPKG is earlier than 1.9.1.13+build1+nobinonly-0ubuntu0.9.10.1

Definition Id: oval:org.mitre.oval:def:21457

Oval ID:	oval:org.mitre.oval:def:21457
Title:	RHSA-2010:0682: thunderbird security update (Moderate)
Description:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0682-01 CESA-2010:0682 CVE-2010-2760 CVE-2010-2765 CVE-2010-2767 CVE-2010-2768 CVE-2010-3167 CVE-2010-3168 CVE-2010-3169	Version:	94
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	thunderbird
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x AND thunderbird is earlier than 0:2.0.0.24-8.el5

Definition Id: oval:org.mitre.oval:def:22355

Oval ID:	oval:org.mitre.oval:def:22355
Title:	RHSA-2010:0681: firefox security update (Critical)
Description:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	RHSA-2010:0681-01 CESA-2010:0681 CVE-2010-2760 CVE-2010-2762 CVE-2010-2764 CVE-2010-2765 CVE-2010-2766 CVE-2010-2767 CVE-2010-2768 CVE-2010-2769 CVE-2010-3166 CVE-2010-3167 CVE-2010-3168 CVE-2010-3169	Version:	159
Platform(s):	Red Hat Enterprise Linux 5 CentOS Linux 5	Product(s):	firefox nspr nss xulrunner
Definition Synopsis:
Redhat 5 or Centos 5 release The operating system installed on the system is Red Hat Enterprise Linux 5 AND The operating system installed on the system is CentOS Linux 5.x Packages section xulrunner is earlier than 0:1.9.2.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.2.9-1.el5 AND firefox is earlier than 0:3.6.9-2.el5 AND nspr-devel is earlier than 0:4.8.6-1.el5 AND nspr is earlier than 0:4.8.6-1.el5 AND nss is earlier than 0:3.12.7-2.el5 AND nss-tools is earlier than 0:3.12.7-2.el5 AND nss-pkcs11-devel is earlier than 0:3.12.7-2.el5 AND nss-devel is earlier than 0:3.12.7-2.el5

Definition Id: oval:org.mitre.oval:def:22852

Oval ID:	oval:org.mitre.oval:def:22852
Title:	ELSA-2010:0681: firefox security update (Critical)
Description:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0681-01 CVE-2010-2760 CVE-2010-2762 CVE-2010-2764 CVE-2010-2765 CVE-2010-2766 CVE-2010-2767 CVE-2010-2768 CVE-2010-2769 CVE-2010-3166 CVE-2010-3167 CVE-2010-3168 CVE-2010-3169	Version:	53
Platform(s):	Oracle Linux 5	Product(s):	firefox nspr nss xulrunner
Definition Synopsis:
Oracle Linux 5.x rpm test xulrunner is earlier than 0:1.9.2.9-1.el5 AND xulrunner-devel is earlier than 0:1.9.2.9-1.el5 AND firefox is earlier than 0:3.6.9-2.el5 AND nspr-devel is earlier than 0:4.8.6-1.el5 AND nspr is earlier than 0:4.8.6-1.el5 AND nss is earlier than 0:3.12.7-2.el5 AND nss-tools is earlier than 0:3.12.7-2.el5 AND nss-pkcs11-devel is earlier than 0:3.12.7-2.el5 AND nss-devel is earlier than 0:3.12.7-2.el5

