9.3 - SUN-238492

Executive Summary

This Alert is flagged as TOP 25 Common Weakness Enumeration from CWE/SANS. For more information, you can read this.

Summary
Title	Sun Alert 238492 Multiple Security Vulnerabilities in Solaris 10 Firefox may Allow Execution of Arbitrary Code and Access to Unauthorized Data

Informations
Name	SUN-238492	First vendor Publication	2008-06-09
Vendor	Sun	Last vendor Modification	2008-06-09
Severity (Vendor)	N/A	Revision	N/A

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Product: Firefox v2.0, Solaris 10 Operating System

Multiple security vulnerabilities in the firefox(1) application shipped with
Solaris 10 may allow local or remote unprivileged user to execute arbitrary
code on a remote machine with the privileges of a local user or trick local
users into confirming an unsafe action, such as remote file execution or
gain access to unauthorised data and cause firefox(1) application to crash,
or conduct Cross-Site Scripting (XSS) attacks on sites which allow users to
upload pictures, archives, or other files. The ability to crash the firefox(1)
application is a type of Denial of Service (Dos).

The following Mozilla advisories describe the vulnerabities:

State: Resolved

First released: 09-Jun-2008

Sun Alert Link:http://sunsolve.sun.com/search/document.do?assetkey=1-66-238492-1

Original Source

Url : http://blogs.sun.com/security/entry/sun_alert_238492_multiple_security

CWE : Common Weakness Enumeration

%	Id	Name
33 %	CWE-399	Resource Management Errors
17 %	CWE-79	Failure to Preserve Web Page Structure ('Cross-site Scripting') (CWE/SANS Top 25)
11 %	CWE-200	Information Exposure
11 %	CWE-94	Failure to Control Generation of Code ('Code Injection')
6 %	CWE-287	Improper Authentication
6 %	CWE-254	Security Features
6 %	CWE-59	Improper Link Resolution Before File Access ('Link Following')
6 %	CWE-22	Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (CWE/SANS Top 25)
6 %	CWE-20	Improper Input Validation

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10075

Oval ID:	oval:org.mitre.oval:def:10075
Title:	Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.
Description:	Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0593	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.9.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.9.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.9.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.9.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-9.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-9.el4 AND thunderbird is earlier than 0:1.5.0.12-8.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-9.el4 AND seamonkey is earlier than 0:1.0.9-9.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4 AND firefox is earlier than 0:1.5.0.12-0.10.el4 AND seamonkey-mail is earlier than 0:1.0.9-9.el4 AND seamonkey-chat is earlier than 0:1.0.9-9.el4 AND seamonkey-nss is earlier than 0:1.0.9-9.el4 AND seamonkey-devel is earlier than 0:1.0.9-9.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5 AND thunderbird is earlier than 0:1.5.0.12-8.el5

Definition Id: oval:org.mitre.oval:def:10119

Oval ID:	oval:org.mitre.oval:def:10119
Title:	modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.
Description:	modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 does not properly perform certain calculations related to the mColors table, which allows remote attackers to read portions of memory uninitialized via a crafted 8-bit bitmap (BMP) file that triggers an out-of-bounds read within the heap, as demonstrated using a CANVAS element; or cause a denial of service (application crash) via a crafted 8-bit bitmap file that triggers an out-of-bounds read. NOTE: the initial public reports stated that this affected Firefox in Ubuntu 6.06 through 7.10.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0420	Version:	5
Platform(s):	Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND thunderbird is earlier than 0:1.5.0.12-8.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND thunderbird is earlier than 0:1.5.0.12-8.el5

Definition Id: oval:org.mitre.oval:def:10385

Oval ID:	oval:org.mitre.oval:def:10385
Title:	The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors.
Description:	The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0413	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.9.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.9.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.9.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.9.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-9.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-9.el4 AND thunderbird is earlier than 0:1.5.0.12-8.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-9.el4 AND seamonkey is earlier than 0:1.0.9-9.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4 AND firefox is earlier than 0:1.5.0.12-0.10.el4 AND seamonkey-mail is earlier than 0:1.0.9-9.el4 AND seamonkey-chat is earlier than 0:1.0.9-9.el4 AND seamonkey-nss is earlier than 0:1.0.9-9.el4 AND seamonkey-devel is earlier than 0:1.0.9-9.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5 AND thunderbird is earlier than 0:1.5.0.12-8.el5

Definition Id: oval:org.mitre.oval:def:10573

Oval ID:	oval:org.mitre.oval:def:10573
Title:	The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.
Description:	The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via vectors related to the (1) nsTableFrame::GetFrameAtOrBefore, (2) nsAccessibilityService::GetAccessible, (3) nsBindingManager::GetNestedInsertionPoint, (4) nsXBLPrototypeBinding::AttributeChanged, (5) nsColumnSetFrame::GetContentInsertionFrame, and (6) nsLineLayout::TrimTrailingWhiteSpaceIn methods, and other vectors.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0412	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.9.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.9.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.9.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.9.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-9.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-9.el4 AND thunderbird is earlier than 0:1.5.0.12-8.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-9.el4 AND seamonkey is earlier than 0:1.0.9-9.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4 AND firefox is earlier than 0:1.5.0.12-0.10.el4 AND seamonkey-mail is earlier than 0:1.0.9-9.el4 AND seamonkey-chat is earlier than 0:1.0.9-9.el4 AND seamonkey-nss is earlier than 0:1.0.9-9.el4 AND seamonkey-devel is earlier than 0:1.0.9-9.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5 AND thunderbird is earlier than 0:1.5.0.12-8.el5

Definition Id: oval:org.mitre.oval:def:10705

Oval ID:	oval:org.mitre.oval:def:10705
Title:	Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.
Description:	Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0418	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.9.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.9.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.9.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.9.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-9.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-9.el4 AND thunderbird is earlier than 0:1.5.0.12-8.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-9.el4 AND seamonkey is earlier than 0:1.0.9-9.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4 AND firefox is earlier than 0:1.5.0.12-0.10.el4 AND seamonkey-mail is earlier than 0:1.0.9-9.el4 AND seamonkey-chat is earlier than 0:1.0.9-9.el4 AND seamonkey-nss is earlier than 0:1.0.9-9.el4 AND seamonkey-devel is earlier than 0:1.0.9-9.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5 AND thunderbird is earlier than 0:1.5.0.12-8.el5

Definition Id: oval:org.mitre.oval:def:10752

Oval ID:	oval:org.mitre.oval:def:10752
Title:	The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
Description:	The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1380	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.17.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.17.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.17.el3 AND seamonkey is earlier than 0:1.0.9-0.17.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.17.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.17.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.17.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.17.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.17.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.17.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-16.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-16.el4 AND thunderbird is earlier than 0:1.5.0.12-11.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-16.el4 AND seamonkey is earlier than 0:1.0.9-16.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-16.el4 AND firefox is earlier than 0:1.5.0.12-0.15.el4 AND seamonkey-mail is earlier than 0:1.0.9-16.el4 AND seamonkey-chat is earlier than 0:1.0.9-16.el4 AND seamonkey-nss is earlier than 0:1.0.9-16.el4 AND seamonkey-devel is earlier than 0:1.0.9-16.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-16.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-15.el5_1 AND firefox is earlier than 0:1.5.0.12-15.el5_1 AND thunderbird is earlier than 0:1.5.0.12-12.el5_1

Definition Id: oval:org.mitre.oval:def:10900

Oval ID:	oval:org.mitre.oval:def:10900
Title:	Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".
Description:	Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirmation dialogs, which might allow remote attackers to trick users into confirming an unsafe action, such as remote file execution, by using a timer to change the window focus, aka the "dialog refocus bug" or "ffclick2".
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0591	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.9.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.9.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.9.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.9.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-9.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-9.el4 AND thunderbird is earlier than 0:1.5.0.12-8.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-9.el4 AND seamonkey is earlier than 0:1.0.9-9.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4 AND firefox is earlier than 0:1.5.0.12-0.10.el4 AND seamonkey-mail is earlier than 0:1.0.9-9.el4 AND seamonkey-chat is earlier than 0:1.0.9-9.el4 AND seamonkey-nss is earlier than 0:1.0.9-9.el4 AND seamonkey-devel is earlier than 0:1.0.9-9.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5 AND thunderbird is earlier than 0:1.5.0.12-8.el5

Definition Id: oval:org.mitre.oval:def:10980

Oval ID:	oval:org.mitre.oval:def:10980
Title:	Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."
Description:	Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute with the wrong principal, aka "Privilege escalation via incorrect principals."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1235	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.16.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.16.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.16.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.16.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-15.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-15.el4 AND thunderbird is earlier than 0:1.5.0.12-10.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-15.el4 AND seamonkey is earlier than 0:1.0.9-15.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4 AND firefox is earlier than 0:1.5.0.12-0.14.el4 AND seamonkey-mail is earlier than 0:1.0.9-15.el4 AND seamonkey-chat is earlier than 0:1.0.9-15.el4 AND seamonkey-nss is earlier than 0:1.0.9-15.el4 AND seamonkey-devel is earlier than 0:1.0.9-15.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-14.el5_1 AND firefox is earlier than 0:1.5.0.12-14.el5_1 AND thunderbird is earlier than 0:1.5.0.12-11.el5_1

Definition Id: oval:org.mitre.oval:def:11078

Oval ID:	oval:org.mitre.oval:def:11078
Title:	Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."
Description:	Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1233	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.16.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.16.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.16.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.16.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-15.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-15.el4 AND thunderbird is earlier than 0:1.5.0.12-10.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-15.el4 AND seamonkey is earlier than 0:1.0.9-15.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4 AND firefox is earlier than 0:1.5.0.12-0.14.el4 AND seamonkey-mail is earlier than 0:1.0.9-15.el4 AND seamonkey-chat is earlier than 0:1.0.9-15.el4 AND seamonkey-nss is earlier than 0:1.0.9-15.el4 AND seamonkey-devel is earlier than 0:1.0.9-15.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-14.el5_1 AND firefox is earlier than 0:1.5.0.12-14.el5_1 AND thunderbird is earlier than 0:1.5.0.12-11.el5_1

Definition Id: oval:org.mitre.oval:def:11154

Oval ID:	oval:org.mitre.oval:def:11154
Title:	CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.
Description:	CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0417	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.9.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.9.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.9.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.9.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-9.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-9.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-9.el4 AND seamonkey is earlier than 0:1.0.9-9.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4 AND firefox is earlier than 0:1.5.0.12-0.10.el4 AND seamonkey-mail is earlier than 0:1.0.9-9.el4 AND seamonkey-chat is earlier than 0:1.0.9-9.el4 AND seamonkey-nss is earlier than 0:1.0.9-9.el4 AND seamonkey-devel is earlier than 0:1.0.9-9.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5

Definition Id: oval:org.mitre.oval:def:11163

Oval ID:	oval:org.mitre.oval:def:11163
Title:	GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.
Description:	GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1241	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.16.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.16.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.16.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.16.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-15.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-15.el4 AND thunderbird is earlier than 0:1.5.0.12-10.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-15.el4 AND seamonkey is earlier than 0:1.0.9-15.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4 AND firefox is earlier than 0:1.5.0.12-0.14.el4 AND seamonkey-mail is earlier than 0:1.0.9-15.el4 AND seamonkey-chat is earlier than 0:1.0.9-15.el4 AND seamonkey-nss is earlier than 0:1.0.9-15.el4 AND seamonkey-devel is earlier than 0:1.0.9-15.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-14.el5_1 AND firefox is earlier than 0:1.5.0.12-14.el5_1 AND thunderbird is earlier than 0:1.5.0.12-11.el5_1

Definition Id: oval:org.mitre.oval:def:11652

Oval ID:	oval:org.mitre.oval:def:11652
Title:	Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.
Description:	Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0419	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.9.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.9.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.9.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.9.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-9.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-9.el4 AND thunderbird is earlier than 0:1.5.0.12-8.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-9.el4 AND seamonkey is earlier than 0:1.0.9-9.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4 AND firefox is earlier than 0:1.5.0.12-0.10.el4 AND seamonkey-mail is earlier than 0:1.0.9-9.el4 AND seamonkey-chat is earlier than 0:1.0.9-9.el4 AND seamonkey-nss is earlier than 0:1.0.9-9.el4 AND seamonkey-devel is earlier than 0:1.0.9-9.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5 AND thunderbird is earlier than 0:1.5.0.12-8.el5

