Mozilla Suite And Firefox Multiple Script Manager Security Bypass Vulnerabilities

Bugtraq ID:	13641
Class:	Access Validation Error
CVE:	CVE-2005-1531
Remote:	Yes
Local:	No
Published:	May 16 2005 12:00AM
Updated:	Mar 02 2007 06:56PM
Credit:	Michael Krax, Georgi Guninski, and L. David Baron are credited with discovering these vulnerabilities.
Vulnerable:	Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 4.1 ppc Ubuntu Ubuntu Linux 4.1 ia64 Ubuntu Ubuntu Linux 4.1 ia32 SuSE Linux Enterprise Server 9 SGI ProPack 3.0 SGI Advanced Linux Environment 3.0 SCO Unixware 7.1.4 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 S.u.S.E. Linux Personal 9.0 x86_64 S.u.S.E. Linux Personal 9.0 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 IA64 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 IA64 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 IA64 Redhat Enterprise Linux AS 2.1 Redhat Enterprise Linux Desktop version 4 Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Advanced Workstation for the Itanium Processor 2.1 IA64 Redhat Advanced Workstation for the Itanium Processor 2.1 Netscape Netscape 8.0 Netscape Netscape 7.2 Netscape Netscape 7.1 Netscape Netscape 7.0 Mozilla Firefox 1.0.3 + Gentoo Linux Mozilla Firefox 1.0.2 + Mandriva Linux Mandrake 10.2 x86_64 + Mandriva Linux Mandrake 10.2 + Mandriva Linux Mandrake 10.2 + Redhat Desktop 4.0 + Redhat Desktop 4.0 + Redhat Enterprise Linux AS 4 + Redhat Enterprise Linux AS 4 + Redhat Enterprise Linux ES 4 + Redhat Enterprise Linux ES 4 + Redhat Enterprise Linux WS 4 + Redhat Enterprise Linux WS 4 Mozilla Firefox 1.0.1 + Redhat Fedora Core3 Mozilla Firefox 1.0 + Gentoo Linux + Gentoo Linux + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 9.0 + Slackware Linux 10.1 + Slackware Linux 10.0 + Slackware Linux 10.0 + Slackware Linux 9.1 + Slackware Linux 9.1 + Slackware Linux -current + Slackware Linux -current Mozilla Firefox 0.10.1 Mozilla Firefox 0.10 Mozilla Firefox 0.9.3 Mozilla Firefox 0.9.2 Mozilla Firefox 0.9.1 Mozilla Firefox 0.9 rc Mozilla Firefox 0.9 Mozilla Firefox 0.8 Mozilla Firefox Preview Release Mozilla Firebird 0.7 Mozilla Firebird 0.6.1 Mozilla Firebird 0.5 Mozilla Browser 1.7.7 + Redhat Desktop 4.0 + Redhat Desktop 4.0 + Redhat Enterprise Linux AS 4 + Redhat Enterprise Linux AS 4 + Redhat Enterprise Linux ES 4 + Redhat Enterprise Linux ES 4 + Redhat Enterprise Linux WS 4 + Redhat Enterprise Linux WS 4 + Turbolinux Home + Turbolinux Home + Turbolinux Turbolinux 10 F... + Turbolinux Turbolinux 10 F... + Turbolinux Turbolinux Desktop 10.0 + Turbolinux Turbolinux Desktop 10.0 + Turbolinux Turbolinux Server 10.0 Mozilla Browser 1.7.6 + HP HP-UX B.11.23 + HP HP-UX B.11.23 + HP HP-UX B.11.22 + HP HP-UX B.11.22 + HP HP-UX B.11.11 + HP HP-UX B.11.11 + HP HP-UX B.11.11 + HP HP-UX B.11.11 + HP HP-UX B.11.00 + HP HP-UX B.11.00 + Redhat Desktop 4.0 + Redhat Desktop 4.0 + Redhat Enterprise Linux AS 4 + Redhat Enterprise Linux AS 4 + Redhat Enterprise Linux ES 4 + Redhat Enterprise Linux ES 4 + Redhat Enterprise Linux WS 4 + Redhat Enterprise Linux WS 4 + Turbolinux Home + Turbolinux Home + Turbolinux Turbolinux 10 F... + Turbolinux Turbolinux Desktop 10.0 + Turbolinux Turbolinux Desktop 10.0 + Turbolinux Turbolinux Server 10.0 + Turbolinux Turbolinux Server 10.0 Mozilla Browser 1.7.5 Mozilla Browser 1.7.4 Mozilla Browser 1.7.3 + HP HP-UX B.11.23 + HP HP-UX B.11.22 + HP HP-UX B.11.22 + HP HP-UX B.11.11 + HP HP-UX B.11.11 + HP HP-UX B.11.11 + HP HP-UX B.11.11 + HP HP-UX B.11.00 + HP HP-UX B.11.00 + HP Tru64 5.1 B-2 PK4 (BL25) + HP Tru64 5.1 B-2 PK4 (BL25) + HP Tru64 5.1 B-2 PK4 + HP Tru64 5.1 B-2 PK4 + HP Tru64 5.1 B PK4 + HP Tru64 5.1 B PK4 + HP Tru64 5.1 A PK6 (BL24) + HP Tru64 5.1 A PK6 (BL24) + HP Tru64 5.1 A PK6 + HP Tru64 5.1 A PK6 Mozilla Browser 1.7.2 Mozilla Browser 1.7.1 Mozilla Browser 1.7 rc3 Mozilla Browser 1.7 rc2 Mozilla Browser 1.7 rc1 Mozilla Browser 1.7 beta Mozilla Browser 1.7 alpha Mozilla Browser 1.7 Mozilla Browser 1.6 Mozilla Browser 1.5.1 Mozilla Browser 1.5 Mozilla Browser 1.4.4 Mozilla Browser 1.4.2 Mozilla Browser 1.4.1 Mozilla Browser 1.4 b Mozilla Browser 1.4 a Mozilla Browser 1.4 + Mandriva Linux Mandrake 9.2 amd64 + Mandriva Linux Mandrake 9.2 Mozilla Browser 1.3.1 Mozilla Browser 1.3 Mozilla Browser 1.2.1 Mozilla Browser 1.2 Beta Mozilla Browser 1.2 Alpha Mozilla Browser 1.2 Mozilla Browser 1.1 Beta Mozilla Browser 1.1 Alpha Mozilla Browser 1.1 Mozilla Browser 1.0.2 + Redhat Advanced Workstation for the Itanium Processor 2.1 + Redhat Advanced Workstation for the Itanium Processor 2.1 + Redhat Enterprise Linux AS 2.1 IA64 + Redhat Enterprise Linux AS 2.1 IA64 + Redhat Enterprise Linux AS 2.1 + Redhat Enterprise Linux AS 2.1 + Redhat Enterprise Linux ES 2.1 IA64 + Redhat Enterprise Linux ES 2.1 IA64 + Redhat Enterprise Linux ES 2.1 + Redhat Enterprise Linux ES 2.1 + Redhat Enterprise Linux WS 2.1 IA64 + Redhat