xulrunner - several vulnerabilities

Fixed packages 1

Vulnerabilities 11

• Unscored —
  CVE-2009-3007

  Mozilla Firefox 3.5.1 and SeaMonkey 1.1.17, and Flock 2.5.1, allow context-dependent attackers to spoof the address bar…

  Aug 28, 2009
• Unscored —
  CVE-2009-3274

  Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux …

  Sep 21, 2009
• Unscored —
  CVE-2009-3370

  Mozilla Firefox before 3.0.15, and 3.5.x before 3.5.4, allows remote attackers to read form history by forging mouse an…

  Oct 29, 2009
• Unscored —
  CVE-2009-3372

  Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, allows remote attackers to execute arbi…

  Oct 29, 2009
• Unscored —
  CVE-2009-3373 Public exploit EPSS 16%

  Heap-based buffer overflow in the GIF image parser in Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonk…

  Oct 29, 2009
• Unscored —
  CVE-2009-3374

  The XPCVariant::VariantDataToJS function in the XPCOM implementation in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x b…

  Oct 29, 2009
• Unscored —
  CVE-2009-3375

  content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-…

  Oct 29, 2009
• Unscored —
  CVE-2009-3376

  Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-lef…

  Oct 29, 2009
• Unscored —
  CVE-2009-3380

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.…

  Oct 29, 2009
• Unscored —
  CVE-2009-3382 Public exploit EPSS 11%

  layout/base/nsCSSFrameConstructor.cpp in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 does not properly ha…

  Oct 29, 2009
• Unscored —
  CVE-2009-3385

  The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content…

  Mar 22, 2010