Definition Id: oval:org.mitre.oval:def:11788

Oval ID:	oval:org.mitre.oval:def:11788
Title:	Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.
Description:	Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1236	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.16.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.16.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.16.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.16.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-15.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-15.el4 AND thunderbird is earlier than 0:1.5.0.12-10.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-15.el4 AND seamonkey is earlier than 0:1.0.9-15.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4 AND firefox is earlier than 0:1.5.0.12-0.14.el4 AND seamonkey-mail is earlier than 0:1.0.9-15.el4 AND seamonkey-chat is earlier than 0:1.0.9-15.el4 AND seamonkey-nss is earlier than 0:1.0.9-15.el4 AND seamonkey-devel is earlier than 0:1.0.9-15.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-14.el5_1 AND firefox is earlier than 0:1.5.0.12-14.el5_1 AND thunderbird is earlier than 0:1.5.0.12-11.el5_1

Definition Id: oval:org.mitre.oval:def:17244

Oval ID:	oval:org.mitre.oval:def:17244
Title:	USN-582-2 -- mozilla-thunderbird
Description:	USN-582-1 fixed several vulnerabilities in Thunderbird.
Family:	unix	Class:	patch
Reference(s):	USN-582-2 CVE-2008-0304 CVE-2008-0412 CVE-2008-0413 CVE-2008-0415 CVE-2008-0418 CVE-2008-0420	Version:	10
Platform(s):	Ubuntu 6.06 Ubuntu 6.10 Ubuntu 7.04	Product(s):	mozilla-thunderbird
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.6.06.1 AND Release section Ubuntu 6.10 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.6.10.1 AND Release section Ubuntu 7.04 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.7.04.1

Definition Id: oval:org.mitre.oval:def:17490

Oval ID:	oval:org.mitre.oval:def:17490
Title:	USN-605-1 -- mozilla-thunderbird, thunderbird vulnerabilities
Description:	Various flaws were discovered in the JavaScript engine.
Family:	unix	Class:	patch
Reference(s):	USN-605-1 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04	Product(s):	mozilla-thunderbird thunderbird
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080417a-0ubuntu0.6.06.1 AND Release section Ubuntu 7.04 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080417a-0ubuntu0.7.04.1 AND Release section Ubuntu 7.10 is installed AND thunderbird DPKG is earlier than 2.0.0.14+nobinonly-0ubuntu0.7.10.0 AND Release section Ubuntu 8.04 is installed AND thunderbird DPKG is earlier than 2.0.0.14+nobinonly-0ubuntu0.8.04.1

Definition Id: oval:org.mitre.oval:def:17533

Oval ID:	oval:org.mitre.oval:def:17533
Title:	USN-576-1 -- firefox vulnerabilities
Description:	Various flaws were discovered in the browser and JavaScript engine.
Family:	unix	Class:	patch
Reference(s):	USN-576-1 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0420 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10	Product(s):	firefox
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND firefox DPKG is earlier than 1.5.dfsg+1.5.0.15~prepatch080202a-0ubuntu1 AND Release section Ubuntu 6.10 is installed AND firefox DPKG is earlier than 2.0.0.12+0nobinonly+2-0ubuntu0.6.10 AND Release section Ubuntu 7.04 is installed AND firefox DPKG is earlier than 2.0.0.12+1nobinonly+2-0ubuntu0.7.4 AND Release section Ubuntu 7.10 is installed AND firefox DPKG is earlier than 2.0.0.12+2nobinonly+2-0ubuntu0.7.10

Definition Id: oval:org.mitre.oval:def:17594

Oval ID:	oval:org.mitre.oval:def:17594
Title:	USN-582-1 -- mozilla-thunderbird, thunderbird vulnerabilities
Description:	It was discovered that Thunderbird did not properly set the size of a buffer when parsing an external-body MIME-type.
Family:	unix	Class:	patch
Reference(s):	USN-582-1 CVE-2008-0304 CVE-2008-0412 CVE-2008-0413 CVE-2008-0415 CVE-2008-0418 CVE-2008-0420 CVE-2008-0591	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10	Product(s):	mozilla-thunderbird thunderbird
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.6.06.0 AND Release section Ubuntu 6.10 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.6.10.0 AND Release section Ubuntu 7.04 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080227-0ubuntu0.7.04.0 AND Release section Ubuntu 7.10 is installed AND thunderbird DPKG is earlier than 2.0.0.12+nobinonly-0ubuntu0.7.10.0

Definition Id: oval:org.mitre.oval:def:17694

Oval ID:	oval:org.mitre.oval:def:17694
Title:	USN-592-1 -- firefox vulnerabilities
Description:	Alexey Proskuryakov, Yosuke Hasegawa and Simon Montagu discovered flaws in Firefox's character encoding handling.
Family:	unix	Class:	patch
Reference(s):	USN-592-1 CVE-2008-0416 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237 CVE-2008-1238 CVE-2007-4879 CVE-2008-1195 CVE-2008-1240 CVE-2008-1241	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10	Product(s):	firefox
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND firefox DPKG is earlier than 1.5.dfsg+1.5.0.15~prepatch080323a-0ubuntu1 AND Release section Ubuntu 6.10 is installed AND firefox DPKG is earlier than 2.0.0.13+0nobinonly-0ubuntu0.6.10 AND Release section Ubuntu 7.04 is installed AND firefox DPKG is earlier than 2.0.0.13+0nobinonly-0ubuntu0.7.4 AND Release section Ubuntu 7.10 is installed AND firefox DPKG is earlier than 2.0.0.13+1nobinonly-0ubuntu0.7.10

Definition Id: oval:org.mitre.oval:def:17739

Oval ID:	oval:org.mitre.oval:def:17739
Title:	USN-602-1 -- firefox vulnerabilities
Description:	Flaws were discovered in Firefox which could lead to crashes during JavaScript garbage collection.
Family:	unix	Class:	patch
Reference(s):	USN-602-1 CVE-2008-1380	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10	Product(s):	firefox
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND firefox DPKG is earlier than 1.5.dfsg+1.5.0.15~prepatch080417a-0ubuntu1 AND Release section Ubuntu 6.10 is installed AND firefox DPKG is earlier than 2.0.0.14+0nobinonly-0ubuntu0.6.10 AND Release section Ubuntu 7.04 is installed AND firefox DPKG is earlier than 2.0.0.14+1nobinonly-0ubuntu0.7.4 AND Release section Ubuntu 7.10 is installed AND firefox DPKG is earlier than 2.0.0.14+2nobinonly-0ubuntu0.7.10

Definition Id: oval:org.mitre.oval:def:18288

Oval ID:	oval:org.mitre.oval:def:18288
Title:	DSA-1558-1 xulrunner - arbitrary code execution
Description:	It was discovered that crashes in the Javascript engine of xulrunner, the Gecko engine library, could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1558-1 CVE-2008-1380	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND xulrunner DPKG is earlier than 1.8.0.15~pre080323b-0etch2

Definition Id: oval:org.mitre.oval:def:18417

Oval ID:	oval:org.mitre.oval:def:18417
Title:	DSA-1485-2 icedove - several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client.
Family:	unix	Class:	patch
Reference(s):	DSA-1485-2 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	icedove
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND icedove DPKG is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2

Definition Id: oval:org.mitre.oval:def:18434

Oval ID:	oval:org.mitre.oval:def:18434
Title:	DSA-1489-1 iceweasel - several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser.
Family:	unix	Class:	patch
Reference(s):	DSA-1489-1 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceweasel
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND iceweasel DPKG is earlier than 2.0.0.12-0etch1

Definition Id: oval:org.mitre.oval:def:18644

Oval ID:	oval:org.mitre.oval:def:18644
Title:	DSA-1555-1 iceweasel - arbitrary code execution
Description:	It was discovered that crashes in the Javascript engine of Iceweasel, an unbranded version of the Firefox browser, could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1555-1 CVE-2008-1380	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceweasel
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND iceweasel DPKG is earlier than 2.0.0.14-0etch1

Definition Id: oval:org.mitre.oval:def:18703

Oval ID:	oval:org.mitre.oval:def:18703
Title:	DSA-1562-1 iceape - arbitrary code execution
Description:	It was discovered that crashes in the JavaScript engine of Iceape, an unbranded version of the Seamonkey internet suite could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1562-1 CVE-2008-1380	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceape
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND iceape DPKG is earlier than 1.0.13~pre080323b-0etch3

Definition Id: oval:org.mitre.oval:def:20074

Oval ID:	oval:org.mitre.oval:def:20074
Title:	DSA-1506-1 iceape - several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite.
Family:	unix	Class:	patch
Reference(s):	DSA-1506-1 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	5
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceape
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND iceape DPKG is earlier than 0:1.0.12~pre080131b-0etch1

Definition Id: oval:org.mitre.oval:def:20267

Oval ID:	oval:org.mitre.oval:def:20267
Title:	DSA-1484-1 xulrunner - several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications.
Family:	unix	Class:	patch
Reference(s):	DSA-1484-1 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	5
Platform(s):	Debian GNU/Linux 4.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND xulrunner DPKG is earlier than 0:1.8.0.15~pre080131b-0etch1

Definition Id: oval:org.mitre.oval:def:21747

Oval ID:	oval:org.mitre.oval:def:21747
Title:	ELSA-2008:0132: java-1.4.2-ibm security update (Critical)
Description:	Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0132-01 CVE-2007-3698 CVE-2007-4381 CVE-2007-5232 CVE-2007-5238 CVE-2007-5239 CVE-2007-5240 CVE-2007-5273 CVE-2007-5274 CVE-2008-1189 CVE-2008-1190 CVE-2008-1192 CVE-2008-1195	Version:	53
Platform(s):	Oracle Linux 5	Product(s):	java-1.4.2-ibm
Definition Synopsis:
Oracle Linux 5.x rpm test java-1.4.2-ibm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-devel is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-demo is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-src is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-javacomm is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-plugin is earlier than 0:1.4.2.10-1jpp.2.el5 AND java-1.4.2-ibm-jdbc is earlier than 0:1.4.2.10-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:21756

Oval ID:	oval:org.mitre.oval:def:21756
Title:	ELSA-2008:0105: thunderbird security update (Critical)
Description:	Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0105-02 CVE-2008-0304 CVE-2008-0412 CVE-2008-0413 CVE-2008-0415 CVE-2008-0418 CVE-2008-0419 CVE-2008-0420 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593	Version:	45
Platform(s):	Oracle Linux 5	Product(s):	thunderbird
Definition Synopsis:
Oracle Linux 5.x AND thunderbird is earlier than 0:1.5.0.12-8.el5

Definition Id: oval:org.mitre.oval:def:21766

Oval ID:	oval:org.mitre.oval:def:21766
Title:	ELSA-2008:0222: firefox security update (Critical)
Description:	The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0222-02 CVE-2008-1380	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	firefox
Definition Synopsis:
Oracle Linux 5.x rpm test firefox-devel is earlier than 0:1.5.0.12-15.el5_1 AND firefox is earlier than 0:1.5.0.12-15.el5_1

Definition Id: oval:org.mitre.oval:def:21830

Oval ID:	oval:org.mitre.oval:def:21830
Title:	ELSA-2008:0224: thunderbird security update (Moderate)
Description:	The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0224-01 CVE-2008-1380	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	thunderbird
Definition Synopsis:
Oracle Linux 5.x AND thunderbird is earlier than 0:1.5.0.12-12.el5_1

Definition Id: oval:org.mitre.oval:def:22437

Oval ID:	oval:org.mitre.oval:def:22437
Title:	ELSA-2008:0103: firefox security update (Critical)
Description:	Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0103-01 CVE-2008-0412 CVE-2008-0413 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0420 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593	Version:	49
Platform(s):	Oracle Linux 5	Product(s):	firefox
Definition Synopsis:
Oracle Linux 5.x rpm test firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5