Definition Id: oval:org.mitre.oval:def:23121

Oval ID:	oval:org.mitre.oval:def:23121
Title:	ELSA-2010:0682: thunderbird security update (Moderate)
Description:	Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
Family:	unix	Class:	patch
Reference(s):	ELSA-2010:0682-01 CVE-2010-2760 CVE-2010-2765 CVE-2010-2767 CVE-2010-2768 CVE-2010-3167 CVE-2010-3168 CVE-2010-3169	Version:	33
Platform(s):	Oracle Linux 5	Product(s):	thunderbird
Definition Synopsis:
Oracle Linux 5.x AND thunderbird is earlier than 0:2.0.0.24-8.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mozilla Firefox cpe:2.3:a:mozilla:firefox:3.6.8:::::::* cpe:2.3:a:mozilla:firefox:3.6.7:::::::* cpe:2.3:a:mozilla:firefox:3.6.6:::::::* cpe:2.3:a:mozilla:firefox:3.6.4:::::::* cpe:2.3:a:mozilla:firefox:3.6.3:::::::* cpe:2.3:a:mozilla:firefox:3.6.2:::::::* cpe:2.3:a:mozilla:firefox:3.6:::::::* cpe:2.3:a:mozilla:firefox:3.5.9:::::::* cpe:2.3:a:mozilla:firefox:3.5.8:::::::* cpe:2.3:a:mozilla:firefox:3.5.7:::::::* cpe:2.3:a:mozilla:firefox:3.5.6:::::::* cpe:2.3:a:mozilla:firefox:3.5.5:::::::* cpe:2.3:a:mozilla:firefox:3.5.4:::::::* cpe:2.3:a:mozilla:firefox:3.5.3:::::::* cpe:2.3:a:mozilla:firefox:3.5.2:::::::* cpe:2.3:a:mozilla:firefox:3.5.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.5.2::linux::::: cpe:2.3:a:mozilla:firefox:3.5.2::~~~linux~~::::: cpe:2.3:a:mozilla:firefox:3.5.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.5.11:::::::* cpe:2.3:a:mozilla:firefox:3.5.10:::::::* cpe:2.3:a:mozilla:firefox:3.5.1:::::::* cpe:2.3:a:mozilla:firefox:3.5.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.5.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.5:::::::* cpe:2.3:a:mozilla:firefox:3.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.2:beta2:::::: cpe:2.3:a:mozilla:firefox:3.2:beta3:::::: cpe:2.3:a:mozilla:firefox:3.2:beta1:::::: cpe:2.3:a:mozilla:firefox:3.1:beta1:::::: cpe:2.3:a:mozilla:firefox:3.0beta5:::::::* cpe:2.3:a:mozilla:firefox:3.0.9:::::::* cpe:2.3:a:mozilla:firefox:3.0.9:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.9:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.8:::::::* cpe:2.3:a:mozilla:firefox:3.0.8:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.8:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.7:::::::* cpe:2.3:a:mozilla:firefox:3.0.7:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.7:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.6:::::::* cpe:2.3:a:mozilla:firefox:3.0.6:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.6:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.5:::::::* cpe:2.3:a:mozilla:firefox:3.0.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.4:::::::* cpe:2.3:a:mozilla:firefox:3.0.4:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.4:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.3:::::::* cpe:2.3:a:mozilla:firefox:3.0.3:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.3:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.2:::::::* cpe:2.3:a:mozilla:firefox:3.0.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.19:::::::* cpe:2.3:a:mozilla:firefox:3.0.18:::::::* cpe:2.3:a:mozilla:firefox:3.0.17:::::::* cpe:2.3:a:mozilla:firefox:3.0.16:::::::* cpe:2.3:a:mozilla:firefox:3.0.15:::::::* cpe:2.3:a:mozilla:firefox:3.0.14:::::::* cpe:2.3:a:mozilla:firefox:3.0.13:::::::* cpe:2.3:a:mozilla:firefox:3.0.13:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.13:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.12:::::::* cpe:2.3:a:mozilla:firefox:3.0.12:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.12:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.11:::::::* cpe:2.3:a:mozilla:firefox:3.0.11:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.11:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.10:::::::* cpe:2.3:a:mozilla:firefox:3.0.10:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.10:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0.1:::::::* cpe:2.3:a:mozilla:firefox:3.0.