iceape - several vulnerabilities

Fixed packages 1

Vulnerabilities 47

• Unscored —
  CVE-2007-3074

  Mozilla Firefox 2.0.0.4 and earlier allows remote attackers to read files in the local Firefox installation directory v…

  Jun 6, 2007
• Unscored —
  CVE-2008-0016 Public exploit EPSS 44%

  Stack-based buffer overflow in the URL parsing implementation in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1…

  Sep 24, 2008
• Unscored —
  CVE-2008-0017

  The http-index-format MIME type parser (nsDirIndexParser) in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, and…

  Nov 13, 2008
• Unscored —
  CVE-2008-0304

  Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.12 and SeaMonkey before 1.1.8 might allow remote attacke…

  Feb 29, 2008
• Unscored —
  CVE-2008-2785

  Mozilla Firefox before 2.0.0.16 and 3.x before 3.0.1, Thunderbird before 2.0.0.16, and SeaMonkey before 1.1.11 use an i…

  Jun 19, 2008
• Unscored —
  CVE-2008-2798 EPSS 14%

  Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  Jul 7, 2008
• Unscored —
  CVE-2008-2799

  Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonke…

  Jul 7, 2008
• Unscored —
  CVE-2008-2800

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to bypass the Same Origin Policy and…

  Jul 7, 2008
• Unscored —
  CVE-2008-2801

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly implement JAR signing, which allows remote …

  Jul 7, 2008
• Unscored —
  CVE-2008-2802

  Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers t…

  Jul 7, 2008
• Unscored —
  CVE-2008-2803

  The mozIJSSubScriptLoader.LoadScript function in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and…

  Jul 7, 2008
• Unscored —
  CVE-2008-2805

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 allow remote attackers to force the upload of arbitrary loc…

  Jul 7, 2008
• Unscored —
  CVE-2008-2807

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly handle an invalid .properties file for an a…

  Jul 7, 2008
• Unscored —
  CVE-2008-2808

  Mozilla Firefox before 2.0.0.15 and SeaMonkey before 1.1.10 do not properly escape HTML in file:// URLs in directory li…

  Jul 7, 2008
• Unscored —
  CVE-2008-2809

  Mozilla 1.9 M8 and earlier, Mozilla Firefox 2 before 2.0.0.15, SeaMonkey 1.1.5 and other versions before 1.1.10, Netsca…

  Jul 8, 2008
• Unscored —
  CVE-2008-2811

  The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey bef…

  Jul 7, 2008
• Unscored —
  CVE-2008-2933

  Mozilla Firefox before 2.0.0.16, and 3.x before 3.0.1, interprets '|' (pipe) characters in a command-line URI as reques…

  Jul 17, 2008
• Unscored —
  CVE-2008-3835

  The nsXMLDocument::OnChannelRedirect function in Mozilla Firefox before 2.0.0.17, Thunderbird before 2.0.0.17, and SeaM…

  Sep 24, 2008
• Unscored —
  CVE-2008-3836

  feedWriter in Mozilla Firefox before 2.0.0.17 allows remote attackers to execute scripts with chrome privileges via vec…

  Sep 24, 2008
• Unscored —
  CVE-2008-3837

  Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, and SeaMonkey before 1.1.12, allow user-assisted remote attackers…

  Sep 24, 2008
• Unscored —
  CVE-2008-4058

  The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMo…

  Sep 24, 2008
• Unscored —
  CVE-2008-4059

  The XPConnect component in Mozilla Firefox before 2.0.0.17 allows remote attackers to "pollute XPCNativeWrappers" and e…

  firefox Wolfi
  Sep 24, 2008
• Unscored —
  CVE-2008-4060

  Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  Sep 24, 2008
• Unscored —
  CVE-2008-4061

  Integer overflow in the MathML component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.…

  Sep 24, 2008
• Unscored —
  CVE-2008-4062

  Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.…

  Sep 24, 2008
• Unscored —
  CVE-2008-4065

  Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allow re…

  Sep 24, 2008
• Unscored —
  CVE-2008-4067

  Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

  Sep 24, 2008
• Unscored —
  CVE-2008-4068

  Directory traversal vulnerability in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17,…

  Sep 24, 2008
• Unscored —
  CVE-2008-4069

  The XBM decoder in Mozilla Firefox before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers to read uninitia…

  Sep 24, 2008
• Unscored —
  CVE-2008-4070

  Heap-based buffer overflow in Mozilla Thunderbird before 2.0.0.17 and SeaMonkey before 1.1.12 allows remote attackers t…

  Sep 27, 2008
• Unscored —
  CVE-2008-4582 Public exploit EPSS 10%

  Mozilla Firefox 3.0.1 through 3.0.3, Firefox 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13, when running on Wind…

  Oct 15, 2008
• Unscored —
  CVE-2008-5012

  Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 do not properly c…

  Nov 13, 2008
• Unscored —
  CVE-2008-5013

  Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has bee…

  Nov 13, 2008
• Unscored —
  CVE-2008-5014

  jslock.cpp in Mozilla Firefox 3.x before 3.0.2, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMo…

  Nov 13, 2008
• Unscored —
  CVE-2008-5017

  Integer overflow in xpcom/io/nsEscape.cpp in the browser engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before…

  Nov 13, 2008
• Unscored —
  CVE-2008-5018

  The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18…

  Nov 13, 2008
• Unscored —
  CVE-2008-5021

  nsFrameManager in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey…

  Nov 13, 2008
• Unscored —
  CVE-2008-5022

  The nsXMLHttpRequest::NotifyEventListeners method in Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird…

  Nov 13, 2008
• Unscored —
  CVE-2008-5024

  Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x befor…

  Nov 13, 2008
• Unscored —
  CVE-2008-5052

  The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x befo…

  Nov 13, 2008
• Unscored —
  CVE-2008-5500

  The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and Sea…

  Dec 17, 2008
• Unscored —
  CVE-2008-5503

  The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey…

  Dec 17, 2008
• Unscored —
  CVE-2008-5506

  Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  Dec 17, 2008
• Unscored —
  CVE-2008-5507

  Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  Dec 17, 2008
• Unscored —
  CVE-2008-5508

  Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  Dec 17, 2008
• Unscored —
  CVE-2008-5511

  Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1…

  Dec 17, 2008
• Unscored —
  CVE-2008-5512

  Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x befor…

  Dec 17, 2008