< Back to JetLib.com

jetlib.sec » Tags » xulrunner

« Expand/Collapse

13 items tagged "xulrunner"

Related tags: bugtraq [+], usn [+], vulnerabilities [+], ubuntu [+], martin barbella [+], integer overflow [+], http header [+], barbella [+], vulnerability [+], regression [+], red hat security [+], red [+], png images [+], mdvsa [+], hat [+], based buffer overflow [+], firefox [+]

February 16, 2012
18:34
Red Hat Security Advisory 2012-0143-01
» ‎ Packet Storm Security Advisories

Red Hat Security Advisory 2012-0143-01 - XULRunner provides the XUL Runtime environment for applications using the Gecko layout engine. A heap-based buffer overflow flaw was found in the way XULRunner handled PNG images. A web page containing a malicious PNG image could cause an application linked against XULRunner to crash or, potentially, execute arbitrary code with the privileges of the user running the application. All XULRunner users should upgrade to these updated packages, which correct this issue. After installing the update, applications using XULRunner must be restarted for the changes to take effect.
Tags: xulrunner hat red based-buffer-overflow png-images red-hat-security

March 25, 2011
9:01
Bugtraq: [USN-1091-1] Firefox and Xulrunner vulnerabilities
» ‎ SecurityFocus Vulnerabilities

[USN-1091-1] Firefox and Xulrunner vulnerabilities
Tags: bugtraq firefox xulrunner usn vulnerabilities
October 28, 2010
8:00
Bugtraq: [ MDVSA-2010:213 ] xulrunner
» ‎ SecurityFocus Vulnerabilities

[ MDVSA-2010:213 ] xulrunner
Tags: bugtraq mdvsa xulrunner
September 17, 2010
9:00
Bugtraq: [USN-975-2] Firefox and Xulrunner regression
» ‎ SecurityFocus Vulnerabilities

[USN-975-2] Firefox and Xulrunner regression
Tags: regression firefox xulrunner bugtraq usn
September 09, 2010
8:00
Bugtraq: [USN-975-1] Firefox and Xulrunner vulnerabilities
» ‎ SecurityFocus Vulnerabilities

[USN-975-1] Firefox and Xulrunner vulnerabilities
Tags: bugtraq firefox xulrunner usn vulnerabilities
July 27, 2010
8:00
Bugtraq: [USN-930-6] Firefox and Xulrunner vulnerability
» ‎ SecurityFocus Vulnerabilities

[USN-930-6] Firefox and Xulrunner vulnerability
Tags: vulnerability firefox xulrunner bugtraq usn
July 26, 2010
20:32
Bugtraq: [USN-957-2] Firefox and Xulrunner vulnerability
» ‎ SecurityFocus Vulnerabilities

[USN-957-2] Firefox and Xulrunner vulnerability
Tags: vulnerability firefox xulrunner bugtraq usn

July 23, 2010
13:36
USN-930-5.txt
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 930-5 - USN-930-4 fixed vulnerabilities in Firefox and Xulrunner on Ubuntu 9.04 and 9.10. This update provides updated packages for use with Firefox 3.6 and Xulrunner 1.9.2. It was discovered that Firefox could be made to access freed memory. A flaw was discovered in the way plugin instances interacted. An integer overflow was discovered in Firefox. Martin Barbella discovered an integer overflow in an XSLT node sorting routine. Michal Zalewski discovered that the focus behavior of Firefox could be subverted. Ilja van Sprundel discovered that the 'Content-Disposition: attachment' HTTP header was ignored when 'Content-Type: multipart' was also present.
Tags: ubuntu firefox xulrunner martin-barbella integer-overflow barbella http-header

13:34
USN-930-5.txt
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 930-5 - USN-930-4 fixed vulnerabilities in Firefox and Xulrunner on Ubuntu 9.04 and 9.10. This update provides updated packages for use with Firefox 3.6 and Xulrunner 1.9.2. It was discovered that Firefox could be made to access freed memory. A flaw was discovered in the way plugin instances interacted. An integer overflow was discovered in Firefox. Martin Barbella discovered an integer overflow in an XSLT node sorting routine. Michal Zalewski discovered that the focus behavior of Firefox could be subverted. Ilja van Sprundel discovered that the 'Content-Disposition: attachment' HTTP header was ignored when 'Content-Type: multipart' was also present.
Tags: ubuntu firefox xulrunner martin-barbella integer-overflow barbella http-header

8:02
Bugtraq: [USN-957-1] Firefox and Xulrunner vulnerabilities
» ‎ SecurityFocus Vulnerabilities

[USN-957-1] Firefox and Xulrunner vulnerabilities
Tags: bugtraq firefox xulrunner usn vulnerabilities
8:02
Bugtraq: [USN-930-4] Firefox and Xulrunner vulnerabilities
» ‎ SecurityFocus Vulnerabilities

[USN-930-4] Firefox and Xulrunner vulnerabilities
Tags: bugtraq firefox xulrunner usn vulnerabilities

June 29, 2010
21:05
USN-930-2.txt
» ‎ Packet Storm Security Recent Files

Ubuntu Security Notice 930-2 - USN-930-1 fixed vulnerabilities in Firefox and Xulrunner. This update provides updated packages for use with Firefox 3.6 and Xulrunner 1.9.2 on Ubuntu 8.04 LTS. If was discovered that Firefox could be made to access freed memory. A flaw was discovered in the way plugin instances interacted. An integer overflow was discovered in Firefox. Martin Barbella discovered an integer overflow in an XSLT node sorting routine. Michal Zalewski discovered that the focus behavior of Firefox could be subverted. Ilja van Sprundel discovered that the 'Content-Disposition: attachment' HTTP header was ignored when 'Content-Type: multipart' was also present.
Tags: ubuntu firefox xulrunner martin-barbella integer-overflow barbella http-header

21:02
USN-930-2.txt
» ‎ Packet Storm Security Advisories

Ubuntu Security Notice 930-2 - USN-930-1 fixed vulnerabilities in Firefox and Xulrunner. This update provides updated packages for use with Firefox 3.6 and Xulrunner 1.9.2 on Ubuntu 8.04 LTS. If was discovered that Firefox could be made to access freed memory. A flaw was discovered in the way plugin instances interacted. An integer overflow was discovered in Firefox. Martin Barbella discovered an integer overflow in an XSLT node sorting routine. Michal Zalewski discovered that the focus behavior of Firefox could be subverted. Ilja van Sprundel discovered that the 'Content-Disposition: attachment' HTTP header was ignored when 'Content-Type: multipart' was also present.
Tags: ubuntu firefox xulrunner martin-barbella integer-overflow barbella http-header