9.3 - VU#441529

Executive Summary

Summary
Title	Mozilla Firefox JavaScript engine fails to properly handle garbage collection

Informations
Name	VU#441529	First vendor Publication	2008-04-18
Vendor	VU-CERT	Last vendor Modification	2008-04-18
Severity (Vendor)	N/A	Revision	M

Security-Database Scoring CVSS v3

Cvss vector : N/A
Overall CVSS Score	NA
Base Score	NA	Environmental Score	NA
impact SubScore	NA	Temporal Score	NA
Exploitabality Sub Score	NA

Calculate full CVSS 3.0 Vectors scores

Security-Database Scoring CVSS v2

Cvss vector : (AV:N/AC:M/Au:N/C:C/I:C/A:C)
Cvss Base Score	9.3	Attack Range	Network
Cvss Impact Score	10	Attack Complexity	Medium
Cvss Expoit Score	8.6	Authentication	None Required
Calculate full CVSS 2.0 Vectors scores

Detail

Vulnerability Note VU#441529

Mozilla Firefox JavaScript engine fails to properly handle garbage collection

Overview

Mozilla Firefox JavaScript engine fails to properly handle garbage collection. This vulnerability result in memory corruption, which in some cases may be exploitable to execute arbitrary code.

I. Description

Per Mozilla Foundation Security Advisory 2008-20:

Fixes for security problems in the JavaScript engine described in MFSA 2008-15 (CVE-2008-1237) introduced a stability problem, where some users experienced crashes during JavaScript garbage collection. This is being fixed primarily to address stability concerns. We have no demonstration that this particular crash is exploitable but are issuing this advisory because some crashes of this type have been shown to be exploitable in the past.

II. Impact

A remote, unauthenticated attacker may be able to cause a vulnerable version of the Firefox browser to crash.

III. Solution

Upgrade

Users are encouraged to update to Firefox 2.0.0.14, Thunderbird 2.0.0.14, or SeaMonkey 1.1.10.

Use NoScript
Using the Mozilla Firefox NoScript extension to whitelist web sites that can run scripts and access installed plugins will mitigate this vulnerability. See the NoScript FAQ for more information.

Systems Affected

Vendor	Status	Date Updated
Mozilla	Vulnerable	18-Apr-2008

References

http://www.mozilla.org/security/announce/2008/mfsa2008-20.html
http://www.security-database.com/detail.php?cve=CVE-2008-1380
http://noscript.net/faq

Credit

This document was written by Ryan Giobbi.

Other Information

Date Public	04/16/2008
Date First Published	04/18/2008 11:21:29 AM
Date Last Updated	04/18/2008
CERT Advisory
CVE Name	CVE-2008-1380
US-CERT Technical Alerts
Metric	0.00
Document Revision	4

Original Source

Url : http://www.kb.cert.org/vuls/id/441529

CWE : Common Weakness Enumeration

%	Id	Name
100 %	CWE-399	Resource Management Errors

OVAL Definitions

Definition Id: oval:org.mitre.oval:def:10752

Oval ID:	oval:org.mitre.oval:def:10752
Title:	The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
Description:	The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1380	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.17.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.17.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.17.el3 AND seamonkey is earlier than 0:1.0.9-0.17.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.17.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.17.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.17.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.17.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.17.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.17.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-16.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-16.el4 AND thunderbird is earlier than 0:1.5.0.12-11.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-16.el4 AND seamonkey is earlier than 0:1.0.9-16.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-16.el4 AND firefox is earlier than 0:1.5.0.12-0.15.el4 AND seamonkey-mail is earlier than 0:1.0.9-16.el4 AND seamonkey-chat is earlier than 0:1.0.9-16.el4 AND seamonkey-nss is earlier than 0:1.0.9-16.el4 AND seamonkey-devel is earlier than 0:1.0.9-16.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-16.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-15.el5_1 AND firefox is earlier than 0:1.5.0.12-15.el5_1 AND thunderbird is earlier than 0:1.5.0.12-12.el5_1

Definition Id: oval:org.mitre.oval:def:17490

Oval ID:	oval:org.mitre.oval:def:17490
Title:	USN-605-1 -- mozilla-thunderbird, thunderbird vulnerabilities
Description:	Various flaws were discovered in the JavaScript engine.
Family:	unix	Class:	patch
Reference(s):	USN-605-1 CVE-2008-1233 CVE-2008-1234 CVE-2008-1235 CVE-2008-1236 CVE-2008-1237	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 7.04 Ubuntu 7.10 Ubuntu 8.04	Product(s):	mozilla-thunderbird thunderbird
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080417a-0ubuntu0.6.06.1 AND Release section Ubuntu 7.04 is installed AND mozilla-thunderbird DPKG is earlier than 1.5.0.13+1.5.0.15~prepatch080417a-0ubuntu0.7.04.1 AND Release section Ubuntu 7.10 is installed AND thunderbird DPKG is earlier than 2.0.0.14+nobinonly-0ubuntu0.7.10.0 AND Release section Ubuntu 8.04 is installed AND thunderbird DPKG is earlier than 2.0.0.14+nobinonly-0ubuntu0.8.04.1