Enterprise Linux WS 2.1 IA64 + Redhat Enterprise Linux WS 2.1 + Redhat Enterprise Linux WS 2.1 + Sun Linux 5.0.7 Mozilla Browser 1.0.1 Mozilla Browser 1.0 RC2 Mozilla Browser 1.0 RC1 - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.1.1 Mozilla Browser 1.0 + Mandriva Linux Mandrake 8.2 ppc + Mandriva Linux Mandrake 8.2 + Redhat Linux 8.0 i386 + Redhat Linux 8.0 Mozilla Browser 0.9.48 Mozilla Browser 0.9.35 Mozilla Browser 0.9.9 - FreeBSD FreeBSD 4.5 - FreeBSD FreeBSD 4.4 - FreeBSD FreeBSD 4.3 - FreeBSD FreeBSD 4.2 - FreeBSD FreeBSD 4.1.1 + Redhat Linux 7.3 i386 + Redhat Linux 7.3 + Redhat Linux 7.2 i686 + Redhat Linux 7.2 i586 + Redhat Linux 7.2 i386 + Redhat Linux 7.2 Mozilla Browser 0.9.8 - Apple Mac OS 9 9.2.2 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows XP 0 Mozilla Browser 0.9.7 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows XP 0 Mozilla Browser 0.9.6 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Be BeOS 5.0 - Be BeOS 5.0 - BSDI BSD/OS 4.2 - BSDI BSD/OS 4.2 - Compaq OpenVMS 7.3 Alpha - Compaq OpenVMS 7.3 Alpha - Compaq OpenVMS 7.2 -2 Alpha - Compaq OpenVMS 7.2 -2 Alpha - Compaq OpenVMS 7.1 -2 Alpha - FreeBSD FreeBSD 4.0 - FreeBSD FreeBSD 4.0 - IBM AIX 4.3.3 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Redhat Linux 7.0 sparc - Redhat Linux 7.0 sparc - Redhat Linux 7.0 i386 - Redhat Linux 7.0 i386 - Redhat Linux 7.0 alpha - Redhat Linux 7.0 alpha - Redhat Linux 6.0 sparc - Redhat Linux 6.0 sparc - Redhat Linux 6.0 alpha - Redhat Linux 6.0 alpha - Redhat Linux 6.0 - Redhat Linux 6.0 - SGI IRIX 6.5 - SGI IRIX 6.5 - Sun Solaris 2.8 - Sun Solaris 2.8 - Sun Solaris 2.7 - Sun Solaris 2.7 Mozilla Browser 0.9.5 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows XP 0 Mozilla Browser 0.9.4 .1 Mozilla Browser 0.9.4 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows XP 0 Mozilla Browser 0.9.3 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows XP 0 Mozilla Browser 0.9.2 .1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows XP 0 Mozilla Browser 0.9.2 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Microsoft Windows NT 4.0 - Microsoft Windows XP 0 Mozilla Browser 0.8 + Mandriva Linux Mandrake 8.0 ppc + Mandriva Linux Mandrake 8.0 Mozilla Browser M16 Mozilla Browser M15 HP Secure Web Browser for OpenVMS Alpha 1.7 -7
Not Vulnerable:	Netscape Netscape 8.0.1 Mozilla Firefox 1.0.4 Mozilla Browser 1.7.8 HP Secure Web Browser for OpenVMS Alpha 1.7 -8