Definition Id: oval:org.mitre.oval:def:22699

Oval ID:	oval:org.mitre.oval:def:22699
Title:	ELSA-2008:0209: thunderbird security update (Moderate)
Description:	GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0209-01 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237 CVE-2008-1238 CVE-2008-1241	Version:	33
Platform(s):	Oracle Linux 5	Product(s):	thunderbird
Definition Synopsis:
Oracle Linux 5.x AND thunderbird is earlier than 0:1.5.0.12-11.el5_1

Definition Id: oval:org.mitre.oval:def:22714

Oval ID:	oval:org.mitre.oval:def:22714
Title:	ELSA-2008:0207: firefox security update (Critical)
Description:	GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0207-01 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237 CVE-2008-1238 CVE-2008-1241	Version:	33
Platform(s):	Oracle Linux 5	Product(s):	firefox
Definition Synopsis:
Oracle Linux 5.x rpm test firefox-devel is earlier than 0:1.5.0.12-14.el5_1 AND firefox is earlier than 0:1.5.0.12-14.el5_1

Definition Id: oval:org.mitre.oval:def:7909

Oval ID:	oval:org.mitre.oval:def:7909
Title:	DSA-1489 iceweasel -- several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser. The Common Vulnerabilities and Exposures project identifies the following problems: Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engine, which might allow the execution of arbitrary code. Carsten Book, Wesley Garland, Igor Bukanov, moz_bug_r_a4, shutdown, Philip Taylor and tgirmann discovered crashes in the JavaScript engine, which might allow the execution of arbitrary code. hong and Gregory Fleischer discovered that file input focus vulnerabilities in the file upload control could allow information disclosure of local files. moz_bug_r_a4 and Boris Zbarsky discovered several vulnerabilities in JavaScript handling, which could allow privilege escalation. Justin Dolske discovered that the password storage mechanism could be abused by malicious web sites to corrupt existing saved passwords. Gerry Eisenhaur and moz_bug_r_a4 discovered that a directory traversal vulnerability in chrome: URI handling could lead to information disclosure. David Bloom discovered a race condition in the image handling of designMode elements, which can lead to information disclosure and potentially the execution of arbitrary code. Michal Zalewski discovered that timers protecting security-sensitive dialogs (by disabling dialog elements until a timeout is reached) could be bypassed by window focus changes through JavaScript. It was discovered that malformed content declarations of saved attachments could prevent a user from opening local files with a .txt file name, resulting in minor denial of service. Martin Straka discovered that insecure stylesheet handling during redirects could lead to information disclosure. Emil Ljungdahl and Lars-Olof Moilanen discovered that phishing protections could be bypassed with div elements. The Mozilla products from the old stable distribution (sarge) are no longer supported with security updates.
Family:	unix	Class:	patch
Reference(s):	DSA-1489 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceweasel
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section mozilla-firefox is earlier than 2.0.0.12-0etch1 AND firefox is earlier than 2.0.0.12-0etch1 AND firefox-dom-inspector is earlier than 2.0.0.12-0etch1 AND iceweasel-dom-inspector is earlier than 2.0.0.12-0etch1 AND mozilla-firefox-gnome-support is earlier than 2.0.0.12-0etch1 AND mozilla-firefox-dom-inspector is earlier than 2.0.0.12-0etch1 AND firefox-gnome-support is earlier than 2.0.0.12-0etch1 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section iceweasel-gnome-support is earlier than 2.0.0.12-0etch1 AND iceweasel-dbg is earlier than 2.0.0.12-0etch1 AND iceweasel is earlier than 2.0.0.12-0etch1

Definition Id: oval:org.mitre.oval:def:7914

Oval ID:	oval:org.mitre.oval:def:7914
Title:	DSA-1485 icedove -- several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems: Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engine, which might allow the execution of arbitrary code. Carsten Book, Wesley Garland, Igor Bukanov, moz_bug_r_a4, shutdown, Philip Taylor and tgirmann discovered crashes in the JavaScript engine, which might allow the execution of arbitrary code. moz_bug_r_a4 and Boris Zbarsky discovered several vulnerabilities in JavaScript handling, which could allow privilege escalation. Gerry Eisenhaur and moz_bug_r_a4 discovered that a directory traversal vulnerability in chrome: URI handling could lead to information disclosure. David Bloom discovered a race condition in the image handling of designMode elements, which can lead to information disclosure and potentially the execution of arbitrary code. Michal Zalewski discovered that timers protecting security-sensitive dialogs (by disabling dialog elements until a timeout is reached) could be bypassed by window focus changes through JavaScript. The Mozilla products from the old stable distribution (sarge) are no longer supported with security updates.
Family:	unix	Class:	patch
Reference(s):	DSA-1485 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	icedove
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section thunderbird-gnome-support is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND thunderbird-dev is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND mozilla-thunderbird is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND thunderbird is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND mozilla-thunderbird-dev is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND mozilla-thunderbird-typeaheadfind is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND thunderbird-dbg is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND thunderbird-typeaheadfind is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND mozilla-thunderbird-inspector is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND thunderbird-inspector is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section icedove-typeaheadfind is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-inspector is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-dev is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-dbg is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-gnome-support is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 OR Architecture dependent section Installed architecture is amd64 AND Packages section icedove-typeaheadfind is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND icedove is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-dev is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND icedove-inspector is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND icedove-dbg is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-gnome-support is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2

Definition Id: oval:org.mitre.oval:def:8000

Oval ID:	oval:org.mitre.oval:def:8000
Title:	DSA-1484 xulrunner -- several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems: Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engine, which might allow the execution of arbitrary code. Carsten Book, Wesley Garland, Igor Bukanov, moz_bug_r_a4, shutdown, Philip Taylor and tgirmann discovered crashes in the JavaScript engine, which might allow the execution of arbitrary code. hong and Gregory Fleischer discovered that file input focus vulnerabilities in the file upload control could allow information disclosure of local files. moz_bug_r_a4 and Boris Zbarsky discovered several vulnerabilities in JavaScript handling, which could allow privilege escalation. Justin Dolske discovered that the password storage mechanism could be abused by malicious web sites to corrupt existing saved passwords. Gerry Eisenhaur and moz_bug_r_a4 discovered that a directory traversal vulnerability in chrome: URI handling could lead to information disclosure. David Bloom discovered a race condition in the image handling of designMode elements, which could lead to information disclosure or potentially the execution of arbitrary code. Michal Zalewski discovered that timers protecting security-sensitive dialogs (which disable dialog elements until a timeout is reached) could be bypassed by window focus changes through JavaScript. It was discovered that malformed content declarations of saved attachments could prevent a user from opening local files with a .txt file name, resulting in minor denial of service. Martin Straka discovered that insecure stylesheet handling during redirects could lead to information disclosure. Emil Ljungdahl and Lars-Olof Moilanen discovered that phishing protections could be bypassed with div elements. The old stable distribution (sarge) doesn't contain xulrunner.
Family:	unix	Class:	patch
Reference(s):	DSA-1484 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section libnspr4-dev is earlier than 1.8.0.15~pre080131a-0etch1 AND libmozjs-dev is earlier than 1.8.0.15~pre080131a-0etch1 AND libsmjs1 is earlier than 1.8.0.15~pre080131b-0etch1 AND libmozillainterfaces-java is earlier than 1.8.0.15~pre080131b-0etch1 AND libxul-common is earlier than 1.8.0.15~pre080131a-0etch1 AND libsmjs-dev is earlier than 1.8.0.15~pre080131a-0etch1 AND libxul-dev is earlier than 1.8.0.15~pre080131b-0etch1 AND libnss3-dev is earlier than 1.8.0.15~pre080131b-0etch1 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is sparc AND Installed architecture is powerpc AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is mipsel AND Installed architecture is arm AND Packages section libxul0d is earlier than 1.8.0.15~pre080131b-0etch1 AND libnss3-0d-dbg is earlier than 1.8.0.15~pre080131b-0etch1 AND libmozjs0d-dbg is earlier than 1.8.0.15~pre080131b-0etch1 AND libnss3-0d is earlier than 1.8.0.15~pre080131b-0etch1 AND spidermonkey-bin is earlier than 1.8.0.15~pre080131b-0etch1 AND libnspr4-0d-dbg is earlier than 1.8.0.15~pre080131b-0etch1 AND xulrunner-gnome-support is earlier than 1.8.0.15~pre080131b-0etch1 AND libxul0d-dbg is earlier than 1.8.0.15~pre080131b-0etch1 AND libmozjs0d is earlier than 1.8.0.15~pre080131b-0etch1 AND xulrunner is earlier than 1.8.0.15~pre080131b-0etch1 AND libnss3-tools is earlier than 1.8.0.15~pre080131b-0etch1 AND python-xpcom is earlier than 1.8.0.15~pre080131b-0etch1 AND libnspr4-0d is earlier than 1.8.0.15~pre080131b-0etch1 OR Architecture dependent section Installed architecture is amd64 AND Packages section libxul0d is earlier than 1.8.0.15~pre080131b-0etch1 AND libnss3-0d-dbg is earlier than 1.8.0.15~pre080131a-0etch1 AND libmozjs0d-dbg is earlier than 1.8.0.15~pre080131a-0etch1 AND libnss3-0d is earlier than 1.8.0.15~pre080131b-0etch1 AND spidermonkey-bin is earlier than 1.8.0.15~pre080131b-0etch1 AND libnspr4-0d is earlier than 1.8.0.15~pre080131b-0etch1 AND libnspr4-0d-dbg is earlier than 1.8.0.15~pre080131a-0etch1 AND xulrunner-gnome-support is earlier than 1.8.0.15~pre080131a-0etch1 AND libxul0d-dbg is earlier than 1.8.0.15~pre080131b-0etch1 AND xulrunner is earlier than 1.8.0.15~pre080131b-0etch1 AND libnss3-tools is earlier than 1.8.0.15~pre080131b-0etch1 AND python-xpcom is earlier than 1.8.0.15~pre080131a-0etch1 AND libmozjs0d is earlier than 1.8.0.15~pre080131b-0etch1

Definition Id: oval:org.mitre.oval:def:8001

Oval ID:	oval:org.mitre.oval:def:8001
Title:	DSA-1555 iceweasel -- programming error
Description:	It was discovered that crashes in the Javascript engine of Iceweasel, an unbranded version of the Firefox browser, could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1555 CVE-2008-1380	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceweasel
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section mozilla-firefox is earlier than 2.0.0.14-0etch1 AND firefox is earlier than 2.0.0.14-0etch1 AND firefox-dom-inspector is earlier than 2.0.0.14-0etch1 AND iceweasel-dom-inspector is earlier than 2.0.0.14-0etch1 AND mozilla-firefox-gnome-support is earlier than 2.0.0.14-0etch1 AND mozilla-firefox-dom-inspector is earlier than 2.0.0.14-0etch1 AND firefox-gnome-support is earlier than 2.0.0.14-0etch1 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is ia64 AND Installed architecture is mips AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section iceweasel-gnome-support is earlier than 2.0.0.14-0etch1 AND iceweasel-dbg is earlier than 2.0.0.14-0etch1 AND iceweasel is earlier than 2.0.0.14-0etch1

Definition Id: oval:org.mitre.oval:def:8062

Oval ID:	oval:org.mitre.oval:def:8062
Title:	DSA-1562 iceape -- programming error
Description:	It was discovered that crashes in the JavaScript engine of Iceape, an unbranded version of the Seamonkey internet suite could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1562 CVE-2008-1380	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceape
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section mozilla-calendar is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-chatzilla is earlier than 1.8+1.0.13~pre080323b-0etch3 AND iceape is earlier than 1.0.13~pre080323b-0etch3 AND iceape-chatzilla is earlier than 1.0.13~pre080323b-0etch3 AND mozilla is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-psm is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-mailnews is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-dom-inspector is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-js-debugger is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-browser is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-dev is earlier than 1.8+1.0.13~pre080323b-0etch3 AND iceape-dev is earlier than 1.0.13~pre080323b-0etch3 AND iceape-dbg is earlier than 1.0.13~pre080323b-0etch3 AND iceape-dom-inspector is earlier than 1.0.13~pre080323b-0etch3 AND iceape-mailnews is earlier than 1.0.13~pre080323b-0etch3 AND iceape-browser is earlier than 1.0.13~pre080323b-0etch3 AND iceape-calendar is earlier than 1.0.13~pre080323b-0etch3 AND iceape-gnome-support is earlier than 1.0.13~pre080323b-0etch3