Definition Id: oval:org.mitre.oval:def:17739

Oval ID:	oval:org.mitre.oval:def:17739
Title:	USN-602-1 -- firefox vulnerabilities
Description:	Flaws were discovered in Firefox which could lead to crashes during JavaScript garbage collection.
Family:	unix	Class:	patch
Reference(s):	USN-602-1 CVE-2008-1380	Version:	7
Platform(s):	Ubuntu 6.06 Ubuntu 6.10 Ubuntu 7.04 Ubuntu 7.10	Product(s):	firefox
Definition Synopsis:
Release section Ubuntu 6.06 is installed AND firefox DPKG is earlier than 1.5.dfsg+1.5.0.15~prepatch080417a-0ubuntu1 AND Release section Ubuntu 6.10 is installed AND firefox DPKG is earlier than 2.0.0.14+0nobinonly-0ubuntu0.6.10 AND Release section Ubuntu 7.04 is installed AND firefox DPKG is earlier than 2.0.0.14+1nobinonly-0ubuntu0.7.4 AND Release section Ubuntu 7.10 is installed AND firefox DPKG is earlier than 2.0.0.14+2nobinonly-0ubuntu0.7.10

Definition Id: oval:org.mitre.oval:def:18288

Oval ID:	oval:org.mitre.oval:def:18288
Title:	DSA-1558-1 xulrunner - arbitrary code execution
Description:	It was discovered that crashes in the Javascript engine of xulrunner, the Gecko engine library, could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1558-1 CVE-2008-1380	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND xulrunner DPKG is earlier than 1.8.0.15~pre080323b-0etch2

Definition Id: oval:org.mitre.oval:def:18644

Oval ID:	oval:org.mitre.oval:def:18644
Title:	DSA-1555-1 iceweasel - arbitrary code execution
Description:	It was discovered that crashes in the Javascript engine of Iceweasel, an unbranded version of the Firefox browser, could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1555-1 CVE-2008-1380	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceweasel
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND iceweasel DPKG is earlier than 2.0.0.14-0etch1

Definition Id: oval:org.mitre.oval:def:18703

Oval ID:	oval:org.mitre.oval:def:18703
Title:	DSA-1562-1 iceape - arbitrary code execution
Description:	It was discovered that crashes in the JavaScript engine of Iceape, an unbranded version of the Seamonkey internet suite could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1562-1 CVE-2008-1380	Version:	7
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceape
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. AND iceape DPKG is earlier than 1.0.13~pre080323b-0etch3

Definition Id: oval:org.mitre.oval:def:21766

Oval ID:	oval:org.mitre.oval:def:21766
Title:	ELSA-2008:0222: firefox security update (Critical)
Description:	The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0222-02 CVE-2008-1380	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	firefox
Definition Synopsis:
Oracle Linux 5.x rpm test firefox-devel is earlier than 0:1.5.0.12-15.el5_1 AND firefox is earlier than 0:1.5.0.12-15.el5_1

Definition Id: oval:org.mitre.oval:def:21830

Oval ID:	oval:org.mitre.oval:def:21830
Title:	ELSA-2008:0224: thunderbird security update (Moderate)
Description:	The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.
Family:	unix	Class:	patch
Reference(s):	ELSA-2008:0224-01 CVE-2008-1380	Version:	6
Platform(s):	Oracle Linux 5	Product(s):	thunderbird
Definition Synopsis:
Oracle Linux 5.x AND thunderbird is earlier than 0:1.5.0.12-12.el5_1

Definition Id: oval:org.mitre.oval:def:8001

Oval ID:	oval:org.mitre.oval:def:8001
Title:	DSA-1555 iceweasel -- programming error
Description:	It was discovered that crashes in the Javascript engine of Iceweasel, an unbranded version of the Firefox browser, could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1555 CVE-2008-1380	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceweasel
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section mozilla-firefox is earlier than 2.0.0.14-0etch1 AND firefox is earlier than 2.0.0.14-0etch1 AND firefox-dom-inspector is earlier than 2.0.0.14-0etch1 AND iceweasel-dom-inspector is earlier than 2.0.0.14-0etch1 AND mozilla-firefox-gnome-support is earlier than 2.0.0.14-0etch1 AND mozilla-firefox-dom-inspector is earlier than 2.0.0.14-0etch1 AND firefox-gnome-support is earlier than 2.0.0.14-0etch1 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is ia64 AND Installed architecture is mips AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section iceweasel-gnome-support is earlier than 2.0.0.14-0etch1 AND iceweasel-dbg is earlier than 2.0.0.14-0etch1 AND iceweasel is earlier than 2.0.0.14-0etch1

Definition Id: oval:org.mitre.oval:def:8062

Oval ID:	oval:org.mitre.oval:def:8062
Title:	DSA-1562 iceape -- programming error
Description:	It was discovered that crashes in the JavaScript engine of Iceape, an unbranded version of the Seamonkey internet suite could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1562 CVE-2008-1380	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	iceape
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section mozilla-calendar is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-chatzilla is earlier than 1.8+1.0.13~pre080323b-0etch3 AND iceape is earlier than 1.0.13~pre080323b-0etch3 AND iceape-chatzilla is earlier than 1.0.13~pre080323b-0etch3 AND mozilla is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-psm is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-mailnews is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-dom-inspector is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-js-debugger is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-browser is earlier than 1.8+1.0.13~pre080323b-0etch3 AND mozilla-dev is earlier than 1.8+1.0.13~pre080323b-0etch3 AND iceape-dev is earlier than 1.0.13~pre080323b-0etch3 AND iceape-dbg is earlier than 1.0.13~pre080323b-0etch3 AND iceape-dom-inspector is earlier than 1.0.13~pre080323b-0etch3 AND iceape-mailnews is earlier than 1.0.13~pre080323b-0etch3 AND iceape-browser is earlier than 1.0.13~pre080323b-0etch3 AND iceape-calendar is earlier than 1.0.13~pre080323b-0etch3 AND iceape-gnome-support is earlier than 1.0.13~pre080323b-0etch3

