xulrunner - several vulnerabilities

Fixed packages 1

Vulnerabilities 28

• Unscored —
  CVE-2008-0016 Public exploit EPSS 44%

  Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1…

  Sep 24, 2008
• Unscored —
  CVE-2008-0017

  The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and…

  Nov 13, 2008
• Unscored —
  CVE-2008-3835

  The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaM…

  Sep 24, 2008
• Unscored —
  CVE-2008-3836

  feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vec…

  Sep 24, 2008
• Unscored —
  CVE-2008-3837

  Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers…

  Sep 24, 2008
• Unscored —
  CVE-2008-4058

  The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMo…

  Sep 24, 2008
• Unscored —
  CVE-2008-4059

  The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and e…

  firefox Wolfi
  Sep 24, 2008
• Unscored —
  CVE-2008-4060

  Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  Sep 24, 2008
• Unscored —
  CVE-2008-4061

  Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.…

  Sep 24, 2008
• Unscored —
  CVE-2008-4062

  Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.…

  Sep 24, 2008
• Unscored —
  CVE-2008-4063

  Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of se…

  Sep 24, 2008
• Unscored —
  CVE-2008-4064

  Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.2 allow remote attackers to cause a denial of se…

  Sep 24, 2008
• Unscored —
  CVE-2008-4065

  Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  Sep 24, 2008
• Unscored —
  CVE-2008-4066

  Mozilla Firefox 2.0.0.14, and other versions before 2.0.0.17, allows remote attackers to bypass cross-site scripting (X…

  Sep 24, 2008
• Unscored —
  CVE-2008-4067

  Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

  Sep 24, 2008
• Unscored —
  CVE-2008-4068

  Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

  Sep 24, 2008
• Unscored —
  CVE-2008-4069

  The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitia…

  Sep 24, 2008
• Unscored —
  CVE-2008-4582 Public exploit EPSS 10%

  Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Wind…

  Oct 15, 2008
• Unscored —
  CVE-2008-5012

  Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly c…

  Nov 13, 2008
• Unscored —
  CVE-2008-5013

  Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has bee…

  Nov 13, 2008
• Unscored —
  CVE-2008-5014

  jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMo…

  Nov 13, 2008
• Unscored —
  CVE-2008-5017

  Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before…

  Nov 13, 2008
• Unscored —
  CVE-2008-5018

  The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18…

  Nov 13, 2008
• Unscored —
  CVE-2008-5021

  nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey…

  Nov 13, 2008
• Unscored —
  CVE-2008-5022

  The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird…

  Nov 13, 2008
• Unscored —
  CVE-2008-5023

  Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to bypas…

  Nov 13, 2008
• Unscored —
  CVE-2008-5024

  Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x befor…

  Nov 13, 2008
• Unscored —
  CVE-2008-5052

  The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x befo…

  Nov 13, 2008