Definition Id: oval:org.mitre.oval:def:8162

Oval ID:	oval:org.mitre.oval:def:8162
Title:	DSA-1506 iceape -- several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the Iceape internet suite, an unbranded version of the Seamonkey Internet Suite. The Common Vulnerabilities and Exposures project identifies the following problems: Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engine, which might allow the execution of arbitrary code. Carsten Book, Wesley Garland, Igor Bukanov, moz_bug_r_a4, shutdown, Philip Taylor and tgirmann discovered crashes in the Javascript engine, which might allow the execution of arbitrary code. hong and Gregory Fleischer discovered that file input focus vulnerabilities in the file upload control could allow information disclosure of local files. moz_bug_r_a4 and Boris Zbarsky discovered several vulnerabilities in Javascript handling, which could allow privilege escalation. Justin Dolske discovered that the password storage mechanism could be abused by malicious web sites to corrupt existing saved passwords. Gerry Eisenhaur and moz_bug_r_a4 discovered that a directory traversal vulnerability in chrome: URI handling could lead to information disclosure. David Bloom discovered a race condition in the image handling of designMode elements, which can lead to information disclosure and potentially the execution of arbitrary code. Michal Zalewski discovered that timers protecting security-sensitive dialogs (by disabling dialog elements until a timeout is reached) could be bypassed by window focus changes through Javascript. It was discovered that malformed content declarations of saved attachments could prevent a user in the opening local files with a .txt file name, resulting in minor denial of service. Martin Straka discovered that insecure stylesheet handling during redirects could lead to information disclosure. Emil Ljungdahl and Lars-Olof Moilanen discovered that phishing protections could be bypassed with div elements. The Mozilla products from the old stable distribution (sarge) are no longer supported with security updates.
Family:	unix	Class:	patch
Reference(s):	DSA-1506 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceape
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section mozilla-js-debugger is earlier than 1.8+1.0.12~pre080131b-0etch1 AND mozilla-chatzilla is earlier than 1.8+1.0.12~pre080131b-0etch1 AND iceape is earlier than 1.0.12~pre080131b-0etch1 AND iceape-chatzilla is earlier than 1.0.12~pre080131b-0etch1 AND mozilla is earlier than 1.8+1.0.12~pre080131b-0etch1 AND mozilla-psm is earlier than 1.8+1.0.12~pre080131b-0etch1 AND mozilla-mailnews is earlier than 1.8+1.0.12~pre080131b-0etch1 AND mozilla-dom-inspector is earlier than 1.8+1.0.12~pre080131b-0etch1 AND mozilla-calendar is earlier than 1.8+1.0.12~pre080131b-0etch1 AND mozilla-browser is earlier than 1.8+1.0.12~pre080131b-0etch1 AND mozilla-dev is earlier than 1.8+1.0.12~pre080131b-0etch1 AND iceape-dev is earlier than 1.0.12~pre080131b-0etch1 AND iceape-dbg is earlier than 1.0.12~pre080131b-0etch1 AND iceape-dom-inspector is earlier than 1.0.12~pre080131b-0etch1 AND iceape-mailnews is earlier than 1.0.12~pre080131b-0etch1 AND iceape-browser is earlier than 1.0.12~pre080131b-0etch1 AND iceape-calendar is earlier than 1.0.12~pre080131b-0etch1 AND iceape-gnome-support is earlier than 1.0.12~pre080131b-0etch1

Definition Id: oval:org.mitre.oval:def:8277

Oval ID:	oval:org.mitre.oval:def:8277
Title:	DSA-1558 xulrunner -- programming error
Description:	It was discovered that crashes in the Javascript engine of xulrunner, the Gecko engine library, could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1558 CVE-2008-1380	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section libnspr4-dev is earlier than 1.8.0.15~pre080323b-0etch2 AND libmozjs-dev is earlier than 1.8.0.15~pre080323b-0etch2 AND libsmjs1 is earlier than 1.8.0.15~pre080323b-0etch2 AND libmozillainterfaces-java is earlier than 1.8.0.15~pre080323b-0etch2 AND libxul-common is earlier than 1.8.0.15~pre080323b-0etch2 AND libsmjs-dev is earlier than 1.8.0.15~pre080323b-0etch2 AND libxul-dev is earlier than 1.8.0.15~pre080323b-0etch2 AND libnss3-dev is earlier than 1.8.0.15~pre080323b-0etch2 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section libxul0d is earlier than 1.8.0.15~pre080323b-0etch2 AND libnss3-0d-dbg is earlier than 1.8.0.15~pre080323b-0etch2 AND libmozjs0d-dbg is earlier than 1.8.0.15~pre080323b-0etch2 AND libnss3-0d is earlier than 1.8.0.15~pre080323b-0etch2 AND spidermonkey-bin is earlier than 1.8.0.15~pre080323b-0etch2 AND libnspr4-0d-dbg is earlier than 1.8.0.15~pre080323b-0etch2 AND xulrunner-gnome-support is earlier than 1.8.0.15~pre080323b-0etch2 AND python-xpcom is earlier than 1.8.0.15~pre080323b-0etch2 AND libxul0d-dbg is earlier than 1.8.0.15~pre080323b-0etch2 AND xulrunner is earlier than 1.8.0.15~pre080323b-0etch2 AND libnss3-tools is earlier than 1.8.0.15~pre080323b-0etch2 AND libmozjs0d is earlier than 1.8.0.15~pre080323b-0etch2 AND libnspr4-0d is earlier than 1.8.0.15~pre080323b-0etch2

Definition Id: oval:org.mitre.oval:def:9486

Oval ID:	oval:org.mitre.oval:def:9486
Title:	Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.
Description:	Unspecified vulnerability in Sun JDK and Java Runtime Environment (JRE) 6 Update 4 and earlier and 5.0 Update 14 and earlier; and SDK and JRE 1.4.2_16 and earlier; allows remote attackers to access arbitrary network services on the local host via unspecified vectors related to JavaScript and Java APIs.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1195	Version:	3
Platform(s):	Red Hat Enterprise Linux Extras 4 Red Hat Enterprise Linux Extras 5	Product(s):
Definition Synopsis:
IF redhat-release is version 4 AND java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el4 AND java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el4 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el4 OR redhat-release is version 5 AND java-1.5.0-ibm-javacomm is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-devel is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-sun-plugin is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.6.0-ibm-accessibility is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-jdbc is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-src is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-javacomm is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.5.0-ibm-plugin is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.6.0-ibm is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-plugin is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.6.0-ibm-devel is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.5.0-ibm-src is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.6.0-ibm-demo is earlier than 0:1.6.0.1-1jpp.2.el5 AND java-1.5.0-ibm-demo is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm-accessibility is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-ibm is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-sun-demo is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun-jdbc is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-ibm-jdbc is earlier than 0:1.5.0.7-1jpp.2.el5 AND java-1.5.0-sun-src is earlier than 0:1.5.0.15-1jpp.2.el5 AND java-1.5.0-sun-devel is earlier than 0:1.5.0.15-1jpp.2.el5

Definition Id: oval:org.mitre.oval:def:9551

Oval ID:	oval:org.mitre.oval:def:9551
Title:	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers."
Description:	Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka "Universal XSS using event handlers."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1234	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.16.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.16.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.16.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.16.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-15.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-15.el4 AND thunderbird is earlier than 0:1.5.0.12-10.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-15.el4 AND seamonkey is earlier than 0:1.0.9-15.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4 AND firefox is earlier than 0:1.5.0.12-0.14.el4 AND seamonkey-mail is earlier than 0:1.0.9-15.el4 AND seamonkey-chat is earlier than 0:1.0.9-15.el4 AND seamonkey-nss is earlier than 0:1.0.9-15.el4 AND seamonkey-devel is earlier than 0:1.0.9-15.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-14.el5_1 AND firefox is earlier than 0:1.5.0.12-14.el5_1 AND thunderbird is earlier than 0:1.5.0.12-11.el5_1

Definition Id: oval:org.mitre.oval:def:9651

Oval ID:	oval:org.mitre.oval:def:9651
Title:	Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.
Description:	Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1237	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.16.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.16.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.16.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.16.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-15.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-15.el4 AND thunderbird is earlier than 0:1.5.0.12-10.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-15.el4 AND seamonkey is earlier than 0:1.0.9-15.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4 AND firefox is earlier than 0:1.5.0.12-0.14.el4 AND seamonkey-mail is earlier than 0:1.0.9-15.el4 AND seamonkey-chat is earlier than 0:1.0.9-15.el4 AND seamonkey-nss is earlier than 0:1.0.9-15.el4 AND seamonkey-devel is earlier than 0:1.0.9-15.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-14.el5_1 AND firefox is earlier than 0:1.5.0.12-14.el5_1 AND thunderbird is earlier than 0:1.5.0.12-11.el5_1

Definition Id: oval:org.mitre.oval:def:9889

Oval ID:	oval:org.mitre.oval:def:9889
Title:	Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.
Description:	Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easier for remote attackers to bypass application protection mechanisms that rely on Referer headers, such as with some Cross-Site Request Forgery (CSRF) mechanisms.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1238	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.16.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.16.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.16.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.16.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-15.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-15.el4 AND thunderbird is earlier than 0:1.5.0.12-10.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-15.el4 AND seamonkey is earlier than 0:1.0.9-15.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4 AND firefox is earlier than 0:1.5.0.12-0.14.el4 AND seamonkey-mail is earlier than 0:1.0.9-15.el4 AND seamonkey-chat is earlier than 0:1.0.9-15.el4 AND seamonkey-nss is earlier than 0:1.0.9-15.el4 AND seamonkey-devel is earlier than 0:1.0.9-15.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-14.el5_1 AND firefox is earlier than 0:1.5.0.12-14.el5_1 AND thunderbird is earlier than 0:1.5.0.12-11.el5_1

Definition Id: oval:org.mitre.oval:def:9897

Oval ID:	oval:org.mitre.oval:def:9897
Title:	Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
Description:	Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0415	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.9.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.9.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.9.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.9.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-9.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-9.el4 AND thunderbird is earlier than 0:1.5.0.12-8.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-9.el4 AND seamonkey is earlier than 0:1.0.9-9.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4 AND firefox is earlier than 0:1.5.0.12-0.10.el4 AND seamonkey-mail is earlier than 0:1.0.9-9.el4 AND seamonkey-chat is earlier than 0:1.0.9-9.el4 AND seamonkey-nss is earlier than 0:1.0.9-9.el4 AND seamonkey-devel is earlier than 0:1.0.9-9.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5 AND thunderbird is earlier than 0:1.5.0.12-8.el5

Definition Id: oval:org.mitre.oval:def:9972

Oval ID:	oval:org.mitre.oval:def:9972
Title:	Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.
Description:	Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-0592	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.9.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.9.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.9.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.9.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.9.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.9.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-9.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-9.el4 AND thunderbird is earlier than 0:1.5.0.12-8.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-9.el4 AND seamonkey is earlier than 0:1.0.9-9.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-9.el4 AND firefox is earlier than 0:1.5.0.12-0.10.el4 AND seamonkey-mail is earlier than 0:1.0.9-9.el4 AND seamonkey-chat is earlier than 0:1.0.9-9.el4 AND seamonkey-nss is earlier than 0:1.0.9-9.el4 AND seamonkey-devel is earlier than 0:1.0.9-9.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-9.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-9.el5 AND firefox is earlier than 0:1.5.0.12-9.el5 AND thunderbird is earlier than 0:1.5.0.12-8.el5

