oval:org.mitre.oval:def:7914

Definition Id: oval:org.mitre.oval:def:7914

Oval ID:	oval:org.mitre.oval:def:7914
Title:	DSA-1485 icedove -- several vulnerabilities
Description:	Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems: Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren and Paul Nickerson discovered crashes in the layout engine, which might allow the execution of arbitrary code. Carsten Book, Wesley Garland, Igor Bukanov, moz_bug_r_a4, shutdown, Philip Taylor and tgirmann discovered crashes in the JavaScript engine, which might allow the execution of arbitrary code. moz_bug_r_a4 and Boris Zbarsky discovered several vulnerabilities in JavaScript handling, which could allow privilege escalation. Gerry Eisenhaur and moz_bug_r_a4 discovered that a directory traversal vulnerability in chrome: URI handling could lead to information disclosure. David Bloom discovered a race condition in the image handling of designMode elements, which can lead to information disclosure and potentially the execution of arbitrary code. Michal Zalewski discovered that timers protecting security-sensitive dialogs (by disabling dialog elements until a timeout is reached) could be bypassed by window focus changes through JavaScript. The Mozilla products from the old stable distribution (sarge) are no longer supported with security updates.
Family:	unix	Class:	patch
Reference(s):	DSA-1485 CVE-2008-0412 CVE-2008-0413 CVE-2008-0414 CVE-2008-0415 CVE-2008-0416 CVE-2008-0417 CVE-2008-0418 CVE-2008-0419 CVE-2008-0591 CVE-2008-0592 CVE-2008-0593 CVE-2008-0594	Version:	3
Platform(s):	Debian GNU/Linux 4.0	Product(s):	icedove
Definition Synopsis:
Debian GNU/Linux 4.0 is installed. Architecture section Architecture independent section Installed architecture is all AND Packages section thunderbird-gnome-support is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND thunderbird-dev is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND mozilla-thunderbird is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND thunderbird is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND mozilla-thunderbird-dev is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND mozilla-thunderbird-typeaheadfind is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND thunderbird-dbg is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND thunderbird-typeaheadfind is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND mozilla-thunderbird-inspector is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND thunderbird-inspector is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 OR Architecture dependent section Supported architectures section Installed architecture is s390 AND Installed architecture is sparc AND Installed architecture is arm AND Installed architecture is i386 AND Installed architecture is mips AND Installed architecture is ia64 AND Installed architecture is alpha AND Installed architecture is powerpc AND Installed architecture is mipsel AND Installed architecture is hppa AND Packages section icedove-typeaheadfind is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-inspector is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-dev is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-dbg is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-gnome-support is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 OR Architecture dependent section Installed architecture is amd64 AND Packages section icedove-typeaheadfind is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND icedove is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-dev is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND icedove-inspector is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2 AND icedove-dbg is earlier than 1.5.0.13+1.5.0.15b.dfsg1-0etch2 AND icedove-gnome-support is earlier than 1.5.0.13+1.5.0.15a.dfsg1-0etch2

Definition Id: oval:org.mitre.oval:def:6461

Oval ID:	oval:org.mitre.oval:def:6461
Title:	Debian GNU/Linux 4.0 is installed.
Description:	Debian GNU/Linux 4.0 (etch) is installed
Family:	unix	Class:	inventory
Reference(s):	cpe:/o:debian:debian_gnu/linux:4.0	Version:	9
Platform(s):	Debian GNU/Linux 4.0	Product(s):
Definition Synopsis:
Debian GNU/Linux 4.0 is installed
Referenced By:
oval:org.mitre.oval:def:7914

Copyright Security-Database 2006-2024 - Powered by themself ;) in 0.0212s

Facebook rss twitter linkedin mail