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:3.0:-:::::: cpe:2.3:a:mozilla:firefox:3.0:alpha:::::: cpe:2.3:a:mozilla:firefox:3.0:beta5:::::: cpe:2.3:a:mozilla:firefox:3.0:beta2:::::: cpe:2.3:a:mozilla:firefox:3.0:-:linux:::::* cpe:2.3:a:mozilla:firefox:3.0:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.21:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.20:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.20:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.20:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.19:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.19:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.19:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.18:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.18:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.18:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.17:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.17:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.17:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.16:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.16:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.16:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.15:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.15:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.15:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.14:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.14:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.14:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0_8:::::::* cpe:2.3:a:mozilla:firefox:2.0_.9:::::::* cpe:2.3:a:mozilla:firefox:2.0_.7:::::::* cpe:2.3:a:mozilla:firefox:2.0_.6:::::::* cpe:2.3:a:mozilla:firefox:2.0_.5:::::::* cpe:2.3:a:mozilla:firefox:2.0_.4:::::::* cpe:2.3:a:mozilla:firefox:2.0_.10:::::::* cpe:2.3:a:mozilla:firefox:2.0_.1:::::::* cpe:2.3:a:mozilla:firefox:2.0:::::::* cpe:2.3:a:mozilla:firefox:2.0:beta1:::::: cpe:2.3:a:mozilla:firefox:2.0:beta_1:::::: cpe:2.3:a:mozilla:firefox:2.0:rc3:::::: cpe:2.3:a:mozilla:firefox:2.0:rc2:::::: cpe:2.3:a:mozilla:firefox:2.0:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:1.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.1:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.9:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.12:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.11:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.10:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.5:-:::::: cpe:2.3:a:mozilla:firefox:1.5:beta2:::::: cpe:2.3:a:mozilla:firefox:1.5:beta1:::::: cpe:2.3:a:mozilla:firefox:1.4.1:::::::* cpe:2.3:a:mozilla:firefox:1.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.0.6::linux::::: cpe:2.3:a:mozilla:firefox:1.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.0:preview_release:::::: cpe:2.3:a:mozilla:firefox:1.0:-:::::: cpe:2.3:a:mozilla:firefox:0.9.3:::::::* cpe:2.3:a:mozilla:firefox:0.9.2:::::::* cpe:2.3:a:mozilla:firefox:0.9.1:::::::* cpe:2.3:a:mozilla:firefox:0.9_rc:::::::* cpe:2.3:a:mozilla:firefox:0.9:rc:::::: cpe:2.3:a:mozilla:firefox:0.9:::::::* cpe:2.3:a:mozilla:firefox:0.8:::::::* cpe:2.3:a:mozilla:firefox:0.7.1:::::::* cpe:2.3:a:mozilla:firefox:0.7:::::::* cpe:2.3:a:mozilla:firefox:0.6.1:::::::* cpe:2.3:a:mozilla:firefox:0.6:::::::* cpe:2.3:a:mozilla:firefox:0.5:::::::* cpe:2.3:a:mozilla:firefox:0.4:::::::* cpe:2.3:a:mozilla:firefox:0.3:::::::* cpe:2.3:a:mozilla:firefox:0.2:::::::* cpe:2.3:a:mozilla:firefox:0.10.1:::::::* cpe:2.3:a:mozilla:firefox:0.10:::::::* cpe:2.3:a:mozilla:firefox:0.1:::::::* cpe:2.3:a:mozilla:firefox:::::::: cpe:2.3:a:mozilla:firefox:::::::x86:* cpe:2.3:a:mozilla:firefox::::::x86::* cpe:2.3:a:mozilla:firefox::::::iphone_os::* cpe:2.3:a:mozilla:firefox::::::-::* cpe:2.3:a:mozilla:firefox::::::android::* cpe:2.3:a:mozilla:firefox:::::android:::* cpe:2.3:a:mozilla:firefox:-:::::::* cpe:2.3:a:mozilla:firefox:-:::::iphone_os::	222
Application	Mozilla Seamonkey cpe:2.3:a:mozilla:seamonkey:2.0a1pre:::::::* cpe:2.3:a:mozilla:seamonkey:2.0a1::pre::::: cpe:2.3:a:mozilla:seamonkey:2.0.6:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.5:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.4:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.3:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.2:::::::* cpe:2.3:a:mozilla:seamonkey:2.0.1:::::::* cpe:2.3:a:mozilla:seamonkey:2.0:alpha_1:::::: cpe:2.3:a:mozilla:seamonkey:2.0:beta_1:::::: cpe:2.3:a:mozilla:seamonkey:2.0:alpha_2:::::: cpe:2.3:a:mozilla:seamonkey:2.0:beta_2:::::: cpe:2.3:a:mozilla:seamonkey:2.0:alpha_3:::::: cpe:2.3:a:mozilla:seamonkey:2.0:rc2:::::: cpe:2.3:a:mozilla:seamonkey:2.0:rc1:::::: cpe:2.3:a:mozilla:seamonkey:2.0:::::::* cpe:2.3:a:mozilla:seamonkey:2.:beta3:::::: cpe:2.3:a:mozilla:seamonkey:1.5.0.