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mozilla Firefox cpe:2.3:a:mozilla:firefox:2.0.0.9:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0:::::::* cpe:2.3:a:mozilla:firefox:2.0:beta1:::::: cpe:2.3:a:mozilla:firefox:2.0:beta_1:::::: cpe:2.3:a:mozilla:firefox:2.0:rc3:::::: cpe:2.3:a:mozilla:firefox:2.0:rc2:::::: cpe:2.3:a:mozilla:firefox:2.0:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:1.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.1:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.9:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.12:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.11:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.10:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.5:-:::::: cpe:2.3:a:mozilla:firefox:1.5:beta2:::::: cpe:2.3:a:mozilla:firefox:1.5:beta1:::::: cpe:2.3:a:mozilla:firefox:1.4.1:::::::* cpe:2.3:a:mozilla:firefox:1.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.0.6::linux::::: cpe:2.3:a:mozilla:firefox:1.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.0:preview_release:::::: cpe:2.3:a:mozilla:firefox:1.0:-:::::: cpe:2.3:a:mozilla:firefox:0.9.3:::::::* cpe:2.3:a:mozilla:firefox:0.9.2:::::::* cpe:2.3:a:mozilla:firefox:0.9.1:::::::* cpe:2.3:a:mozilla:firefox:0.9_rc:::::::* cpe:2.3:a:mozilla:firefox:0.9:rc:::::: cpe:2.3:a:mozilla:firefox:0.9:::::::* cpe:2.3:a:mozilla:firefox:0.8:::::::* cpe:2.3:a:mozilla:firefox:0.7.1:::::::* cpe:2.3:a:mozilla:firefox:0.7:::::::* cpe:2.3:a:mozilla:firefox:0.6.1:::::::* cpe:2.3:a:mozilla:firefox:0.6:::::::* cpe:2.3:a:mozilla:firefox:0.5:::::::* cpe:2.3:a:mozilla:firefox:0.4:::::::* cpe:2.3:a:mozilla:firefox:0.3:::::::* cpe:2.3:a:mozilla:firefox:0.2:::::::* cpe:2.3:a:mozilla:firefox:0.10.1:::::::* cpe:2.3:a:mozilla:firefox:0.10:::::::* cpe:2.3:a:mozilla:firefox:0.1:::::::* cpe:2.3:a:mozilla:firefox:::::::: cpe:2.3:a:mozilla:firefox:::::::x86:* cpe:2.3:a:mozilla:firefox::::::x86::* cpe:2.3:a:mozilla:firefox::::::iphone_os::* cpe:2.3:a:mozilla:firefox::::::-::* cpe:2.3:a:mozilla:firefox::::::android::* cpe:2.3:a:mozilla:firefox:::::android:::* cpe:2.3:a:mozilla:firefox:-:::::::* cpe:2.3:a:mozilla:firefox:-:::::iphone_os::	109
Application	Mozilla Seamonkey cpe:2.3:a:mozilla:seamonkey:1.1.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:::::: cpe:2.3:a:mozilla:seamonkey:1.1.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.17:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.16:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.15:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.14:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.13:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.12:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.11:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.10:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.1:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.1:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.99:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.0:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.0:::::::* cpe:2.3:a:mozilla:seamonkey:1.0::dev::::: cpe:2.3:a:mozilla:seamonkey:1.0::alpha::::: cpe:2.3:a:mozilla:seamonkey:1.0::beta::::: cpe:2.3:a:mozilla:seamonkey:::::::: cpe:2.3:a:mozilla:seamonkey:-:::::::*	39
Application	Mozilla Thunderbird cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:rc1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:2.0:-:::::: cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5:beta2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:beta1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:-:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha2:::::: cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:::::: cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.0:rc:::::: cpe:2.3:a:mozilla:thunderbird:1.0:-:::::: cpe:2.3:a:mozilla:thunderbird:0.9:::::::* cpe:2.3:a:mozilla:thunderbird:0.8:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:0.7:rc:::::: cpe:2.3:a:mozilla:thunderbird:0.7:-:::::: cpe:2.3:a:mozilla:thunderbird:0.6:::::::* cpe:2.3:a:mozilla:thunderbird:0.5:::::::* cpe:2.3:a:mozilla:thunderbird:0.4:::::::* cpe:2.3:a:mozilla:thunderbird:0.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.1:::::::* cpe:2.3:a:mozilla:thunderbird:::::::: cpe:2.3:a:mozilla:thunderbird:::::::x86:* cpe:2.3:a:mozilla:thunderbird:-:::::::*	70
Application	Sun Jdk cpe:2.3:a:sun:jdk:1.6.0:update_4:::::: cpe:2.3:a:sun:jdk:1.6.0:update_3:::::: cpe:2.3:a:sun:jdk:1.6.0:-:::::: cpe:2.3:a:sun:jdk:1.5.0:update10:::::: cpe:2.3:a:sun:jdk:1.5.0:update5:::::: cpe:2.3:a:sun:jdk:1.5.0:update7:::::: cpe:2.3:a:sun:jdk:1.5.0:update6:::::: cpe:2.3:a:sun:jdk:1.5.0:update3:::::: cpe:2.3:a:sun:jdk:1.5.0:update4:::::: cpe:2.3:a:sun:jdk:1.5.0:update9:::::: cpe:2.3:a:sun:jdk:1.5.0:update2:::::: cpe:2.3:a:sun:jdk:1.5.0:update12:::::: cpe:2.3:a:sun:jdk:1.5.0:update8:::::: cpe:2.3:a:sun:jdk:1.5.0:update11:::::: cpe:2.3:a:sun:jdk:1.5.0:update14:::::: cpe:2.3:a:sun:jdk:1.5.0:update13:::::: cpe:2.3:a:sun:jdk:1.5.0:update1:::::: cpe:2.3:a:sun:jdk:1.5.0:-::::::	18
Application	Sun Jre cpe:2.3:a:sun:jre:1.6.0:update_4:::::: cpe:2.3:a:sun:jre:1.6.0:update_1:::::: cpe:2.3:a:sun:jre:1.6.0:update_3:::::: cpe:2.3:a:sun:jre:1.6.0:update_2:::::: cpe:2.3:a:sun:jre:1.6.0:-:::::: cpe:2.3:a:sun:jre:1.5.0:update12:::::: cpe:2.3:a:sun:jre:1.5.0:update10:::::: cpe:2.3:a:sun:jre:1.5.0:update6:::::: cpe:2.3:a:sun:jre:1.5.0:update13:::::: cpe:2.3:a:sun:jre:1.5.0:update14:::::: cpe:2.3:a:sun:jre:1.5.0:update11:::::: cpe:2.3:a:sun:jre:1.5.0:update8:::::: cpe:2.3:a:sun:jre:1.5.0:update1:::::: cpe:2.3:a:sun:jre:1.5.0:update9:::::: cpe:2.3:a:sun:jre:1.5.0:update3:::::: cpe:2.3:a:sun:jre:1.5.0:update4:::::: cpe:2.3:a:sun:jre:1.5.0:update5:::::: cpe:2.3:a:sun:jre:1.5.0:update2:::::: cpe:2.3:a:sun:jre:1.5.0:update7:::::: cpe:2.3:a:sun:jre:1.5.0:-:::::: cpe:2.3:a:sun:jre:1.4.2_9:::::::* cpe:2.3:a:sun:jre:1.4.2_8:::::::* cpe:2.3:a:sun:jre:1.4.2_7:::::::* cpe:2.3:a:sun:jre:1.4.2_6:::::::* cpe:2.3:a:sun:jre:1.4.2_5:::::::* cpe:2.3:a:sun:jre:1.4.2_4:::::::* cpe:2.3:a:sun:jre:1.4.2_3:::::::* cpe:2.3:a:sun:jre:1.4.2_2:::::::* cpe:2.3:a:sun:jre:1.4.2_16:::::::* cpe:2.3:a:sun:jre:1.4.2_15:::::::* cpe:2.3:a:sun:jre:1.4.2_14:::::::* cpe:2.3:a:sun:jre:1.4.2_13:::::::* cpe:2.3:a:sun:jre:1.4.2_12:::::::* cpe:2.3:a:sun:jre:1.4.2_11:::::::* cpe:2.3:a:sun:jre:1.4.2_10:::::::* cpe:2.3:a:sun:jre:1.4.2_1:::::::* cpe:2.3:a:sun:jre:1.4.2:-::::::	37
Application	Sun Sdk cpe:2.3:a:sun:sdk:1.4.2_9:::::::* cpe:2.3:a:sun:sdk:1.4.2_8:::::::* cpe:2.3:a:sun:sdk:1.4.2_7:::::::* cpe:2.3:a:sun:sdk:1.4.2_6:::::::* cpe:2.3:a:sun:sdk:1.4.2_5:::::::* cpe:2.3:a:sun:sdk:1.4.2_4:::::::* cpe:2.3:a:sun:sdk:1.4.2_3:::::::* cpe:2.3:a:sun:sdk:1.4.2_2:::::::* cpe:2.3:a:sun:sdk:1.4.2_16:::::::* cpe:2.3:a:sun:sdk:1.4.2_15:::::::* cpe:2.3:a:sun:sdk:1.4.2_14:::::::* cpe:2.3:a:sun:sdk:1.4.2_13:::::::* cpe:2.3:a:sun:sdk:1.4.2_12:::::::* cpe:2.3:a:sun:sdk:1.4.2_11:::::::* cpe:2.3:a:sun:sdk:1.4.2_10:::::::* cpe:2.3:a:sun:sdk:1.4.2_1:::::::* cpe:2.3:a:sun:sdk:1.4.2:::::::*	17
Os	Canonical Ubuntu Linux cpe:2.3:o:canonical:ubuntu_linux:7.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:7.04:::::::* cpe:2.3:o:canonical:ubuntu_linux:6.10:::::::* cpe:2.3:o:canonical:ubuntu_linux:6.06::::lts:::	4