Mozilla Suite And Firefox Multiple Script Manager Security Bypass Vulnerabilities

Multiple issues in Mozilla Suite and Firefox allow attackers to bypass security checks in the script security manager.

Security checks in the script security manager are designed to prevent script-injection vulnerabilities.

An attacker sending certain undisclosed JavaScript in 'view-source:' and 'jar:' pseudo-protocol URIs may bypass these security checks.

An undisclosed nested URI, as well as a variant of BID 13216, can reportedly also bypass security checks.

Exploiting these vulnerabilities allows remote attackers to run script code with elevated privileges, leading to the installation and execution of malicious applications on an affected computer. Cross-site scripting and other attacks are also likely possible.

The vendor has not provided enough information to determine how many specific instances of the issue were addressed, and has not clarified whether or not they have addressed a single general vulnerability or multiple specific vulnerabilities. This BID may be split into separate issues as more information is disclosed.

Further details are scheduled to be released in the future. This BID will be updated at that time.

Mozilla Suite And Firefox Multiple Script Manager Security Bypass Vulnerabilities

The following exploits are available:

• /data/vulnerabilities/exploits/firelinking2.txt
• /data/vulnerabilities/exploits/fireviewing.txt

Mozilla Suite And Firefox Multiple Script Manager Security Bypass Vulnerabilities

Solution:
The vendor has released an advisory as well as upgraded versions of Mozilla Suite and Mozilla Firefox to resolve these issues.


Mozilla Browser M15

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Firefox Preview Release

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Browser M16

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Firefox 0.10

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Firefox 0.8

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Browser 0.8

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Firefox 0.9

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Firefox 0.9.1

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Browser 0.9.2 .1

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Firefox 0.9.2

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Browser 0.9.2

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 0.9.3

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Firefox 0.9.3

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Browser 0.9.35

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 0.9.4

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 0.9.48

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 0.9.5

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 0.9.6

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 0.9.7

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 0.9.8

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 0.9.9

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.0

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Firefox 1.0

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Browser 1.0 RC1

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Firefox 1.0.1

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Browser 1.0.1

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Firefox 1.0.2

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/


• Ubuntu mozilla-firefox-dev_1.0.2-0ubuntu5.3_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox/mozilla- firefox-dev_1.0.2-0ubuntu5.3_amd64.deb


• Ubuntu mozilla-firefox-dev_1.0.2-0ubuntu5.3_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox/mozilla- firefox-dev_1.0.2-0ubuntu5.3_i386.deb


• Ubuntu mozilla-firefox-dev_1.0.2-0ubuntu5.3_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox/mozilla- firefox-dev_1.0.2-0ubuntu5.3_powerpc.deb


• Ubuntu mozilla-firefox-dom-inspector_1.0.2-0ubuntu5.3_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox/mozi lla-firefox-dom-inspector_1.0.2-0ubuntu5.3_amd64.deb


• Ubuntu mozilla-firefox-dom-inspector_1.0.2-0ubuntu5.3_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox/mozi lla-firefox-dom-inspector_1.0.2-0ubuntu5.3_i386.deb


• Ubuntu mozilla-firefox-dom-inspector_1.0.2-0ubuntu5.3_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox/mozi lla-firefox-dom-inspector_1.0.2-0ubuntu5.3_powerpc.deb


• Ubuntu mozilla-firefox-gnome-support_1.0.2-0ubuntu5.3_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox/mozilla- firefox-gnome-support_1.0.2-0ubuntu5.3_amd64.deb


• Ubuntu mozilla-firefox-gnome-support_1.0.2-0ubuntu5.3_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox/mozilla- firefox-gnome-support_1.0.2-0ubuntu5.3_i386.deb


• Ubuntu mozilla-firefox-gnome-support_1.0.2-0ubuntu5.3_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox/mozilla- firefox-gnome-support_1.0.2-0ubuntu5.3_powerpc.deb


• Ubuntu mozilla-firefox_1.0.2-0ubuntu5.3_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox/mozilla- firefox_1.0.2-0ubuntu5.3_amd64.deb


• Ubuntu mozilla-firefox_1.0.2-0ubuntu5.3_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox/mozilla- firefox_1.0.2-0ubuntu5.3_i386.deb


• Ubuntu mozilla-firefox_1.0.2-0ubuntu5.3_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox/mozilla- firefox_1.0.2-0ubuntu5.3_powerpc.deb

Mozilla Browser 1.0.2

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Firefox 1.0.3

• Mozilla Firefox 1.0.4
  http://www.mozilla.org/products/firefox/

Mozilla Browser 1.1

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.1 Alpha

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.1 Beta

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.2 Alpha

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.2

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.2 Beta

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.2.1

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.4

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.4 a

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.4.1

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.4.2

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.5

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.5.1

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.6

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.7 rc1

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.7

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/


• Ubuntu libnspr-dev_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr-dev_1.7. 10-0ubuntu04.10_amd64.deb


• Ubuntu libnspr-dev_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr-dev_1.7. 10-0ubuntu04.10_i386.deb