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.5.0.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.5.0.10:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:::::: cpe:2.3:a:mozilla:seamonkey:1.1.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.19:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.18:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.17:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.16:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.15:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.14:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.13:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.12:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.11:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.10:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.1:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.1:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.99:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.0:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.0:::::::* cpe:2.3:a:mozilla:seamonkey:1.0::dev::::: cpe:2.3:a:mozilla:seamonkey:1.0::alpha::::: cpe:2.3:a:mozilla:seamonkey:1.0::beta::::: cpe:2.3:a:mozilla:seamonkey:::::::: cpe:2.3:a:mozilla:seamonkey:-:::::::*	61
Application	Mozilla Thunderbird cpe:2.3:a:mozilla:thunderbird:3.1.2:::::::* cpe:2.3:a:mozilla:thunderbird:3.1.1:::::::* cpe:2.3:a:mozilla:thunderbird:3.1:-:::::: cpe:2.3:a:mozilla:thunderbird:3.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:3.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:3.0:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:3.0:alpha2:::::: cpe:2.3:a:mozilla:thunderbird:3.0:alpha3:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta3:::::: cpe:2.3:a:mozilla:thunderbird:3.0:beta4:::::: cpe:2.3:a:mozilla:thunderbird:3.0:rc1:::::: cpe:2.3:a:mozilla:thunderbird:3.0:rc2:::::: cpe:2.3:a:mozilla:thunderbird:3.0:-:::::: cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.24:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.23:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.22:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.21:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.20:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.19:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.18:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.17:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.16:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.15:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.14:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:rc1:::::: cpe:2.3:a:mozilla:thunderbird:2.0_8:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.9:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.6:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.5:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.4:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.14:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.13:::::::* cpe:2.3:a:mozilla:thunderbird:2.0_.12:::::::* cpe:2.3:a:mozilla:thunderbird:2.0:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:2.0:-:::::: cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5:beta2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:beta1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:-:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha2:::::: cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:::::: cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.0:rc:::::: cpe:2.3:a:mozilla:thunderbird:1.0:-:::::: cpe:2.3:a:mozilla:thunderbird:0.9:::::::* cpe:2.3:a:mozilla:thunderbird:0.8:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:0.7:rc:::::: cpe:2.3:a:mozilla:thunderbird:0.7:-:::::: cpe:2.3:a:mozilla:thunderbird:0.6:::::::* cpe:2.3:a:mozilla:thunderbird:0.5:::::::* cpe:2.3:a:mozilla:thunderbird:0.4:::::::* cpe:2.3:a:mozilla:thunderbird:0.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.1:::::::* cpe:2.3:a:mozilla:thunderbird:::::::: cpe:2.3:a:mozilla:thunderbird:::::::x86:* cpe:2.3:a:mozilla:thunderbird:-:::::::*	108