OpenVAS Exploits

Date	Description
2010-05-28	Name : Java for Mac OS X 10.5 Update 2 File : nvt/macosx_java_for_10_5_upd_2.nasl
2009-10-13	Name : SLES10: Security update for IBM Java 1.4.2 File : nvt/sles10_java-1_4_2-ibm3.nasl
2009-10-13	Name : SLES10: Security update for Sun Java File : nvt/sles10_java-1_4_2-sun1.nasl
2009-10-13	Name : SLES10: Security update for IBM Java 1.5.0 File : nvt/sles10_java-1_5_0-ibm4.nasl
2009-10-13	Name : SLES10: Security update for epiphany File : nvt/sles10_mozilla-xulrunn.nasl
2009-10-10	Name : SLES9: Security update for Mozilla File : nvt/sles9p5021982.nasl
2009-10-10	Name : SLES9: Security update for Mozilla File : nvt/sles9p5022953.nasl
2009-10-10	Name : SLES9: Security update for Java2 File : nvt/sles9p5023078.nasl
2009-10-10	Name : SLES9: Security update for IBM Java 5 and JRE File : nvt/sles9p5023460.nasl
2009-10-10	Name : SLES9: Security update for IBM Java 2 JRE and SDK File : nvt/sles9p5023603.nasl
2009-04-09	Name : Mandriva Update for mozilla-firefox MDVSA-2008:048 (mozilla-firefox) File : nvt/gb_mandriva_MDVSA_2008_048.nasl
2009-04-09	Name : Mandriva Update for mozilla-thunderbird MDVSA-2008:062 (mozilla-thunderbird) File : nvt/gb_mandriva_MDVSA_2008_062.nasl
2009-04-09	Name : Mandriva Update for mozilla-firefox MDVSA-2008:080 (mozilla-firefox) File : nvt/gb_mandriva_MDVSA_2008_080.nasl
2009-04-09	Name : Mandriva Update for mozilla-firefox MDVSA-2008:110 (mozilla-firefox) File : nvt/gb_mandriva_MDVSA_2008_110.nasl
2009-04-09	Name : Mandriva Update for mozilla-thunderbird MDVSA-2008:155 (mozilla-thunderbird) File : nvt/gb_mandriva_MDVSA_2008_155.nasl
2009-04-09	Name : Mandriva Update for mozilla-thunderbird MDVSA-2008:155-1 (mozilla-thunderbird) File : nvt/gb_mandriva_MDVSA_2008_155_1.nasl
2009-03-23	Name : Ubuntu Update for firefox vulnerabilities USN-576-1 File : nvt/gb_ubuntu_USN_576_1.nasl
2009-03-23	Name : Ubuntu Update for mozilla-thunderbird, thunderbird vulnerabilities USN-582-1 File : nvt/gb_ubuntu_USN_582_1.nasl
2009-03-23	Name : Ubuntu Update for mozilla-thunderbird USN-582-2 File : nvt/gb_ubuntu_USN_582_2.nasl
2009-03-23	Name : Ubuntu Update for firefox vulnerabilities USN-592-1 File : nvt/gb_ubuntu_USN_592_1.nasl
2009-03-23	Name : Ubuntu Update for firefox vulnerabilities USN-602-1 File : nvt/gb_ubuntu_USN_602_1.nasl
2009-03-23	Name : Ubuntu Update for mozilla-thunderbird, thunderbird vulnerabilities USN-605-1 File : nvt/gb_ubuntu_USN_605_1.nasl
2009-03-06	Name : RedHat Update for firefox RHSA-2008:0103-01 File : nvt/gb_RHSA-2008_0103-01_firefox.nasl
2009-03-06	Name : RedHat Update for seamonkey RHSA-2008:0104-01 File : nvt/gb_RHSA-2008_0104-01_seamonkey.nasl
2009-03-06	Name : RedHat Update for thunderbird RHSA-2008:0105-01 File : nvt/gb_RHSA-2008_0105-01_thunderbird.nasl
2009-03-06	Name : RedHat Update for thunderbird RHSA-2008:0105-02 File : nvt/gb_RHSA-2008_0105-02_thunderbird.nasl
2009-03-06	Name : RedHat Update for firefox RHSA-2008:0207-01 File : nvt/gb_RHSA-2008_0207-01_firefox.nasl
2009-03-06	Name : RedHat Update for seamonkey RHSA-2008:0208-01 File : nvt/gb_RHSA-2008_0208-01_seamonkey.nasl
2009-03-06	Name : RedHat Update for thunderbird RHSA-2008:0209-01 File : nvt/gb_RHSA-2008_0209-01_thunderbird.nasl
2009-03-06	Name : RedHat Update for firefox RHSA-2008:0222-02 File : nvt/gb_RHSA-2008_0222-02_firefox.nasl
2009-03-06	Name : RedHat Update for seamonkey RHSA-2008:0223-02 File : nvt/gb_RHSA-2008_0223-02_seamonkey.nasl
2009-03-06	Name : RedHat Update for thunderbird RHSA-2008:0224-01 File : nvt/gb_RHSA-2008_0224-01_thunderbird.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0103 centos3 i386 File : nvt/gb_CESA-2008_0103_firefox_centos3_i386.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0103 centos3 x86_64 File : nvt/gb_CESA-2008_0103_firefox_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0103 centos4 i386 File : nvt/gb_CESA-2008_0103_firefox_centos4_i386.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0103 centos4 x86_64 File : nvt/gb_CESA-2008_0103_firefox_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0103 centos5 i386 File : nvt/gb_CESA-2008_0103_firefox_centos5_i386.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0103 centos5 x86_64 File : nvt/gb_CESA-2008_0103_firefox_centos5_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0104-01 centos2 i386 File : nvt/gb_CESA-2008_0104-01_seamonkey_centos2_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0104 centos3 i386 File : nvt/gb_CESA-2008_0104_seamonkey_centos3_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0104 centos3 x86_64 File : nvt/gb_CESA-2008_0104_seamonkey_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0104 centos4 i386 File : nvt/gb_CESA-2008_0104_seamonkey_centos4_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0104 centos4 x86_64 File : nvt/gb_CESA-2008_0104_seamonkey_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for thunderbird CESA-2008:0105 centos4 i386 File : nvt/gb_CESA-2008_0105_thunderbird_centos4_i386.nasl
2009-02-27	Name : CentOS Update for thunderbird CESA-2008:0105 centos4 x86_64 File : nvt/gb_CESA-2008_0105_thunderbird_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for thunderbird CESA-2008:0105 centos5 i386 File : nvt/gb_CESA-2008_0105_thunderbird_centos5_i386.nasl
2009-02-27	Name : CentOS Update for thunderbird CESA-2008:0105 centos5 x86_64 File : nvt/gb_CESA-2008_0105_thunderbird_centos5_x86_64.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0207 centos3 i386 File : nvt/gb_CESA-2008_0207_firefox_centos3_i386.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0207 centos3 x86_64 File : nvt/gb_CESA-2008_0207_firefox_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0207 centos4 i386 File : nvt/gb_CESA-2008_0207_firefox_centos4_i386.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0207 centos4 x86_64 File : nvt/gb_CESA-2008_0207_firefox_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208-01 centos2 i386 File : nvt/gb_CESA-2008_0208-01_seamonkey_centos2_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208 centos3 i386 File : nvt/gb_CESA-2008_0208_seamonkey_centos3_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208 centos3 x86_64 File : nvt/gb_CESA-2008_0208_seamonkey_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208 centos4 i386 File : nvt/gb_CESA-2008_0208_seamonkey_centos4_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208 centos4 x86_64 File : nvt/gb_CESA-2008_0208_seamonkey_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for thunderbird CESA-2008:0209 centos4 i386 File : nvt/gb_CESA-2008_0209_thunderbird_centos4_i386.nasl
2009-02-27	Name : CentOS Update for thunderbird CESA-2008:0209 centos4 x86_64 File : nvt/gb_CESA-2008_0209_thunderbird_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0222 centos4 i386 File : nvt/gb_CESA-2008_0222_firefox_centos4_i386.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0222 centos4 x86_64 File : nvt/gb_CESA-2008_0222_firefox_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223-02 centos2 i386 File : nvt/gb_CESA-2008_0223-02_seamonkey_centos2_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223 centos3 i386 File : nvt/gb_CESA-2008_0223_seamonkey_centos3_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223 centos3 x86_64 File : nvt/gb_CESA-2008_0223_seamonkey_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223 centos4 i386 File : nvt/gb_CESA-2008_0223_seamonkey_centos4_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223 centos4 x86_64 File : nvt/gb_CESA-2008_0223_seamonkey_centos4_x86_64.nasl
2009-02-17	Name : Fedora Update for seamonkey FEDORA-2008-3231 File : nvt/gb_fedora_2008_3231_seamonkey_fc7.nasl
2009-02-17	Name : Fedora Update for Miro FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_Miro_fc7.nasl
2009-02-17	Name : Fedora Update for chmsee FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_chmsee_fc7.nasl
2009-02-17	Name : Fedora Update for devhelp FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_devhelp_fc7.nasl
2009-02-17	Name : Fedora Update for epiphany-extensions FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_epiphany-extensions_fc7.nasl
2009-02-17	Name : Fedora Update for epiphany FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_epiphany_fc7.nasl
2009-02-17	Name : Fedora Update for firefox FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_firefox_fc7.nasl
2009-02-17	Name : Fedora Update for galeon FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_galeon_fc7.nasl
2009-02-17	Name : Fedora Update for gnome-python2-extras FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_gnome-python2-extras_fc7.nasl
2009-02-17	Name : Fedora Update for gtkmozembedmm FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_gtkmozembedmm_fc7.nasl
2009-02-17	Name : Fedora Update for kazehakase FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_kazehakase_fc7.nasl
2009-02-17	Name : Fedora Update for liferea FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_liferea_fc7.nasl
2009-02-17	Name : Fedora Update for openvrml FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_openvrml_fc7.nasl
2009-02-17	Name : Fedora Update for ruby-gnome2 FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_ruby-gnome2_fc7.nasl
2009-02-17	Name : Fedora Update for yelp FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_yelp_fc7.nasl
2009-02-17	Name : Fedora Update for seamonkey FEDORA-2008-3264 File : nvt/gb_fedora_2008_3264_seamonkey_fc8.nasl
2009-02-17	Name : Fedora Update for Miro FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_Miro_fc8.nasl
2009-02-17	Name : Fedora Update for chmsee FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_chmsee_fc8.nasl
2009-02-17	Name : Fedora Update for devhelp FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_devhelp_fc8.nasl
2009-02-17	Name : Fedora Update for epiphany-extensions FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_epiphany-extensions_fc8.nasl
2009-02-17	Name : Fedora Update for epiphany FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_epiphany_fc8.nasl
2009-02-17	Name : Fedora Update for firefox FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_firefox_fc8.nasl
2009-02-17	Name : Fedora Update for galeon FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_galeon_fc8.nasl
2009-02-17	Name : Fedora Update for gnome-python2-extras FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_gnome-python2-extras_fc8.nasl
2009-02-17	Name : Fedora Update for gnome-web-photo FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_gnome-web-photo_fc8.nasl
2009-02-17	Name : Fedora Update for gtkmozembedmm FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_gtkmozembedmm_fc8.nasl
2009-02-17	Name : Fedora Update for kazehakase FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_kazehakase_fc8.nasl
2009-02-17	Name : Fedora Update for liferea FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_liferea_fc8.nasl
2009-02-17	Name : Fedora Update for openvrml FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_openvrml_fc8.nasl
2009-02-17	Name : Fedora Update for ruby-gnome2 FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_ruby-gnome2_fc8.nasl
2009-02-17	Name : Fedora Update for yelp FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_yelp_fc8.nasl
2009-02-17	Name : Fedora Update for thunderbird FEDORA-2008-3519 File : nvt/gb_fedora_2008_3519_thunderbird_fc7.nasl
2009-02-17	Name : Fedora Update for thunderbird FEDORA-2008-3557 File : nvt/gb_fedora_2008_3557_thunderbird_fc8.nasl
2009-02-16	Name : Fedora Update for Miro FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_Miro_fc7.nasl
2009-02-16	Name : Fedora Update for chmsee FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_chmsee_fc7.nasl
2009-02-16	Name : Fedora Update for devhelp FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_devhelp_fc7.nasl
2009-02-16	Name : Fedora Update for epiphany-extensions FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_epiphany-extensions_fc7.nasl
2009-02-16	Name : Fedora Update for epiphany FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_epiphany_fc7.nasl
2009-02-16	Name : Fedora Update for firefox FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_firefox_fc7.nasl
2009-02-16	Name : Fedora Update for galeon FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_galeon_fc7.nasl
2009-02-16	Name : Fedora Update for gnome-python2-extras FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_gnome-python2-extras_fc7.nasl
2009-02-16	Name : Fedora Update for gtkmozembedmm FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_gtkmozembedmm_fc7.nasl
2009-02-16	Name : Fedora Update for kazehakase FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_kazehakase_fc7.nasl
2009-02-16	Name : Fedora Update for liferea FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_liferea_fc7.nasl
2009-02-16	Name : Fedora Update for openvrml FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_openvrml_fc7.nasl
2009-02-16	Name : Fedora Update for ruby-gnome2 FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_ruby-gnome2_fc7.nasl
2009-02-16	Name : Fedora Update for yelp FEDORA-2008-1435 File : nvt/gb_fedora_2008_1435_yelp_fc7.nasl
2009-02-16	Name : Fedora Update for seamonkey FEDORA-2008-1459 File : nvt/gb_fedora_2008_1459_seamonkey_fc8.nasl
2009-02-16	Name : Fedora Update for Miro FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_Miro_fc8.nasl
2009-02-16	Name : Fedora Update for blam FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_blam_fc8.nasl
2009-02-16	Name : Fedora Update for chmsee FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_chmsee_fc8.nasl
2009-02-16	Name : Fedora Update for devhelp FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_devhelp_fc8.nasl
2009-02-16	Name : Fedora Update for epiphany-extensions FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_epiphany-extensions_fc8.nasl
2009-02-16	Name : Fedora Update for epiphany FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_epiphany_fc8.nasl
2009-02-16	Name : Fedora Update for firefox FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_firefox_fc8.nasl
2009-02-16	Name : Fedora Update for galeon FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_galeon_fc8.nasl
2009-02-16	Name : Fedora Update for gnome-python2-extras FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_gnome-python2-extras_fc8.nasl