Definition Id: oval:org.mitre.oval:def:8277

Oval ID:	oval:org.mitre.oval:def:8277
Title:	DSA-1558 xulrunner -- programming error
Description:	It was discovered that crashes in the Javascript engine of xulrunner, the Gecko engine library, could potentially lead to the execution of arbitrary code.
Family:	unix	Class:	patch
Reference(s):	DSA-1558 CVE-2008-1380	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	xulrunner
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section libnspr4-dev is earlier than 1.8.0.15~pre080323b-0etch2 AND libmozjs-dev is earlier than 1.8.0.15~pre080323b-0etch2 AND libsmjs1 is earlier than 1.8.0.15~pre080323b-0etch2 AND libmozillainterfaces-java is earlier than 1.8.0.15~pre080323b-0etch2 AND libxul-common is earlier than 1.8.0.15~pre080323b-0etch2 AND libsmjs-dev is earlier than 1.8.0.15~pre080323b-0etch2 AND libxul-dev is earlier than 1.8.0.15~pre080323b-0etch2 AND libnss3-dev is earlier than 1.8.0.15~pre080323b-0etch2 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is amd64 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section libxul0d is earlier than 1.8.0.15~pre080323b-0etch2 AND libnss3-0d-dbg is earlier than 1.8.0.15~pre080323b-0etch2 AND libmozjs0d-dbg is earlier than 1.8.0.15~pre080323b-0etch2 AND libnss3-0d is earlier than 1.8.0.15~pre080323b-0etch2 AND spidermonkey-bin is earlier than 1.8.0.15~pre080323b-0etch2 AND libnspr4-0d-dbg is earlier than 1.8.0.15~pre080323b-0etch2 AND xulrunner-gnome-support is earlier than 1.8.0.15~pre080323b-0etch2 AND python-xpcom is earlier than 1.8.0.15~pre080323b-0etch2 AND libxul0d-dbg is earlier than 1.8.0.15~pre080323b-0etch2 AND xulrunner is earlier than 1.8.0.15~pre080323b-0etch2 AND libnss3-tools is earlier than 1.8.0.15~pre080323b-0etch2 AND libmozjs0d is earlier than 1.8.0.15~pre080323b-0etch2 AND libnspr4-0d is earlier than 1.8.0.15~pre080323b-0etch2

Definition Id: oval:org.mitre.oval:def:9651

Oval ID:	oval:org.mitre.oval:def:9651
Title:	Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.
Description:	Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.
Family:	unix	Class:	vulnerability
Reference(s):	CVE-2008-1237	Version:	5
Platform(s):	Red Hat Enterprise Linux 3 CentOS Linux 3 Red Hat Enterprise Linux 4 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 5 CentOS Linux 5 Oracle Linux 5	Product(s):
Definition Synopsis:
OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 AND CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.16.el3 AND seamonkey-js-debugger is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nspr-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-mail is earlier than 0:1.0.9-0.16.el3 AND seamonkey-chat is earlier than 0:1.0.9-0.16.el3 AND seamonkey-devel is earlier than 0:1.0.9-0.16.el3 AND seamonkey-dom-inspector is earlier than 0:1.0.9-0.16.el3 AND seamonkey-nss is earlier than 0:1.0.9-0.16.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 AND CentOS Linux 4.x AND Oracle Linux 4.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-15.el4 AND seamonkey-js-debugger is earlier than 0:1.0.9-15.el4 AND thunderbird is earlier than 0:1.5.0.12-10.el4 AND seamonkey-nss-devel is earlier than 0:1.0.9-15.el4 AND seamonkey is earlier than 0:1.0.9-15.el4 AND seamonkey-nspr-devel is earlier than 0:1.0.9-15.el4 AND firefox is earlier than 0:1.5.0.12-0.14.el4 AND seamonkey-mail is earlier than 0:1.0.9-15.el4 AND seamonkey-chat is earlier than 0:1.0.9-15.el4 AND seamonkey-nss is earlier than 0:1.0.9-15.el4 AND seamonkey-devel is earlier than 0:1.0.9-15.el4 AND seamonkey-dom-inspector is earlier than 0:1.0.9-15.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 AND CentOS Linux 5.x AND Oracle Linux 5.x AND Configuration section firefox-devel is earlier than 0:1.5.0.12-14.el5_1 AND firefox is earlier than 0:1.5.0.12-14.el5_1 AND thunderbird is earlier than 0:1.5.0.12-11.el5_1