OpenVAS Exploits

Date	Description
2011-08-09	Name : CentOS Update for firefox CESA-2010:0681 centos5 i386 File : nvt/gb_CESA-2010_0681_firefox_centos5_i386.nasl
2011-08-09	Name : CentOS Update for thunderbird CESA-2010:0682 centos5 i386 File : nvt/gb_CESA-2010_0682_thunderbird_centos5_i386.nasl
2010-11-17	Name : Debian Security Advisory DSA 2124-1 (xulrunner) File : nvt/deb_2124_1.nasl
2010-11-16	Name : SuSE Update for MozillaFirefox,seamonkey,MozillaThunderbird SUSE-SA:2010:056 File : nvt/gb_suse_2010_056.nasl
2010-10-19	Name : SuSE Update for MozillaFirefox,MozillaThunderbird,seamonkey SUSE-SA:2010:049 File : nvt/gb_suse_2010_049.nasl
2010-10-10	Name : FreeBSD Ports: firefox File : nvt/freebsd_firefox50.nasl
2010-10-10	Name : Debian Security Advisory DSA 2106-1 (xulrunner) File : nvt/deb_2106_1.nasl
2010-09-22	Name : Ubuntu Update for thunderbird regression USN-978-2 File : nvt/gb_ubuntu_USN_978_2.nasl
2010-09-22	Name : Ubuntu Update for Firefox and Xulrunner regression USN-975-2 File : nvt/gb_ubuntu_USN_975_2.nasl
2010-09-14	Name : Mandriva Update for firefox MDVSA-2010:173 (firefox) File : nvt/gb_mandriva_MDVSA_2010_173.nasl
2010-09-10	Name : Fedora Update for xulrunner FEDORA-2010-14362 File : nvt/gb_fedora_2010_14362_xulrunner_fc12.nasl
2010-09-10	Name : CentOS Update for seamonkey CESA-2010:0680 centos3 i386 File : nvt/gb_CESA-2010_0680_seamonkey_centos3_i386.nasl
2010-09-10	Name : Ubuntu Update for thunderbird vulnerabilities USN-978-1 File : nvt/gb_ubuntu_USN_978_1.nasl
2010-09-10	Name : CentOS Update for seamonkey CESA-2010:0680 centos4 i386 File : nvt/gb_CESA-2010_0680_seamonkey_centos4_i386.nasl
2010-09-10	Name : Ubuntu Update for Firefox and Xulrunner vulnerabilities USN-975-1 File : nvt/gb_ubuntu_USN_975_1.nasl
2010-09-10	Name : CentOS Update for firefox CESA-2010:0681 centos4 i386 File : nvt/gb_CESA-2010_0681_firefox_centos4_i386.nasl
2010-09-10	Name : CentOS Update for thunderbird CESA-2010:0682 centos4 i386 File : nvt/gb_CESA-2010_0682_thunderbird_centos4_i386.nasl
2010-09-10	Name : Mozilla Products 'SJOW' Arbitrary Code Execution Vulnerability (Windows) File : nvt/gb_mozilla_prdts_sjow_arbitrary_code_exec_vuln_win.nasl
2010-09-10	Name : Mozilla Products Multiple Vulnerabilities sep-10 (Windows) File : nvt/gb_mozilla_prdts_mult_vuln_win_sep10.nasl
2010-09-10	Name : RedHat Update for seamonkey RHSA-2010:0680-01 File : nvt/gb_RHSA-2010_0680-01_seamonkey.nasl
2010-09-10	Name : Fedora Update for perl-Gtk2-MozEmbed FEDORA-2010-14362 File : nvt/gb_fedora_2010_14362_perl-Gtk2-MozEmbed_fc12.nasl
2010-09-10	Name : Fedora Update for mozvoikko FEDORA-2010-14362 File : nvt/gb_fedora_2010_14362_mozvoikko_fc12.nasl
2010-09-10	Name : Fedora Update for gnome-web-photo FEDORA-2010-14362 File : nvt/gb_fedora_2010_14362_gnome-web-photo_fc12.nasl
2010-09-10	Name : Fedora Update for gnome-python2-extras FEDORA-2010-14362 File : nvt/gb_fedora_2010_14362_gnome-python2-extras_fc12.nasl
2010-09-10	Name : Fedora Update for galeon FEDORA-2010-14362 File : nvt/gb_fedora_2010_14362_galeon_fc12.nasl
2010-09-10	Name : Fedora Update for firefox FEDORA-2010-14362 File : nvt/gb_fedora_2010_14362_firefox_fc12.nasl
2010-09-10	Name : RedHat Update for thunderbird RHSA-2010:0682-01 File : nvt/gb_RHSA-2010_0682-01_thunderbird.nasl
2010-09-10	Name : RedHat Update for firefox RHSA-2010:0681-01 File : nvt/gb_RHSA-2010_0681-01_firefox.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
67913	Mozilla Multiple Products Browser Engine Unspecified Memory Corruption
67912	Mozilla Multiple Products XUL Tree Removal Property Change Role Restriction W...
67911	Mozilla Multiple Products nsTreeContentView Function XUL Tree Node Removal De...
67910	Mozilla Multiple Products nsTextFrameUtils::TransformText Function Bidirectio...
67907	Mozilla Multiple Products Document Selection Addition designMode Property XSS
67906	Mozilla Multiple Products Document Charset OBJECT Element UTF-7 XSS Protectio...
67905	Mozilla Multiple Products navigator.plugins DOM Plugin Array Destruction Navi...
67904	Mozilla Multiple Products normalizeDocument Function DOM Node Removal Deleted...
67903	Mozilla Multiple Products FRAMESET Element cols Attribute Handling Overflow
67902	Mozilla Multiple Products XMLHttpRequest Object statusText Property Cross-ori...
67900	Mozilla Multiple Products SafeJSObjectWrapper XPCSafeJSObjectWrapper Class Ch...
66601	Mozilla Multiple Products nsTreeSelection Selection Range Calculation Overflow

