xulrunner - several vulnerabilities

Fixed packages 1

Vulnerabilities 13

• Unscored —
  CVE-2008-2785

  Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an i…

  Jun 19, 2008
• Unscored —
  CVE-2008-2798 EPSS 14%

  Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  Jul 7, 2008
• Unscored —
  CVE-2008-2799

  Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  Jul 7, 2008
• Unscored —
  CVE-2008-2800

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and…

  Jul 7, 2008
• Unscored —
  CVE-2008-2801

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote …

  Jul 7, 2008
• Unscored —
  CVE-2008-2802

  Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers t…

  Jul 7, 2008
• Unscored —
  CVE-2008-2803

  The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and…

  Jul 7, 2008
• Unscored —
  CVE-2008-2805

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary loc…

  Jul 7, 2008
• Unscored —
  CVE-2008-2807

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an a…

  Jul 7, 2008
• Unscored —
  CVE-2008-2808

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory li…

  Jul 7, 2008
• Unscored —
  CVE-2008-2809

  Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netsca…

  Jul 8, 2008
• Unscored —
  CVE-2008-2811

  The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey bef…

  Jul 7, 2008
• Unscored —
  CVE-2008-2933

  Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as reques…

  Jul 17, 2008