CPE : Common Platform Enumeration

Type	Description	Count
Application	Mozilla Firefox cpe:2.3:a:mozilla:firefox:2.0.0.9:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.9:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.8:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.7:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.6:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.5:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.4:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.3:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.2:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.13:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.12:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.11:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.10:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:::::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0.0.1:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:2.0:::::::* cpe:2.3:a:mozilla:firefox:2.0:beta1:::::: cpe:2.3:a:mozilla:firefox:2.0:beta_1:::::: cpe:2.3:a:mozilla:firefox:2.0:rc3:::::: cpe:2.3:a:mozilla:firefox:2.0:rc2:::::: cpe:2.3:a:mozilla:firefox:2.0:-:linux:::::* cpe:2.3:a:mozilla:firefox:2.0:-:~~~linux~~:::::* cpe:2.3:a:mozilla:firefox:1.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.1:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.9:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.12:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.11:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.10:::::::* cpe:2.3:a:mozilla:firefox:1.5.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.5:-:::::: cpe:2.3:a:mozilla:firefox:1.5:beta2:::::: cpe:2.3:a:mozilla:firefox:1.5:beta1:::::: cpe:2.3:a:mozilla:firefox:1.4.1:::::::* cpe:2.3:a:mozilla:firefox:1.0.8:::::::* cpe:2.3:a:mozilla:firefox:1.0.7:::::::* cpe:2.3:a:mozilla:firefox:1.0.6:::::::* cpe:2.3:a:mozilla:firefox:1.0.6::linux::::: cpe:2.3:a:mozilla:firefox:1.0.5:::::::* cpe:2.3:a:mozilla:firefox:1.0.4:::::::* cpe:2.3:a:mozilla:firefox:1.0.3:::::::* cpe:2.3:a:mozilla:firefox:1.0.2:::::::* cpe:2.3:a:mozilla:firefox:1.0.1:::::::* cpe:2.3:a:mozilla:firefox:1.0:preview_release:::::: cpe:2.3:a:mozilla:firefox:1.0:-:::::: cpe:2.3:a:mozilla:firefox:0.9.3:::::::* cpe:2.3:a:mozilla:firefox:0.9.2:::::::* cpe:2.3:a:mozilla:firefox:0.9.1:::::::* cpe:2.3:a:mozilla:firefox:0.9_rc:::::::* cpe:2.3:a:mozilla:firefox:0.9:rc:::::: cpe:2.3:a:mozilla:firefox:0.9:::::::* cpe:2.3:a:mozilla:firefox:0.8:::::::* cpe:2.3:a:mozilla:firefox:0.7.1:::::::* cpe:2.3:a:mozilla:firefox:0.7:::::::* cpe:2.3:a:mozilla:firefox:0.6.1:::::::* cpe:2.3:a:mozilla:firefox:0.6:::::::* cpe:2.3:a:mozilla:firefox:0.5:::::::* cpe:2.3:a:mozilla:firefox:0.4:::::::* cpe:2.3:a:mozilla:firefox:0.3:::::::* cpe:2.3:a:mozilla:firefox:0.2:::::::* cpe:2.3:a:mozilla:firefox:0.10.1:::::::* cpe:2.3:a:mozilla:firefox:0.10:::::::* cpe:2.3:a:mozilla:firefox:0.1:::::::* cpe:2.3:a:mozilla:firefox:::::::: cpe:2.3:a:mozilla:firefox:::::::x86:* cpe:2.3:a:mozilla:firefox::::::x86::* cpe:2.3:a:mozilla:firefox::::::iphone_os::* cpe:2.3:a:mozilla:firefox::::::-::* cpe:2.3:a:mozilla:firefox::::::android::* cpe:2.3:a:mozilla:firefox:::::android:::* cpe:2.3:a:mozilla:firefox:-:::::::* cpe:2.3:a:mozilla:firefox:-:::::iphone_os::	109
Application	Mozilla Seamonkey cpe:2.3:a:mozilla:seamonkey:1.1.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.5:1.1.10:::::: cpe:2.3:a:mozilla:seamonkey:1.1.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.1:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.1:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.99:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.9:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.8:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.7:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.6:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.5:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.4:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.3:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.2:::::::* cpe:2.3:a:mozilla:seamonkey:1.0.1:::::::* cpe:2.3:a:mozilla:seamonkey:1.0:alpha:::::: cpe:2.3:a:mozilla:seamonkey:1.0:beta:::::: cpe:2.3:a:mozilla:seamonkey:1.0:::::::* cpe:2.3:a:mozilla:seamonkey:1.0::dev::::: cpe:2.3:a:mozilla:seamonkey:1.0::alpha::::: cpe:2.3:a:mozilla:seamonkey:1.0::beta::::: cpe:2.3:a:mozilla:seamonkey:::::::: cpe:2.3:a:mozilla:seamonkey:-:::::::*	31
Application	Mozilla Thunderbird cpe:2.3:a:mozilla:thunderbird:2.0.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:::::::* cpe:2.3:a:mozilla:thunderbird:2.0.0.0:rc1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta1:::::: cpe:2.3:a:mozilla:thunderbird:2.0:beta2:::::: cpe:2.3:a:mozilla:thunderbird:2.0:-:::::: cpe:2.3:a:mozilla:thunderbird:1.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.9:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.14:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.13:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.12:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.11:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.10:::::::* cpe:2.3:a:mozilla:thunderbird:1.5.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.5:beta2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:beta1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc1:::::: cpe:2.3:a:mozilla:thunderbird:1.5:rc2:::::: cpe:2.3:a:mozilla:thunderbird:1.5:-:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha1:::::: cpe:2.3:a:mozilla:thunderbird:1.1:alpha2:::::: cpe:2.3:a:mozilla:thunderbird:1.0.8:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.7:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.6:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.5:beta:::::: cpe:2.3:a:mozilla:thunderbird:1.0.4:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.3:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.2:::::::* cpe:2.3:a:mozilla:thunderbird:1.0.1:::::::* cpe:2.3:a:mozilla:thunderbird:1.0:rc:::::: cpe:2.3:a:mozilla:thunderbird:1.0:-:::::: cpe:2.3:a:mozilla:thunderbird:0.9:::::::* cpe:2.3:a:mozilla:thunderbird:0.8:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.7.1:::::::* cpe:2.3:a:mozilla:thunderbird:0.7:rc:::::: cpe:2.3:a:mozilla:thunderbird:0.7:-:::::: cpe:2.3:a:mozilla:thunderbird:0.6:::::::* cpe:2.3:a:mozilla:thunderbird:0.5:::::::* cpe:2.3:a:mozilla:thunderbird:0.4:::::::* cpe:2.3:a:mozilla:thunderbird:0.3:::::::* cpe:2.3:a:mozilla:thunderbird:0.2:::::::* cpe:2.3:a:mozilla:thunderbird:0.1:::::::* cpe:2.3:a:mozilla:thunderbird:::::::: cpe:2.3:a:mozilla:thunderbird:::::::x86:* cpe:2.3:a:mozilla:thunderbird:-:::::::*	70