Nessus® Vulnerability Scanner

Date	Description
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_seamonkey-101021.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_seamonkey-100917.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_mozilla-xulrunner191-101028.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_mozilla-xulrunner191-100917.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_MozillaThunderbird-101021.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_MozillaThunderbird-100916.nasl - Type : ACT_GATHER_INFO
2014-06-13	Name : The remote openSUSE host is missing a security update. File : suse_11_3_MozillaFirefox-100916.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0546.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0547.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0680.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2010-0681.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2010-0682.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0545.nasl - Type : ACT_GATHER_INFO
2013-01-08	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-201301-01.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100907_firefox_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20100907_seamonkey_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20100907_thunderbird_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2011-04-23	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0681.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_mozilla-xulrunner191-101028.nasl - Type : ACT_GATHER_INFO
2010-12-02	Name : The remote SuSE 11 host is missing one or more security updates. File : suse_11_MozillaFirefox-100921.nasl - Type : ACT_GATHER_INFO
2010-11-05	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-7208.nasl - Type : ACT_GATHER_INFO
2010-11-03	Name : The remote openSUSE host is missing a security update. File : suse_11_2_mozilla-xulrunner191-101028.nasl - Type : ACT_GATHER_INFO
2010-11-03	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2124.nasl - Type : ACT_GATHER_INFO
2010-11-03	Name : The remote openSUSE host is missing a security update. File : suse_11_1_mozilla-xulrunner191-101028.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote openSUSE host is missing a security update. File : suse_11_2_seamonkey-101021.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaThunderbird-101022.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote openSUSE host is missing a security update. File : suse_11_1_seamonkey-101021.nasl - Type : ACT_GATHER_INFO
2010-10-28	Name : The remote openSUSE host is missing a security update. File : suse_11_1_MozillaThunderbird-101021.nasl - Type : ACT_GATHER_INFO
2010-10-12	Name : The remote openSUSE host is missing a security update. File : suse_11_1_MozillaThunderbird-100916.nasl - Type : ACT_GATHER_INFO
2010-10-12	Name : The remote openSUSE host is missing a security update. File : suse_11_2_mozilla-xulrunner191-100917.nasl - Type : ACT_GATHER_INFO
2010-10-12	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaThunderbird-100917.nasl - Type : ACT_GATHER_INFO
2010-10-12	Name : The remote openSUSE host is missing a security update. File : suse_11_1_mozilla-xulrunner191-100917.nasl - Type : ACT_GATHER_INFO
2010-09-20	Name : The remote openSUSE host is missing a security update. File : suse_11_1_MozillaFirefox-100916.nasl - Type : ACT_GATHER_INFO
2010-09-20	Name : The remote openSUSE host is missing a security update. File : suse_11_1_seamonkey-100917.nasl - Type : ACT_GATHER_INFO