• Ubuntu libnspr-dev_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr-dev_1.7. 10-0ubuntu04.10_powerpc.deb


• Ubuntu libnspr-dev_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr-dev_1.7. 10-0ubuntu05.04_amd64.deb


• Ubuntu libnspr-dev_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr-dev_1.7. 10-0ubuntu05.04_i386.deb


• Ubuntu libnspr-dev_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr-dev_1.7. 10-0ubuntu05.04_powerpc.deb


• Ubuntu libnspr4_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr4_1.7.10- 0ubuntu04.10_amd64.deb


• Ubuntu libnspr4_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr4_1.7.10- 0ubuntu04.10_i386.deb


• Ubuntu libnspr4_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr4_1.7.10- 0ubuntu04.10_powerpc.deb


• Ubuntu libnspr4_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr4_1.7.10- 0ubuntu05.04_amd64.deb


• Ubuntu libnspr4_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr4_1.7.10- 0ubuntu05.04_i386.deb


• Ubuntu libnspr4_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnspr4_1.7.10- 0ubuntu05.04_powerpc.deb


• Ubuntu libnss-dev_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss-dev_1.7.1 0-0ubuntu04.10_amd64.deb


• Ubuntu libnss-dev_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss-dev_1.7.1 0-0ubuntu04.10_i386.deb


• Ubuntu libnss-dev_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss-dev_1.7.1 0-0ubuntu04.10_powerpc.deb


• Ubuntu libnss-dev_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss-dev_1.7.1 0-0ubuntu05.04_amd64.deb


• Ubuntu libnss-dev_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss-dev_1.7.1 0-0ubuntu05.04_i386.deb


• Ubuntu libnss-dev_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss-dev_1.7.1 0-0ubuntu05.04_powerpc.deb


• Ubuntu libnss3_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss3_1.7.10-0 ubuntu04.10_amd64.deb


• Ubuntu libnss3_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss3_1.7.10-0 ubuntu04.10_i386.deb


• Ubuntu libnss3_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss3_1.7.10-0 ubuntu04.10_powerpc.deb


• Ubuntu libnss3_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss3_1.7.10-0 ubuntu05.04_amd64.deb


• Ubuntu libnss3_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss3_1.7.10-0 ubuntu05.04_i386.deb


• Ubuntu libnss3_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/libnss3_1.7.10-0 ubuntu05.04_powerpc.deb


• Ubuntu mozilla-browser_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-browser_ 1.7.10-0ubuntu04.10_amd64.deb


• Ubuntu mozilla-browser_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-browser_ 1.7.10-0ubuntu04.10_i386.deb


• Ubuntu mozilla-browser_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-browser_ 1.7.10-0ubuntu04.10_powerpc.deb


• Ubuntu mozilla-browser_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-browser_ 1.7.10-0ubuntu05.04_amd64.deb


• Ubuntu mozilla-browser_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-browser_ 1.7.10-0ubuntu05.04_i386.deb


• Ubuntu mozilla-browser_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-browser_ 1.7.10-0ubuntu05.04_powerpc.deb


• Ubuntu mozilla-calendar_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-cale ndar_1.7.10-0ubuntu04.10_amd64.deb


• Ubuntu mozilla-calendar_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-cale ndar_1.7.10-0ubuntu04.10_i386.deb


• Ubuntu mozilla-calendar_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-cale ndar_1.7.10-0ubuntu04.10_powerpc.deb


• Ubuntu mozilla-calendar_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-cale ndar_1.7.10-0ubuntu05.04_amd64.deb


• Ubuntu mozilla-calendar_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-cale ndar_1.7.10-0ubuntu05.04_i386.deb


• Ubuntu mozilla-calendar_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-cale ndar_1.7.10-0ubuntu05.04_powerpc.deb


• Ubuntu mozilla-chatzilla_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-chat zilla_1.7.10-0ubuntu04.10_amd64.deb