OpenVAS Exploits

Date	Description
2009-10-13	Name : SLES10: Security update for epiphany File : nvt/sles10_mozilla-xulrunn.nasl
2009-10-10	Name : SLES9: Security update for Mozilla File : nvt/sles9p5022953.nasl
2009-04-09	Name : Mandriva Update for mozilla-firefox MDVSA-2008:080 (mozilla-firefox) File : nvt/gb_mandriva_MDVSA_2008_080.nasl
2009-04-09	Name : Mandriva Update for mozilla-firefox MDVSA-2008:110 (mozilla-firefox) File : nvt/gb_mandriva_MDVSA_2008_110.nasl
2009-04-09	Name : Mandriva Update for mozilla-thunderbird MDVSA-2008:155 (mozilla-thunderbird) File : nvt/gb_mandriva_MDVSA_2008_155.nasl
2009-04-09	Name : Mandriva Update for mozilla-thunderbird MDVSA-2008:155-1 (mozilla-thunderbird) File : nvt/gb_mandriva_MDVSA_2008_155_1.nasl
2009-03-23	Name : Ubuntu Update for firefox vulnerabilities USN-592-1 File : nvt/gb_ubuntu_USN_592_1.nasl
2009-03-23	Name : Ubuntu Update for firefox vulnerabilities USN-602-1 File : nvt/gb_ubuntu_USN_602_1.nasl
2009-03-23	Name : Ubuntu Update for mozilla-thunderbird, thunderbird vulnerabilities USN-605-1 File : nvt/gb_ubuntu_USN_605_1.nasl
2009-03-06	Name : RedHat Update for firefox RHSA-2008:0207-01 File : nvt/gb_RHSA-2008_0207-01_firefox.nasl
2009-03-06	Name : RedHat Update for seamonkey RHSA-2008:0208-01 File : nvt/gb_RHSA-2008_0208-01_seamonkey.nasl
2009-03-06	Name : RedHat Update for thunderbird RHSA-2008:0209-01 File : nvt/gb_RHSA-2008_0209-01_thunderbird.nasl
2009-03-06	Name : RedHat Update for firefox RHSA-2008:0222-02 File : nvt/gb_RHSA-2008_0222-02_firefox.nasl
2009-03-06	Name : RedHat Update for seamonkey RHSA-2008:0223-02 File : nvt/gb_RHSA-2008_0223-02_seamonkey.nasl
2009-03-06	Name : RedHat Update for thunderbird RHSA-2008:0224-01 File : nvt/gb_RHSA-2008_0224-01_thunderbird.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0207 centos3 i386 File : nvt/gb_CESA-2008_0207_firefox_centos3_i386.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0207 centos3 x86_64 File : nvt/gb_CESA-2008_0207_firefox_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0207 centos4 i386 File : nvt/gb_CESA-2008_0207_firefox_centos4_i386.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0207 centos4 x86_64 File : nvt/gb_CESA-2008_0207_firefox_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208-01 centos2 i386 File : nvt/gb_CESA-2008_0208-01_seamonkey_centos2_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208 centos3 i386 File : nvt/gb_CESA-2008_0208_seamonkey_centos3_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208 centos3 x86_64 File : nvt/gb_CESA-2008_0208_seamonkey_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208 centos4 i386 File : nvt/gb_CESA-2008_0208_seamonkey_centos4_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0208 centos4 x86_64 File : nvt/gb_CESA-2008_0208_seamonkey_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for thunderbird CESA-2008:0209 centos4 i386 File : nvt/gb_CESA-2008_0209_thunderbird_centos4_i386.nasl
2009-02-27	Name : CentOS Update for thunderbird CESA-2008:0209 centos4 x86_64 File : nvt/gb_CESA-2008_0209_thunderbird_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0222 centos4 i386 File : nvt/gb_CESA-2008_0222_firefox_centos4_i386.nasl
2009-02-27	Name : CentOS Update for firefox CESA-2008:0222 centos4 x86_64 File : nvt/gb_CESA-2008_0222_firefox_centos4_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223-02 centos2 i386 File : nvt/gb_CESA-2008_0223-02_seamonkey_centos2_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223 centos3 i386 File : nvt/gb_CESA-2008_0223_seamonkey_centos3_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223 centos3 x86_64 File : nvt/gb_CESA-2008_0223_seamonkey_centos3_x86_64.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223 centos4 i386 File : nvt/gb_CESA-2008_0223_seamonkey_centos4_i386.nasl
2009-02-27	Name : CentOS Update for seamonkey CESA-2008:0223 centos4 x86_64 File : nvt/gb_CESA-2008_0223_seamonkey_centos4_x86_64.nasl
2009-02-17	Name : Fedora Update for seamonkey FEDORA-2008-3231 File : nvt/gb_fedora_2008_3231_seamonkey_fc7.nasl
2009-02-17	Name : Fedora Update for Miro FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_Miro_fc7.nasl
2009-02-17	Name : Fedora Update for chmsee FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_chmsee_fc7.nasl
2009-02-17	Name : Fedora Update for devhelp FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_devhelp_fc7.nasl
