oval:org.mitre.oval:def:13790

Definition Id: oval:org.mitre.oval:def:13790

Oval ID:	oval:org.mitre.oval:def:13790
Title:	USN-728-1 -- firefox-3.0, xulrunner-1.9 vulnerabilities
Description:	Glenn Randers-Pehrson discovered that the embedded libpng in Firefox did not properly initialize pointers. If a user were tricked into viewing a malicious website with a crafted PNG file, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. Martijn Wargers, Jesse Ruderman, Josh Soref, Gary Kwong, and Timothee Groleau discovered flaws in the browser engine. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. A flaw was discovered in Firefox�s garbage collection process. Under certain circumstances a remote attacker could exploit this to cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. Georgi Guninski discovered a flaw when Firefox performed a cross-domain redirect. An attacker could bypass the same-origin policy in Firefox by utilizing nsIRDFService and steal private data from users authenticated to the redirected website. Masahiro Yamada discovered that Firefox did not display control characters in the location bar. An attacker could exploit this to spoof the location bar, such as in a phishing attack
Family:	unix	Class:	patch
Reference(s):	USN-728-1 CVE-2009-0040 CVE-2009-0771 CVE-2009-0772 CVE-2009-0773 CVE-2009-0774 CVE-2009-0775 CVE-2009-0776 CVE-2009-0777	Version:	5
Platform(s):	Ubuntu 8.10 Ubuntu 8.04	Product(s):	firefox-3.0 xulrunner-1.9
Definition Synopsis:
Release section Ubuntu 8.10 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section abrowser DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-granparadiso-dev DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-granparadiso-dom-inspector DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-gnome-support DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-dev DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-granparadiso DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk-gnome-support DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk-dom-inspector DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9-venkman DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-granparadiso-gnome-support DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk-venkman DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-dom-inspector DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9-dom-inspector DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-venkman DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-libthai DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-trunk-dev DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-dom-inspector DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 OR Architecture depended section Supported architectures section Installed architecture is amd64 AND Installed architecture is i386 AND Installed architecture is powerpc AND Installed architecture is sparc AND Installed architecture is lpia AND Packages section firefox-3.0 DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9-dev DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-branding DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9-gnome-support DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.10.1 AND xulrunner-1.9 DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND abrowser-3.0-branding DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND firefox-3.0-dev DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.10.1 AND xulrunner-dev DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.10.1 OR Release section Ubuntu 8.04 is installed AND Architecture section Architecture independent section Installed architecture is all AND Packages section firefox-trunk DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-dev DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-dom-inspector DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-gnome-support DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-dev DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-gnome-support DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-dom-inspector DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9-venkman DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-granparadiso-gnome-support DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-venkman DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-dom-inspector DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9-dom-inspector DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-venkman DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-libthai DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-trunk-dev DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-dom-inspector DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 OR Architecture depended section Supported architectures section Installed architecture is powerpc AND Installed architecture is amd64 AND Installed architecture is lpia AND Installed architecture is i386 AND Packages section firefox-3.0 DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9-dev DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9-gnome-support DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.04.1 AND xulrunner-1.9 DPKG is earlier than 1.9.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-gnome-support DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1 AND firefox-3.0-dev DPKG is earlier than 3.0.7+nobinonly-0ubuntu0.8.04.1

Definition Id: oval:org.mitre.oval:def:13250

Oval ID:	oval:org.mitre.oval:def:13250
Title:	Ubuntu 8.04 is installed
Description:	Ubuntu 8.04 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:8.04	Version:	3
Platform(s):	Ubuntu 8.04	Product(s):
Definition Synopsis:
Ubuntu 8.04 is installed
Referenced By:
oval:org.mitre.oval:def:13790

Definition Id: oval:org.mitre.oval:def:13306

Oval ID:	oval:org.mitre.oval:def:13306
Title:	Ubuntu 8.10 is installed
Description:	Ubuntu 8.10 is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:ubuntu:ubuntu_linux:8.10	Version:	3
Platform(s):	Ubuntu 8.10	Product(s):
Definition Synopsis:
Ubuntu 8.10 is installed
Referenced By:
oval:org.mitre.oval:def:13790

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0401s

Facebook rss twitter linkedin mail