2010-09-20	Name : The remote openSUSE host is missing a security update. File : suse_11_2_MozillaFirefox-100916.nasl - Type : ACT_GATHER_INFO
2010-09-20	Name : The remote openSUSE host is missing a security update. File : suse_11_2_seamonkey-100917.nasl - Type : ACT_GATHER_INFO
2010-09-17	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-975-2.nasl - Type : ACT_GATHER_INFO
2010-09-17	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-978-2.nasl - Type : ACT_GATHER_INFO
2010-09-12	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2010-173.nasl - Type : ACT_GATHER_INFO
2010-09-12	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0682.nasl - Type : ACT_GATHER_INFO
2010-09-12	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0681.nasl - Type : ACT_GATHER_INFO
2010-09-12	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0680.nasl - Type : ACT_GATHER_INFO
2010-09-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-975-1.nasl - Type : ACT_GATHER_INFO
2010-09-09	Name : The remote Fedora host is missing one or more security updates. File : fedora_2010-14362.nasl - Type : ACT_GATHER_INFO
2010-09-09	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_4a21ce2cbb1311df8e32000f20797ede.nasl - Type : ACT_GATHER_INFO
2010-09-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-978-1.nasl - Type : ACT_GATHER_INFO
2010-09-09	Name : The remote Debian host is missing a security-related update. File : debian_DSA-2106.nasl - Type : ACT_GATHER_INFO
2010-09-08	Name : The remote Windows host contains a mail client that is affected by multiple v... File : mozilla_thunderbird_307.nasl - Type : ACT_GATHER_INFO
2010-09-08	Name : The remote Windows host contains a web browser that is affected by multiple v... File : seamonkey_207.nasl - Type : ACT_GATHER_INFO
2010-09-08	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2010-0682.nasl - Type : ACT_GATHER_INFO
2010-09-08	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0680.nasl - Type : ACT_GATHER_INFO
2010-09-08	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_3512.nasl - Type : ACT_GATHER_INFO
2010-09-08	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_369.nasl - Type : ACT_GATHER_INFO
2010-09-08	Name : The remote Windows host contains a mail client that is affected by multiple v... File : mozilla_thunderbird_313.nasl - Type : ACT_GATHER_INFO
2010-08-17	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0546.nasl - Type : ACT_GATHER_INFO
2010-07-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0547.nasl - Type : ACT_GATHER_INFO
2010-07-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2010-0546.nasl - Type : ACT_GATHER_INFO
2010-07-27	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-958-1.nasl - Type : ACT_GATHER_INFO
2010-07-23	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2010-0545.nasl - Type : ACT_GATHER_INFO
2010-07-23	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2010-0547.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2014-02-17 12:07:00	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	12
Oval ID(s)	23
CPE ID(s)	391
osvdb(s)	12
Openvas Exploit(s)	28
Nessus® Exploit(s)	60

	Related
9.3	USN-975-1
9.3	CVE-2010-3169
9.3	CVE-2010-3168
9.3	CVE-2010-3167
9.3	CVE-2010-3166
9.3	CVE-2010-2767
9.3	CVE-2010-2766
9.3	CVE-2010-2765
9.3	CVE-2010-2760
6.8	CVE-2010-2762
4.3	CVE-2010-2769
4.3	CVE-2010-2768
4.3	CVE-2010-2764
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 13 more Alert(s)