oval:org.mitre.oval:def:8355

Definition Id: oval:org.mitre.oval:def:8355

Oval ID:	oval:org.mitre.oval:def:8355
Title:	Mozilla Firefox and SeaMonkey XSS Vulnerability due to window.dialogArguments being readable cross-domain
Description:	Mozilla Firefox 3.0.x before 3.0.18 and 3.5.x before 3.5.8, and SeaMonkey before 2.0.3, does not properly restrict read access to object properties in showModalDialog, which allows remote attackers to bypass the Same Origin Policy and conduct cross-site scripting (XSS) attacks via crafted dialogArguments values.
Family:	windows	Class:	vulnerability
Reference(s):	CVE-2009-3988	Version:	15
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Vista Microsoft Windows 7	Product(s):	Mozilla Firefox Mozilla Seamonkey
Definition Synopsis:
Check for vulnerable Firefox mainline Mozilla Firefox Mainline release is installed AND Check for vulnerable version Mozilla Firefox Mainline version is less than 3.0.18 AND Mozilla Firefox Mainline version is 3.5.x to 3.5.8 OR Check for vulnerable SeaMonkey Mozilla Seamonkey is installed AND Mozilla Seamonkey version is less than 2.0.3

Definition Id: oval:org.mitre.oval:def:6372

Oval ID:	oval:org.mitre.oval:def:6372
Title:	Mozilla Seamonkey is installed
Description:	The installed browser on the system is Mozilla Seamonkey.
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:mozilla:seamonkey	Version:	11
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla SeaMonkey
Definition Synopsis:
Mozilla Seamonkey is installed AND Check if HKLM\SOFTWARE\Mozilla\SeaMonkey.+\bin!PathToExe exists
Referenced By:
oval:org.mitre.oval:def:8355

Definition Id: oval:org.mitre.oval:def:22259

Oval ID:	oval:org.mitre.oval:def:22259
Title:	Mozilla Firefox Mainline release is installed
Description:	The browser installed on the system is Mozilla Firefox Mainline release
Family:	windows	Class:	inventory
Reference(s):	cpe:/a:mozilla:firefox	Version:	9
Platform(s):	Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012	Product(s):	Mozilla Firefox
Definition Synopsis:
Check if Firefox Mainline is installed on the system AND Check if HKLM\Software\Mozilla\Mozilla Firefox.*$!Install Directory exists AND Check if channel-prefs.js (Firefox Mainline file) exists
Referenced By:
oval:org.mitre.oval:def:8355