xulrunner - several vulnerabilities

Fixed packages 1

Vulnerabilities 17

• Unscored —
  CVE-2007-1116

  The CheckLoadURI function in Mozilla Firefox 1.8 lists the about: URI as a ChromeProtocol and can be loaded via JavaScr…

  Feb 26, 2007
• Unscored —
  CVE-2007-1362 Public exploit

  Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to…

  Jun 1, 2007
• Unscored —
  CVE-2007-2867

  Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunder…

  Jun 1, 2007
• Unscored —
  CVE-2007-2868

  Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thu…

  Jun 1, 2007
• Unscored —
  CVE-2007-2869

  The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versio…

  Jun 1, 2007
• Unscored —
  CVE-2007-2870

  Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to…

  Jun 1, 2007
• Unscored —
  CVE-2007-2871

  Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to…

  Jun 1, 2007
• Unscored —
  CVE-2007-3089

  Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or…

  Jun 6, 2007
• Unscored —
  CVE-2007-3656

  Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyc…

  Jul 10, 2007
• Unscored —
  CVE-2007-3734

  Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0…

  Jul 18, 2007
• Unscored —
  CVE-2007-3735

  Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before …

  Jul 18, 2007
• Unscored —
  CVE-2007-3736

  Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary …

  Jul 18, 2007
• Unscored —
  CVE-2007-3737

  Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an e…

  Jul 18, 2007
• Unscored —
  CVE-2007-3738

  Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code…

  Jul 18, 2007
• Unscored —
  CVE-2007-3844 Public exploit

  Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduc…

  Aug 8, 2007
• Unscored —
  CVE-2007-3845 Public exploit

  Mozilla Firefox before 2.0.0.6, Thunderbird before 1.5.0.13 and 2.x before 2.0.0.6, and SeaMonkey before 1.1.4 allow re…

  Aug 8, 2007
• Unscored —
  CVE-2007-4041 EPSS 20%

  Multiple argument injection vulnerabilities in Mozilla Firefox 2.0.0.5 and 3.0alpha allow remote attackers to execute a…

  Jul 27, 2007