• Ubuntu mozilla-chatzilla_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-chat zilla_1.7.10-0ubuntu04.10_i386.deb


• Ubuntu mozilla-chatzilla_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-chat zilla_1.7.10-0ubuntu04.10_powerpc.deb


• Ubuntu mozilla-chatzilla_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-chat zilla_1.7.10-0ubuntu05.04_amd64.deb


• Ubuntu mozilla-chatzilla_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-chat zilla_1.7.10-0ubuntu05.04_i386.deb


• Ubuntu mozilla-chatzilla_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-chat zilla_1.7.10-0ubuntu05.04_powerpc.deb


• Ubuntu mozilla-dev_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-dev_1.7. 10-0ubuntu04.10_amd64.deb


• Ubuntu mozilla-dev_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-dev_1.7. 10-0ubuntu04.10_i386.deb


• Ubuntu mozilla-dev_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-dev_1.7. 10-0ubuntu04.10_powerpc.deb


• Ubuntu mozilla-dev_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-dev_1.7. 10-0ubuntu05.04_amd64.deb


• Ubuntu mozilla-dev_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-dev_1.7. 10-0ubuntu05.04_i386.deb


• Ubuntu mozilla-dev_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-dev_1.7. 10-0ubuntu05.04_powerpc.deb


• Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-dom- inspector_1.7.10-0ubuntu04.10_amd64.deb


• Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-dom- inspector_1.7.10-0ubuntu04.10_i386.deb


• Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-dom- inspector_1.7.10-0ubuntu04.10_powerpc.deb


• Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-dom- inspector_1.7.10-0ubuntu05.04_amd64.deb


• Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-dom- inspector_1.7.10-0ubuntu05.04_i386.deb


• Ubuntu mozilla-dom-inspector_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-dom- inspector_1.7.10-0ubuntu05.04_powerpc.deb


• Ubuntu mozilla-js-debugger_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-js-d ebugger_1.7.10-0ubuntu04.10_amd64.deb


• Ubuntu mozilla-js-debugger_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-js-d ebugger_1.7.10-0ubuntu04.10_i386.deb


• Ubuntu mozilla-js-debugger_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-js-d ebugger_1.7.10-0ubuntu04.10_powerpc.deb


• Ubuntu mozilla-js-debugger_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-js-d ebugger_1.7.10-0ubuntu05.04_amd64.deb


• Ubuntu mozilla-js-debugger_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-js-d ebugger_1.7.10-0ubuntu05.04_i386.deb


• Ubuntu mozilla-js-debugger_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-js-d ebugger_1.7.10-0ubuntu05.04_powerpc.deb


• Ubuntu mozilla-mailnews_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-mail news_1.7.10-0ubuntu04.10_amd64.deb


• Ubuntu mozilla-mailnews_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-mail news_1.7.10-0ubuntu04.10_i386.deb


• Ubuntu mozilla-mailnews_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-mail news_1.7.10-0ubuntu04.10_powerpc.deb


• Ubuntu mozilla-mailnews_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-mail news_1.7.10-0ubuntu05.04_amd64.deb


• Ubuntu mozilla-mailnews_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-mail news_1.7.10-0ubuntu05.04_i386.deb


• Ubuntu mozilla-mailnews_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla-mail news_1.7.10-0ubuntu05.04_powerpc.deb


• Ubuntu mozilla-psm_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-psm_1.7. 10-0ubuntu04.10_amd64.deb


• Ubuntu mozilla-psm_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-psm_1.7. 10-0ubuntu04.10_i386.deb


• Ubuntu mozilla-psm_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-psm_1.7. 10-0ubuntu04.10_powerpc.deb


• Ubuntu mozilla-psm_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-psm_1.7. 10-0ubuntu05.04_amd64.deb


• Ubuntu mozilla-psm_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/http://security. ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-psm_1.7.10-0ubuntu05.04_ i386.deb


• