oval:org.mitre.oval:def:12114

Definition Id: oval:org.mitre.oval:def:12114

Oval ID:	oval:org.mitre.oval:def:12114
Title:	Mozilla Multiple Products SafeJSObjectWrapper XPCSafeJSObjectWrapper Class Same Origin Policy Bypass Crafted Function XSS
Description:	The XPCSafeJSObjectWrapper class in the SafeJSObjectWrapper (aka SJOW) implementation in Mozilla Firefox before 3.5.12, Thunderbird before 3.0.7, and SeaMonkey before 2.0.7 does not properly restrict scripted functions, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via a crafted function.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2010-2763	Version:	22
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Thunderbird Mozilla SeaMonkey
Definition Synopsis:
Check for vulnerable Firefox Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is 3.5.x before 3.5.12 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version less than 2.0.7 OR Check for vulnerable Thunderbird Mozilla Thunderbird Mainline release is installed AND Mozilla Thunderbird 3.0.x before 3.0.7

Definition Id: oval:org.mitre.oval:def:6372

Oval ID:	oval:org.mitre.oval:def:6372
Title:	Mozilla Seamonkey is installed
Description:	The installed browser on the system is Mozilla Seamonkey.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:mozilla:seamonkey	Version:	11
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla SeaMonkey
Definition Synopsis:
Mozilla Seamonkey is installed AND Check if HKLM\SOFTWARE\Mozilla\SeaMonkey.+\bin!PathToExe exists
Referenced By:
oval:org.mitre.oval:def:12114

Definition Id: oval:org.mitre.oval:def:22093

Oval ID:	oval:org.mitre.oval:def:22093
Title:	Mozilla Thunderbird Mainline release is installed
Description:	The installed e-mail and news client on the system is Mozilla Thunderbird Mainline release
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:mozilla:thunderbird	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Thunderbird
Definition Synopsis:
Check if Thunderbird Mainline is installed on the system AND Check if HKLM\Software\Mozilla\Mozilla Thunderbird.*$!Install Directory exists AND Check if channel-prefs.js (Thunderbird Mainline file) exists
Referenced By:
oval:org.mitre.oval:def:12114

Definition Id: oval:org.mitre.oval:def:22259

Oval ID:	oval:org.mitre.oval:def:22259
Title:	Mozilla Firefox Mainline release is installed
Description:	The browser installed on the system is Mozilla Firefox Mainline release
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:mozilla:firefox	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox
Definition Synopsis:
Check if Firefox Mainline is installed on the system AND Check if HKLM\Software\Mozilla\Mozilla Firefox.*$!Install Directory exists AND Check if channel-prefs.js (Firefox Mainline file) exists
Referenced By:
oval:org.mitre.oval:def:12114