oval:org.mitre.oval:def:14025

Definition Id: oval:org.mitre.oval:def:14025

Oval ID:	oval:org.mitre.oval:def:14025
Title:	Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is used on Windows in conjunction with the Azure graphics back-end, allow remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas. NOTE: this issue exists because of a CVE-2011-2986 regression.
Description:	Mozilla Firefox 7.0 and Thunderbird 7.0, when the Direct2D (aka D2D) API is used on Windows in conjunction with the Azure graphics back-end, allow remote attackers to bypass the Same Origin Policy, and obtain sensitive image data from a different domain, by inserting this data into a canvas. NOTE: this issue exists because of a CVE-2011-2986 regression.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2011-3649	Version:	17
Platform(s):	Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows 2000	Product(s):	Mozilla Firefox Mozilla Thunderbird
Definition Synopsis:
Determine if the version of Mozilla Firefox is equal to 7.0 Mozilla Firefox Mainline release is installed AND Mozilla Firefox Mainline version is equal to 7.0 OR Determine if the version of Mozilla Thunderbird is equal to 7.0 Mozilla Thunderbird Mainline release is installed AND Determine if the version of Mozilla Thunderbird is equal to 7.0

Definition Id: oval:org.mitre.oval:def:22259

Oval ID:	oval:org.mitre.oval:def:22259
Title:	Mozilla Firefox Mainline release is installed
Description:	The browser installed on the system is Mozilla Firefox Mainline release
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:mozilla:firefox	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox
Definition Synopsis:
Check if Firefox Mainline is installed on the system AND Check if HKLM\Software\Mozilla\Mozilla Firefox.*$!Install Directory exists AND Check if channel-prefs.js (Firefox Mainline file) exists
Referenced By:
oval:org.mitre.oval:def:14025

Definition Id: oval:org.mitre.oval:def:22093

Oval ID:	oval:org.mitre.oval:def:22093
Title:	Mozilla Thunderbird Mainline release is installed
Description:	The installed e-mail and news client on the system is Mozilla Thunderbird Mainline release
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:mozilla:thunderbird	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Thunderbird
Definition Synopsis:
Check if Thunderbird Mainline is installed on the system AND Check if HKLM\Software\Mozilla\Mozilla Thunderbird.*$!Install Directory exists AND Check if channel-prefs.js (Thunderbird Mainline file) exists
Referenced By:
oval:org.mitre.oval:def:14025