xulrunner - several vulnerabilities

Fixed packages 1

Vulnerabilities 11

• Unscored —
  CVE-2009-0652

  The Internationalized Domain Names (IDN) blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbir…

  Feb 20, 2009
• Unscored —
  CVE-2009-1302

  The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows…

  Apr 22, 2009
• Unscored —
  CVE-2009-1303

  The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows rem…

  Apr 22, 2009
• Unscored —
  CVE-2009-1304

  The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 all…

  Apr 22, 2009
• Unscored —
  CVE-2009-1305

  The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows …

  Apr 22, 2009
• Unscored —
  CVE-2009-1306

  The jar: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not follow the Content-Dis…

  Apr 22, 2009
• Unscored —
  CVE-2009-1307

  The view-source: URI implementation in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey does not properly imple…

  Apr 22, 2009
• Unscored —
  CVE-2009-1308

  Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey allows remote atta…

  Apr 22, 2009
• Unscored —
  CVE-2009-1309

  Mozilla Firefox before 3.0.9, Thunderbird, and SeaMonkey do not properly implement the Same Origin Policy for (1) XMLHt…

  Apr 22, 2009
• Unscored —
  CVE-2009-1311

  Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive infor…

  Apr 22, 2009
• Unscored —
  CVE-2009-1312 Public exploit

  Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, w…

  Apr 22, 2009