xulrunner - several vulnerabilities

Fixed packages 1

Vulnerabilities 12

• Unscored —
  CVE-2009-1392

  The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows …

  Jun 12, 2009
• Unscored —
  CVE-2009-1832

  Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause…

  Jun 12, 2009
• Unscored —
  CVE-2009-1833

  The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows…

  Jun 12, 2009
• Unscored —
  CVE-2009-1834 Public exploit

  Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey befo…

  Jun 12, 2009
• Unscored —
  CVE-2009-1835

  Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located …

  Jun 12, 2009
• Unscored —
  CVE-2009-1836

  Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to det…

  Jun 12, 2009
• Unscored —
  CVE-2009-1837

  Race condition in the NPObjWrapper_NewResolve function in modules/plugin/base/src/nsJSNPRuntime.cpp in xul.dll in Mozil…

  Jun 12, 2009
• Unscored —
  CVE-2009-1838

  The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey befo…

  Jun 12, 2009
• Unscored —
  CVE-2009-1839 Public exploit

  Mozilla Firefox 3 before 3.0.11 associates an incorrect principal with a file: URL loaded through the location bar, whi…

  Jun 12, 2009
• Unscored —
  CVE-2009-1840

  Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into…

  Jun 12, 2009
• Unscored —
  CVE-2009-1841

  js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey…

  Jun 12, 2009
• Unscored —
  CVE-2009-2061

  Mozilla Firefox before 3.0.10 processes a 3xx HTTP CONNECT response before a successful SSL handshake, which allows man…

  Jun 15, 2009