2009-02-17	Name : Fedora Update for epiphany-extensions FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_epiphany-extensions_fc7.nasl
2009-02-17	Name : Fedora Update for epiphany FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_epiphany_fc7.nasl
2009-02-17	Name : Fedora Update for firefox FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_firefox_fc7.nasl
2009-02-17	Name : Fedora Update for galeon FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_galeon_fc7.nasl
2009-02-17	Name : Fedora Update for gnome-python2-extras FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_gnome-python2-extras_fc7.nasl
2009-02-17	Name : Fedora Update for gtkmozembedmm FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_gtkmozembedmm_fc7.nasl
2009-02-17	Name : Fedora Update for kazehakase FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_kazehakase_fc7.nasl
2009-02-17	Name : Fedora Update for liferea FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_liferea_fc7.nasl
2009-02-17	Name : Fedora Update for openvrml FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_openvrml_fc7.nasl
2009-02-17	Name : Fedora Update for ruby-gnome2 FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_ruby-gnome2_fc7.nasl
2009-02-17	Name : Fedora Update for yelp FEDORA-2008-3249 File : nvt/gb_fedora_2008_3249_yelp_fc7.nasl
2009-02-17	Name : Fedora Update for seamonkey FEDORA-2008-3264 File : nvt/gb_fedora_2008_3264_seamonkey_fc8.nasl
2009-02-17	Name : Fedora Update for Miro FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_Miro_fc8.nasl
2009-02-17	Name : Fedora Update for chmsee FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_chmsee_fc8.nasl
2009-02-17	Name : Fedora Update for devhelp FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_devhelp_fc8.nasl
2009-02-17	Name : Fedora Update for epiphany-extensions FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_epiphany-extensions_fc8.nasl
2009-02-17	Name : Fedora Update for epiphany FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_epiphany_fc8.nasl
2009-02-17	Name : Fedora Update for firefox FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_firefox_fc8.nasl
2009-02-17	Name : Fedora Update for galeon FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_galeon_fc8.nasl
2009-02-17	Name : Fedora Update for gnome-python2-extras FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_gnome-python2-extras_fc8.nasl
2009-02-17	Name : Fedora Update for gnome-web-photo FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_gnome-web-photo_fc8.nasl
2009-02-17	Name : Fedora Update for gtkmozembedmm FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_gtkmozembedmm_fc8.nasl
2009-02-17	Name : Fedora Update for kazehakase FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_kazehakase_fc8.nasl
2009-02-17	Name : Fedora Update for liferea FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_liferea_fc8.nasl
2009-02-17	Name : Fedora Update for openvrml FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_openvrml_fc8.nasl
2009-02-17	Name : Fedora Update for ruby-gnome2 FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_ruby-gnome2_fc8.nasl
2009-02-17	Name : Fedora Update for yelp FEDORA-2008-3283 File : nvt/gb_fedora_2008_3283_yelp_fc8.nasl
2009-02-17	Name : Fedora Update for thunderbird FEDORA-2008-3519 File : nvt/gb_fedora_2008_3519_thunderbird_fc7.nasl
2009-02-17	Name : Fedora Update for thunderbird FEDORA-2008-3557 File : nvt/gb_fedora_2008_3557_thunderbird_fc8.nasl
2009-02-16	Name : Fedora Update for Miro FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_Miro_fc7.nasl
2009-02-16	Name : Fedora Update for chmsee FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_chmsee_fc7.nasl
2009-02-16	Name : Fedora Update for devhelp FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_devhelp_fc7.nasl
2009-02-16	Name : Fedora Update for epiphany-extensions FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_epiphany-extensions_fc7.nasl
2009-02-16	Name : Fedora Update for epiphany FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_epiphany_fc7.nasl
2009-02-16	Name : Fedora Update for firefox FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_firefox_fc7.nasl
2009-02-16	Name : Fedora Update for galeon FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_galeon_fc7.nasl
2009-02-16	Name : Fedora Update for gnome-python2-extras FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_gnome-python2-extras_fc7.nasl
