xulrunner - several vulnerabilities

Fixed packages 1

Vulnerabilities 13

• Unscored —
  CVE-2008-0412

  The browser engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows r…

  Feb 8, 2008
• Unscored —
  CVE-2008-0413

  The JavaScript engine in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allow…

  Feb 8, 2008
• Unscored —
  CVE-2008-0414

  Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into…

  Feb 8, 2008
• Unscored —
  CVE-2008-0415

  Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before 1.1.8 allows remote attackers to exe…

  Feb 8, 2008
• Unscored —
  CVE-2008-0416

  Multiple cross-site scripting (XSS) vulnerabilities in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, an…

  Feb 12, 2008
• Unscored —
  CVE-2008-0417

  CRLF injection vulnerability in Mozilla Firefox before 2.0.0.12 allows remote user-assisted web sites to corrupt the us…

  Feb 8, 2008
• Unscored —
  CVE-2008-0418 Public exploit

  Directory traversal vulnerability in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaMonkey before…

  Feb 8, 2008
• Unscored —
  CVE-2008-0419

  Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows remote attackers to steal navigation history and caus…

  Feb 8, 2008
• Unscored —
  CVE-2008-0420

  modules/libpr0n/decoders/bmp/nsBMPDecoder.cpp in Mozilla Firefox before 2.0.0.12, Thunderbird before 2.0.0.12, and SeaM…

  Feb 12, 2008
• Unscored —
  CVE-2008-0591

  Mozilla Firefox before 2.0.0.12 and Thunderbird before 2.0.0.12 does not properly manage a delay timer used in confirma…

  Feb 8, 2008
• Unscored —
  CVE-2008-0592

  Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of s…

  Feb 8, 2008
• Unscored —
  CVE-2008-0593

  Gecko-based browsers, including Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8, modify the .href property o…

  Feb 9, 2008
• Unscored —
  CVE-2008-0594

  Mozilla Firefox before 2.0.0.12 does not always display a web forgery warning dialog if the entire contents of a web pa…

  Feb 9, 2008