2009-02-16	Name : Fedora Update for gnome-web-photo FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_gnome-web-photo_fc8.nasl
2009-02-16	Name : Fedora Update for gtkmozembedmm FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_gtkmozembedmm_fc8.nasl
2009-02-16	Name : Fedora Update for kazehakase FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_kazehakase_fc8.nasl
2009-02-16	Name : Fedora Update for liferea FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_liferea_fc8.nasl
2009-02-16	Name : Fedora Update for openvrml FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_openvrml_fc8.nasl
2009-02-16	Name : Fedora Update for ruby-gnome2 FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_ruby-gnome2_fc8.nasl
2009-02-16	Name : Fedora Update for yelp FEDORA-2008-1535 File : nvt/gb_fedora_2008_1535_yelp_fc8.nasl
2009-02-16	Name : Fedora Update for seamonkey FEDORA-2008-1669 File : nvt/gb_fedora_2008_1669_seamonkey_fc7.nasl
2009-02-16	Name : Fedora Update for thunderbird FEDORA-2008-2060 File : nvt/gb_fedora_2008_2060_thunderbird_fc8.nasl
2009-02-16	Name : Fedora Update for thunderbird FEDORA-2008-2118 File : nvt/gb_fedora_2008_2118_thunderbird_fc7.nasl
2009-02-16	Name : Fedora Update for Miro FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_Miro_fc7.nasl
2009-02-16	Name : Fedora Update for chmsee FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_chmsee_fc7.nasl
2009-02-16	Name : Fedora Update for devhelp FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_devhelp_fc7.nasl
2009-02-16	Name : Fedora Update for epiphany-extensions FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_epiphany-extensions_fc7.nasl
2009-02-16	Name : Fedora Update for epiphany FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_epiphany_fc7.nasl
2009-02-16	Name : Fedora Update for firefox FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_firefox_fc7.nasl
2009-02-16	Name : Fedora Update for galeon FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_galeon_fc7.nasl
2009-02-16	Name : Fedora Update for gnome-python2-extras FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_gnome-python2-extras_fc7.nasl
2009-02-16	Name : Fedora Update for gtkmozembedmm FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_gtkmozembedmm_fc7.nasl
2009-02-16	Name : Fedora Update for kazehakase FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_kazehakase_fc7.nasl
2009-02-16	Name : Fedora Update for liferea FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_liferea_fc7.nasl
2009-02-16	Name : Fedora Update for openvrml FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_openvrml_fc7.nasl
2009-02-16	Name : Fedora Update for ruby-gnome2 FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_ruby-gnome2_fc7.nasl
2009-02-16	Name : Fedora Update for yelp FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_yelp_fc7.nasl
2009-02-16	Name : Fedora Update for Miro FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_Miro_fc8.nasl
2009-02-16	Name : Fedora Update for blam FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_blam_fc8.nasl
2009-02-16	Name : Fedora Update for chmsee FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_chmsee_fc8.nasl
2009-02-16	Name : Fedora Update for devhelp FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_devhelp_fc8.nasl
2009-02-16	Name : Fedora Update for epiphany-extensions FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_epiphany-extensions_fc8.nasl
2009-02-16	Name : Fedora Update for epiphany FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_epiphany_fc8.nasl
2009-02-16	Name : Fedora Update for firefox FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_firefox_fc8.nasl
2009-02-16	Name : Fedora Update for galeon FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_galeon_fc8.nasl
2009-02-16	Name : Fedora Update for gnome-python2-extras FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_gnome-python2-extras_fc8.nasl
2009-02-16	Name : Fedora Update for gnome-web-photo FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_gnome-web-photo_fc8.nasl
2009-02-16	Name : Fedora Update for gtkmozembedmm FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_gtkmozembedmm_fc8.nasl
2009-02-16	Name : Fedora Update for kazehakase FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_kazehakase_fc8.nasl
2009-02-16	Name : Fedora Update for liferea FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_liferea_fc8.nasl
2009-02-16	Name : Fedora Update for openvrml FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_openvrml_fc8.nasl
2009-02-16	Name : Fedora Update for ruby-gnome2 FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_ruby-gnome2_fc8.nasl
2009-02-16	Name : Fedora Update for yelp FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_yelp_fc8.nasl
2009-01-23	Name : SuSE Update for MozillaFirefox,seamonkey SUSE-SA:2008:008 File : nvt/gb_suse_2008_008.nasl
2009-01-23	Name : SuSE Update for Sun Java SUSE-SA:2008:018 File : nvt/gb_suse_2008_018.nasl
2009-01-23	Name : SuSE Update for MozillaFirefox SUSE-SA:2008:019 File : nvt/gb_suse_2008_019.nasl
2009-01-23	Name : SuSE Update for IBMJava2,IBMJava5,java-1_4_2-ibm,java-1_5_0-ibm SUSE-SA:2008... File : nvt/gb_suse_2008_025.nasl
2009-01-13	Name : Debian Security Advisory DSA 1696-1 (icedove) File : nvt/deb_1696_1.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200804-20 (sun-jdk, sun-jre-bin, emul-linux-x86... File : nvt/glsa_200804_20.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200804-28 (jrockit-jdk-bin) File : nvt/glsa_200804_28.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200805-18 (mozilla ...) File : nvt/glsa_200805_18.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200806-11 (ibm-jdk-bin ibm-jre-bin) File : nvt/glsa_200806_11.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200808-03 (mozilla ...) File : nvt/glsa_200808_03.nasl
2008-09-04	Name : FreeBSD Ports: firefox File : nvt/freebsd_firefox31.nasl
2008-09-04	Name : FreeBSD Ports: firefox File : nvt/freebsd_firefox32.nasl
2008-09-04	Name : FreeBSD Ports: firefox File : nvt/freebsd_firefox33.nasl
2008-06-17	Name : Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Lin) File : nvt/mozilla_CB-A08-0017.nasl
2008-06-17	Name : Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Win) File : nvt/smbcl_mozilla.nasl
2008-05-27	Name : Debian Security Advisory DSA 1574-1 (icedove) File : nvt/deb_1574_1.nasl
2008-04-30	Name : Debian Security Advisory DSA 1534-2 (iceape) File : nvt/deb_1534_2.nasl
2008-04-30	Name : Debian Security Advisory DSA 1555-1 (iceweasel) File : nvt/deb_1555_1.nasl
2008-04-30	Name : Debian Security Advisory DSA 1558-1 (xulrunner) File : nvt/deb_1558_1.nasl
2008-04-30	Name : Debian Security Advisory DSA 1562-1 (iceape) File : nvt/deb_1562_1.nasl
2008-04-07	Name : Debian Security Advisory DSA 1532-1 (xulrunner) File : nvt/deb_1532_1.nasl
2008-04-07	Name : Debian Security Advisory DSA 1534-1 (iceape) File : nvt/deb_1534_1.nasl
2008-04-07	Name : Debian Security Advisory DSA 1535-1 (iceweasel) File : nvt/deb_1535_1.nasl
2008-03-27	Name : Debian Security Advisory DSA 1506-2 (iceape) File : nvt/deb_1506_2.nasl
2008-03-19	Name : Debian Security Advisory DSA 1485-2 (icedove) File : nvt/deb_1485_2.nasl
2008-02-28	Name : Debian Security Advisory DSA 1506-1 (iceape) File : nvt/deb_1506_1.nasl
2008-02-15	Name : Debian Security Advisory DSA 1484-1 (xulrunner) File : nvt/deb_1484_1.nasl
2008-02-15	Name : Debian Security Advisory DSA 1485-1 (icedove) File : nvt/deb_1485_1.nasl
2008-02-15	Name : Debian Security Advisory DSA 1489-1 (iceweasel) File : nvt/deb_1489_1.nasl
0000-00-00	Name : Slackware Advisory SSA:2008-061-01 mozilla-thunderbird File : nvt/esoft_slk_ssa_2008_061_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2008-108-01 mozilla-firefox File : nvt/esoft_slk_ssa_2008_108_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2008-128-02 mozilla-thunderbird File : nvt/esoft_slk_ssa_2008_128_02.nasl
0000-00-00	Name : Slackware Advisory SSA:2008-191-03 seamonkey File : nvt/esoft_slk_ssa_2008_191_03.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
44467	Mozilla Multiple Products Javascript Garbage Collector DoS
43878	Mozilla Multiple Products pref_DoCallback nsPref:changed Notification Observ...
43877	Mozilla Multiple Products on Mac OS X Quartz Drawing Code Malformed Image Di...
43876	Mozilla Multiple Products ARGB32_image_ARGB32() GIF Handling DoS
43875	Mozilla Multiple Products Window Zooming Unspecified DoS
43874	Mozilla Multiple Products DocumentViewerImpl::Destroy Popup DoS
43873	Mozilla Multiple Products GetNearestCapturingView iframe Style Editing DoS
43872	Mozilla Multiple Products JS_ValueToId Null String Handling DoS
43871	Mozilla Multiple Products js_FilterXMLList Block Object Handling DoS
43870	Mozilla Multiple Products JSOP_NEG js_NewNumberValue SAVE_SP_AND_PC Unspecif...
43869	Mozilla Multiple Products jsobj.c fp Assertion Failure Unspecified DoS
43868	Mozilla Multiple Products jsinterp.c Multiple Macros SAVE_SP_AND_PC Privileg...
43867	Mozilla Multiple Products JS_CompileUCFunctionForPrincipals js_NewFunction P...
43866	Mozilla Multiple Products JSOP_YIELD / JSOP_ARRAYPUSH SAVE_SP_AND_PC Privile...
43865	Mozilla Multiple Products XPCNativeWrapper Chrome XBL Method Bypass
43864	Mozilla Multiple Products XPCNativeWrapper tabbrowser.xml Multiple Function ...
43863	Mozilla Multiple Products XPCNativeWrapper Function Constructor Arbitrary Co...
43862	Mozilla Multiple Products XPCNativeWrapper setTimeout() Arbitrary Code Execu...
43861	Mozilla Multiple Products XMLHttpRequest Event Handler XSS
43860	Mozilla Multiple Products XMLDocument.load() Event Handler XSS
43859	Mozilla Multiple Products Indirect Eval Cross Principal Code Execution
43858	Mozilla Multiple Products js_ValueToFunctionObject Cloned Function Privilege...
43857	Mozilla Multiple Products Mixed Principal Overlay Privilege Escalation
43849	Mozilla Multiple Browsers Basic Authentication Referrer Header Spoofing
43848	Mozilla Multiple Browsers SSL Client Authentication Certificate Information D...
43847	Mozilla Multiple Browsers LiveConnect jar: Protocol Handling Arbitrary Local ...
43846	Mozilla Multiple Browsers Cross-tab XUL Pop-up Spoofing
43462	Mozilla Multiple Products XML Document XMLDocument.cloneNode() Function Arbi... Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
43461	Mozilla Multiple Products XMLDocument.load() Subframe XSS Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
43460	Mozilla Multiple Products DOMImplementation.createDocument() Arbitrary Code ... Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
43459	Mozilla Multiple Products XPCNativeWrapper Redefine Bypass Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
43458	Mozilla Multiple Products XPCNativeWrapper js_GetClassPrototype .prototype B... Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
43457	Mozilla Multiple Products Array.prototype Method javascript: URL XSS Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
43456	Mozilla Multiple Products Exception Objects PAC Privilege Escalation Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
43226	Mozilla Firefox DIV Tag Web Forgery Warning Bypass
42601	Sun Java JRE JavaScript Arbitrary Java API Access Java JRE/JDK contains a flaw that may allow a malicious user to execute arbitrary code. The issue is triggered when a Java applet is able to access arbitrary network services via unspecified vectors in the Java API. It is possible that the flaw may allow arbitrary code execution resulting in a loss of integrity.
42057	Mozilla Multiple Browsers Crafted BMP File Unspecified Remote Information Dis...
42056	Mozilla Multiple Browsers Character Encoding Multiple Unspecified XSS
41225	Mozilla Multiple Browsers Locally Saved Plain-text File Handling Manipulation Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a "Content-Disposition: attachment" and an invalid "Content-Type: plain/text," which prevents Firefox from rendering future plain text files within the browser.
41224	Mozilla Firefox Stored Password Corruption CRLF CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the user's password store via newlines that are not properly handled when the user saves a password.
41223	Mozilla Multiple Products JavaScript Engine Multiple Unspecified Memory Corr... The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to cause a denial of service (crash) and possibly trigger memory corruption via (1) a large switch statement, (2) certain uses of watch and eval, (3) certain uses of the mousedown event listener, and other vectors.
41222	Mozilla Multiple Products Browser Engine Multiple Unspecified Memory Corruption
41221	Mozilla Multiple Browsers File Input Focus Stealing Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing."
41220	Mozilla Multiple Products xpconnect Multiple Function javascript: URI Handli... Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to execute script outside of the sandbox and conduct cross-site scripting (XSS) attacks via multiple vectors including the XMLDocument.load function, aka "JavaScript privilege escalation bugs."
41218	Mozilla Multiple Browsers designMode Frame Forward Navigation Information Dis... Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and cause a denial of service (crash) via images in a page that uses designMode frames, which triggers memory corruption related to resize handles.
41217	Mozilla Multiple Browsers Timer-enabled Security Dialog Tampering Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 allows user-assisted remote attackers to cause users to confirm a timer-enabled security dialog by using a timer to change the window focus.
41215	Mozilla Multiple Browsers Stylesheet Redirect URL Token Disclosure Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modifies the .href property of stylesheet DOM nodes to the final URI of a 302 redirect, which might allow remote attackers to bypass the Same Origin Policy and read sensitive information from the original URL, such as with Single-Signon systems.
41187	Mozilla Firefox chrome: URI Traversal Local Script Inclusion Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8, when using "flat" addons, allows remote attackers to read arbitrary Javascript, image, and stylesheet files via the chrome: URI scheme, as demonstrated by stealing session information from sessionstore.js.
38036	Mozilla Firefox TLS Client Certificate Cross Domain Tracking