2009-02-16	Name : Fedora Update for gtkmozembedmm FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_gtkmozembedmm_fc7.nasl
2009-02-16	Name : Fedora Update for kazehakase FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_kazehakase_fc7.nasl
2009-02-16	Name : Fedora Update for liferea FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_liferea_fc7.nasl
2009-02-16	Name : Fedora Update for openvrml FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_openvrml_fc7.nasl
2009-02-16	Name : Fedora Update for ruby-gnome2 FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_ruby-gnome2_fc7.nasl
2009-02-16	Name : Fedora Update for yelp FEDORA-2008-2662 File : nvt/gb_fedora_2008_2662_yelp_fc7.nasl
2009-02-16	Name : Fedora Update for Miro FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_Miro_fc8.nasl
2009-02-16	Name : Fedora Update for blam FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_blam_fc8.nasl
2009-02-16	Name : Fedora Update for chmsee FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_chmsee_fc8.nasl
2009-02-16	Name : Fedora Update for devhelp FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_devhelp_fc8.nasl
2009-02-16	Name : Fedora Update for epiphany-extensions FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_epiphany-extensions_fc8.nasl
2009-02-16	Name : Fedora Update for epiphany FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_epiphany_fc8.nasl
2009-02-16	Name : Fedora Update for firefox FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_firefox_fc8.nasl
2009-02-16	Name : Fedora Update for galeon FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_galeon_fc8.nasl
2009-02-16	Name : Fedora Update for gnome-python2-extras FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_gnome-python2-extras_fc8.nasl
2009-02-16	Name : Fedora Update for gnome-web-photo FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_gnome-web-photo_fc8.nasl
2009-02-16	Name : Fedora Update for gtkmozembedmm FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_gtkmozembedmm_fc8.nasl
2009-02-16	Name : Fedora Update for kazehakase FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_kazehakase_fc8.nasl
2009-02-16	Name : Fedora Update for liferea FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_liferea_fc8.nasl
2009-02-16	Name : Fedora Update for openvrml FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_openvrml_fc8.nasl
2009-02-16	Name : Fedora Update for ruby-gnome2 FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_ruby-gnome2_fc8.nasl
2009-02-16	Name : Fedora Update for yelp FEDORA-2008-2682 File : nvt/gb_fedora_2008_2682_yelp_fc8.nasl
2009-01-23	Name : SuSE Update for MozillaFirefox SUSE-SA:2008:019 File : nvt/gb_suse_2008_019.nasl
2009-01-13	Name : Debian Security Advisory DSA 1696-1 (icedove) File : nvt/deb_1696_1.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200805-18 (mozilla ...) File : nvt/glsa_200805_18.nasl
2008-09-24	Name : Gentoo Security Advisory GLSA 200808-03 (mozilla ...) File : nvt/glsa_200808_03.nasl
2008-09-04	Name : FreeBSD Ports: firefox File : nvt/freebsd_firefox32.nasl
2008-09-04	Name : FreeBSD Ports: firefox File : nvt/freebsd_firefox33.nasl
2008-06-17	Name : Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Lin) File : nvt/mozilla_CB-A08-0017.nasl
2008-06-17	Name : Mozilla Firefox, Thunderbird, Seamonkey. Several vulnerabilitys (Win) File : nvt/smbcl_mozilla.nasl
2008-05-27	Name : Debian Security Advisory DSA 1574-1 (icedove) File : nvt/deb_1574_1.nasl
2008-04-30	Name : Debian Security Advisory DSA 1534-2 (iceape) File : nvt/deb_1534_2.nasl
2008-04-30	Name : Debian Security Advisory DSA 1555-1 (iceweasel) File : nvt/deb_1555_1.nasl
2008-04-30	Name : Debian Security Advisory DSA 1558-1 (xulrunner) File : nvt/deb_1558_1.nasl
2008-04-30	Name : Debian Security Advisory DSA 1562-1 (iceape) File : nvt/deb_1562_1.nasl
2008-04-07	Name : Debian Security Advisory DSA 1532-1 (xulrunner) File : nvt/deb_1532_1.nasl
2008-04-07	Name : Debian Security Advisory DSA 1534-1 (iceape) File : nvt/deb_1534_1.nasl
2008-04-07	Name : Debian Security Advisory DSA 1535-1 (iceweasel) File : nvt/deb_1535_1.nasl
0000-00-00	Name : Slackware Advisory SSA:2008-108-01 mozilla-firefox File : nvt/esoft_slk_ssa_2008_108_01.nasl
0000-00-00	Name : Slackware Advisory SSA:2008-128-02 mozilla-thunderbird File : nvt/esoft_slk_ssa_2008_128_02.nasl
0000-00-00	Name : Slackware Advisory SSA:2008-191-03 seamonkey File : nvt/esoft_slk_ssa_2008_191_03.nasl

Open Source Vulnerability Database (OSVDB)

Id	Description
44467	Mozilla Multiple Products Javascript Garbage Collector DoS
43872	Mozilla Multiple Products JS_ValueToId Null String Handling DoS
43871	Mozilla Multiple Products js_FilterXMLList Block Object Handling DoS
43870	Mozilla Multiple Products JSOP_NEG js_NewNumberValue SAVE_SP_AND_PC Unspecif...
43869	Mozilla Multiple Products jsobj.c fp Assertion Failure Unspecified DoS
43868	Mozilla Multiple Products jsinterp.c Multiple Macros SAVE_SP_AND_PC Privileg...
43867	Mozilla Multiple Products JS_CompileUCFunctionForPrincipals js_NewFunction P...
43866	Mozilla Multiple Products JSOP_YIELD / JSOP_ARRAYPUSH SAVE_SP_AND_PC Privile...

Nessus® Vulnerability Scanner

Date	Description
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0207.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0208.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2008-0209.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0222.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing a security update. File : oraclelinux_ELSA-2008-0224.nasl - Type : ACT_GATHER_INFO
2013-07-12	Name : The remote Oracle Linux host is missing one or more security updates. File : oraclelinux_ELSA-2008-0223.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080416_seamonkey_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080416_firefox_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing a security update. File : sl_20080403_thunderbird_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080327_seamonkey_on_SL3_x.nasl - Type : ACT_GATHER_INFO
2012-08-01	Name : The remote Scientific Linux host is missing one or more security updates. File : sl_20080326_firefox_on_SL4_x.nasl - Type : ACT_GATHER_INFO
2010-01-06	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2008-0224.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-110.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-155.nasl - Type : ACT_GATHER_INFO
2009-04-23	Name : The remote Mandriva Linux host is missing one or more security updates. File : mandriva_MDVSA-2008-080.nasl - Type : ACT_GATHER_INFO
2009-01-08	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1696.nasl - Type : ACT_GATHER_INFO
2008-08-07	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200808-03.nasl - Type : ACT_GATHER_INFO
2008-07-10	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2008-191-03.nasl - Type : ACT_GATHER_INFO
2008-07-02	Name : A web browser on the remote host is affected by multiple vulnerabilities. File : seamonkey_1110.nasl - Type : ACT_GATHER_INFO
2008-06-09	Name : The remote openSUSE host is missing a security update. File : suse_MozillaThunderbird-5280.nasl - Type : ACT_GATHER_INFO
2008-06-09	Name : The remote openSUSE host is missing a security update. File : suse_MozillaThunderbird-5329.nasl - Type : ACT_GATHER_INFO
2008-06-09	Name : The remote openSUSE host is missing a security update. File : suse_epiphany-5293.nasl - Type : ACT_GATHER_INFO
2008-05-28	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2008-128-02.nasl - Type : ACT_GATHER_INFO
2008-05-22	Name : The remote Gentoo host is missing one or more security-related patches. File : gentoo_GLSA-200805-18.nasl - Type : ACT_GATHER_INFO
2008-05-13	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1574.nasl - Type : ACT_GATHER_INFO
2008-05-11	Name : The remote Fedora host is missing a security update. File : fedora_2008-3519.nasl - Type : ACT_GATHER_INFO
2008-05-11	Name : The remote Fedora host is missing a security update. File : fedora_2008-3557.nasl - Type : ACT_GATHER_INFO
2008-05-09	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-605-1.nasl - Type : ACT_GATHER_INFO
2008-05-06	Name : The remote Windows host contains a mail client that is affected by multiple v... File : mozilla_thunderbird_20014.nasl - Type : ACT_GATHER_INFO
2008-05-01	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-5218.nasl - Type : ACT_GATHER_INFO
2008-05-01	Name : The remote openSUSE host is missing a security update. File : suse_MozillaFirefox-5219.nasl - Type : ACT_GATHER_INFO
2008-05-01	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2008-0224.nasl - Type : ACT_GATHER_INFO
2008-05-01	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1562.nasl - Type : ACT_GATHER_INFO
2008-04-28	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_67bd39ba12b511ddbab70016179b2dd5.nasl - Type : ACT_GATHER_INFO
2008-04-28	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1558.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Fedora host is missing a security update. File : fedora_2008-3231.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-3283.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1555.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Fedora host is missing a security update. File : fedora_2008-3264.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-3249.nasl - Type : ACT_GATHER_INFO
2008-04-25	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-602-1.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote Slackware host is missing a security update. File : Slackware_SSA_2008-108-01.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote openSUSE host is missing a security update. File : suse_mozilla-xulrunner181-5158.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0222.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0223.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote openSUSE host is missing a security update. File : suse_mozilla-xulrunner-5163.nasl - Type : ACT_GATHER_INFO
2008-04-22	Name : The remote openSUSE host is missing a security update. File : suse_seamonkey-5167.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_mozilla-xulrunner-5164.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0223.nasl - Type : ACT_GATHER_INFO
2008-04-18	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0222.nasl - Type : ACT_GATHER_INFO
2008-04-17	Name : The remote Windows host contains a web browser that may allow arbitrary code ... File : mozilla_firefox_20014.nasl - Type : ACT_GATHER_INFO
2008-04-17	Name : The remote CentOS host is missing a security update. File : centos_RHSA-2008-0209.nasl - Type : ACT_GATHER_INFO
2008-04-11	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1535.nasl - Type : ACT_GATHER_INFO
2008-04-11	Name : The remote openSUSE host is missing a security update. File : suse_seamonkey-5153.nasl - Type : ACT_GATHER_INFO
2008-04-04	Name : The remote Red Hat host is missing a security update. File : redhat-RHSA-2008-0209.nasl - Type : ACT_GATHER_INFO
2008-04-01	Name : The remote SuSE 10 host is missing a security-related patch. File : suse_MozillaFirefox-5134.nasl - Type : ACT_GATHER_INFO
2008-03-31	Name : The remote FreeBSD host is missing one or more security-related updates. File : freebsd_pkg_12b336c6fe3611dcb09c001c2514716c.nasl - Type : ACT_GATHER_INFO
2008-03-31	Name : The remote openSUSE host is missing a security update. File : suse_MozillaFirefox-5135.nasl - Type : ACT_GATHER_INFO
2008-03-31	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1532.nasl - Type : ACT_GATHER_INFO
2008-03-31	Name : The remote Debian host is missing a security-related update. File : debian_DSA-1534.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0208.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote CentOS host is missing one or more security updates. File : centos_RHSA-2008-0207.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0208.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Red Hat host is missing one or more security updates. File : redhat-RHSA-2008-0207.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-2662.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Ubuntu host is missing one or more security-related patches. File : ubuntu_USN-592-1.nasl - Type : ACT_GATHER_INFO
2008-03-28	Name : The remote Fedora host is missing one or more security updates. File : fedora_2008-2682.nasl - Type : ACT_GATHER_INFO
2008-03-26	Name : A web browser on the remote host is affected by multiple vulnerabilities. File : seamonkey_119.nasl - Type : ACT_GATHER_INFO
2008-03-26	Name : The remote Windows host contains a web browser that is affected by multiple v... File : mozilla_firefox_20013.nasl - Type : ACT_GATHER_INFO

Alert History

If you want to see full details history, please login or register.

Date	Informations
2013-05-11 00:57:06	Multiple Updates

Global Informations

Type	Count
CWE ID(s)	2
Oval ID(s)	12
CPE ID(s)	210
osvdb(s)	8
Openvas Exploit(s)	115
Nessus® Exploit(s)	69

	Related
9.3	CVE-2008-1380
6.8	CVE-2008-1237
Info : listing not affected by your CVSS Env Score

Same Subject	Severity
Login to view 2 more Alert(s)