Snort® IPS/IDS

Date	Description
2014-01-10	Mozilla Firefox IFRAME style change handling code execution RuleID : 17570 - Revision : 5 - Type : BROWSER-FIREFOX
2014-01-10	Mozilla Firefox IFRAME style change handling code execution RuleID : 13838 - Revision : 12 - Type : BROWSER-FIREFOX

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0103.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0104.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2008-0105.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0207.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0208.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2008-0209.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0222.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0223.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2008-0224.nasl - Type : ACT_GATHER_INFO
2013-03-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-582-2.nasl - Type : ACT_GATHER_INFO
2013-01-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0267.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080207_firefox_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080207_seamonkey_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20080207_thunderbird_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080326_firefox_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080327_seamonkey_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20080403_thunderbird_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080416_firefox_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080416_seamonkey_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080714_java__jdk_1_5_0__on_SL4_x.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2008-0224.nasl - Type : ACT_GATHER_INFO
2009-09-24	Name : The remote SuSE 9 host is missing a security-related patch. File : suse9_12142.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0132.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0186.nasl - Type : ACT_GATHER_INFO
2009-08-24	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0210.nasl - Type : ACT_GATHER_INFO
2009-07-27	Name : The remote VMware ESX host is missing a security-related patch. File : vmware_VMSA-2008-0010.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-048.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-062.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-080.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-110.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-155.nasl - Type : ACT_GATHER_INFO
2009-01-08	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1696.nasl - Type : ACT_GATHER_INFO
2008-09-25	Name : The remote host is affected by multiple vulnerabilities. File : macosx_java_10_5_update2.nasl - Type : ACT_GATHER_INFO
2008-09-25	Name : The remote host is affected by multiple vulnerabilities. File : macosx_java_rel7.nasl - Type : ACT_GATHER_INFO
2008-08-07	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200808-03.nasl - Type : ACT_GATHER_INFO
2008-07-10	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2008-191-03.nasl - Type : ACT_GATHER_INFO
2008-07-02	Name : A web browser on the remote host is affected by multiple vulnerabilities. File : seamonkey_1110.nasl - Type : ACT_GATHER_INFO
2008-06-09	Name : The remote openSUSE host is missing a security update. File : suse_MozillaThunderbird-5280.nasl - Type : ACT_GATHER_INFO
2008-06-09	Name : The remote openSUSE host is missing a security update. File : suse_MozillaThunderbird-5329.nasl - Type : ACT_GATHER_INFO
2008-06-09	Name : The remote openSUSE host is missing a security update. File : suse_epiphany-5293.nasl - Type : ACT_GATHER_INFO
2008-05-28	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2008-128-02.nasl - Type : ACT_GATHER_INFO
2008-05-22	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200805-18.nasl - Type : ACT_GATHER_INFO
2008-05-13	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1574.nasl - Type : ACT_GATHER_INFO
2008-05-11	Name : The remote Fedora host is missing a security update. File : fedora_2008-3519.nasl - Type : ACT_GATHER_INFO
2008-05-11	Name : The remote Fedora host is missing a security update. File : fedora_2008-3557.nasl - Type : ACT_GATHER_INFO
2008-05-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-605-1.nasl - Type : ACT_GATHER_INFO
2008-05-06	Name : The remote Windows host contains a mail client that is affected by multiple v... File : mozilla_thunderbird_20014.nasl - Type : ACT_GATHER_INFO
2008-05-01	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1562.nasl - Type : ACT_GATHER_INFO
2008-05-01	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2008-0224.nasl - Type : ACT_GATHER_INFO
2008-05-01	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-5218.nasl - Type : ACT_GATHER_INFO
2008-05-01	Name : The remote openSUSE host is missing a security update. File : suse_MozillaFirefox-5219.nasl - Type : ACT_GATHER_INFO
2008-04-28	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1558.nasl - Type : ACT_GATHER_INFO
2008-04-28	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_67bd39ba12b511ddbab70016179b2dd5.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1555.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Fedora host is missing a security update. File : fedora_2008-3231.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-3249.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Fedora host is missing a security update. File : fedora_2008-3264.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-3283.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-ibm-5182.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_5_0-ibm-5183.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-602-1.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2008-108-01.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0222.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0223.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200804-20.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote openSUSE host is missing a security update. File : suse_mozilla-xulrunner-5163.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote openSUSE host is missing a security update. File : suse_mozilla-xulrunner181-5158.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote openSUSE host is missing a security update. File : suse_seamonkey-5167.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0222.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0223.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner-5164.nasl - Type : ACT_GATHER_INFO
2008-04-17	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2008-0209.nasl - Type : ACT_GATHER_INFO
2008-04-17	Name : The remote Windows host contains a web browser that may allow arbitrary code ... File : mozilla_firefox_20014.nasl - Type : ACT_GATHER_INFO
2008-04-11	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1535.nasl - Type : ACT_GATHER_INFO
2008-04-11	Name : The remote openSUSE host is missing a security update. File : suse_seamonkey-5153.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2008-0209.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote openSUSE host is missing a security update. File : suse_java-1_4_2-sun-5130.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_java-1_4_2-sun-5131.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote openSUSE host is missing a security update. File : suse_java-1_5_0-sun-5133.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote openSUSE host is missing a security update. File : suse_java-1_6_0-sun-5132.nasl - Type : ACT_GATHER_INFO
2008-04-01	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-5134.nasl - Type : ACT_GATHER_INFO
2008-03-31	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1532.nasl - Type : ACT_GATHER_INFO
2008-03-31	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1534.nasl - Type : ACT_GATHER_INFO
2008-03-31	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_12b336c6fe3611dcb09c001c2514716c.nasl - Type : ACT_GATHER_INFO
2008-03-31	Name : The remote openSUSE host is missing a security update. File : suse_MozillaFirefox-5135.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0207.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0208.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-2662.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-2682.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0207.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0208.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner-5118.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote openSUSE host is missing a security update. File : suse_mozilla-xulrunner-5123.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-592-1.nasl - Type : ACT_GATHER_INFO
2008-03-26	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_20013.nasl - Type : ACT_GATHER_INFO
2008-03-26	Name : A web browser on the remote host is affected by multiple vulnerabilities. File : seamonkey_119.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote openSUSE host is missing a security update. File : suse_MozillaThunderbird-5095.nasl - Type : ACT_GATHER_INFO
2008-03-19	Name : The remote openSUSE host is missing a security update. File : suse_epiphany-5102.nasl - Type : ACT_GATHER_INFO
2008-03-17	Name : The remote openSUSE host is missing a security update. File : suse_MozillaThunderbird-5098.nasl - Type : ACT_GATHER_INFO
2008-03-04	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2008-061-01.nasl - Type : ACT_GATHER_INFO
2008-03-04	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-582-1.nasl - Type : ACT_GATHER_INFO
2008-02-29	Name : The remote Fedora host is missing a security update. File : fedora_2008-2060.nasl - Type : ACT_GATHER_INFO
2008-02-29	Name : The remote Fedora host is missing a security update. File : fedora_2008-2118.nasl - Type : ACT_GATHER_INFO
2008-02-27	Name : The remote Windows host contains a mail client that is affected by multiple v... File : mozilla_thunderbird_20012.nasl - Type : ACT_GATHER_INFO
2008-02-25	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1506.nasl - Type : ACT_GATHER_INFO
2008-02-25	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_810a5197e0d911dc891a02061b08fc24.nasl - Type : ACT_GATHER_INFO
2008-02-22	Name : The remote Windows host contains a web browser that is affected by multiple v... File : netscape_browser_9006.nasl - Type : ACT_GATHER_INFO
2008-02-18	Name : The remote openSUSE host is missing a security update. File : suse_seamonkey-5011.nasl - Type : ACT_GATHER_INFO
2008-02-18	Name : The remote openSUSE host is missing a security update. File : suse_seamonkey-5012.nasl - Type : ACT_GATHER_INFO
2008-02-14	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-1435.nasl - Type : ACT_GATHER_INFO
2008-02-14	Name : The remote Fedora host is missing a security update. File : fedora_2008-1459.nasl - Type : ACT_GATHER_INFO
2008-02-14	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-1535.nasl - Type : ACT_GATHER_INFO
2008-02-14	Name : The remote Fedora host is missing a security update. File : fedora_2008-1669.nasl - Type : ACT_GATHER_INFO
2008-02-14	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-5001.nasl - Type : ACT_GATHER_INFO
2008-02-14	Name : The remote openSUSE host is missing a security update. File : suse_MozillaFirefox-5002.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0103.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0104.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2008-0105.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1484.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1485.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1489.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0103.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0104.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2008-0105.nasl - Type : ACT_GATHER_INFO
2008-02-11	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-576-1.nasl - Type : ACT_GATHER_INFO
2008-02-08	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_20012.nasl - Type : ACT_GATHER_INFO
2008-02-08	Name : A web browser on the remote host is affected by multiple vulnerabilities. File : seamonkey_118.nasl - Type : ACT_GATHER_INFO

Global Informations

Type	Count
CWE ID(s)	18
Oval ID(s)	46
CPE ID(s)	294
osvdb(s)	49
Openvas Exploit(s)	195
Snort® Rule(s)	2
Nessus® Exploit(s)	127

	Related
9.3	VU#879056
9.3	VU#466521
9.3	CVE-2008-1380
9.3	CVE-2008-1235
9.3	CVE-2008-1195
9.3	CVE-2008-0420
9.3	CVE-2008-0419
9.3	CVE-2008-0413
9.3	CVE-2008-0412
6.8	CVE-2008-1237
6.8	CVE-2008-1236
6.8	CVE-2008-1233
5	CVE-2008-1240
5	CVE-2008-1238
5	CVE-2008-0594
5	CVE-2007-4879
4.3	VU#309608
4.3	CVE-2008-1241
4.3	CVE-2008-1234
4.3	CVE-2008-0593
4.3	CVE-2008-0592
4.3	CVE-2008-0591
4.3	CVE-2008-0418
4.3	CVE-2008-0417
4.3	CVE-2008-0416
4.3	CVE-2008-0415
4.3	CVE-2008-0414
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 27 more Alert(s)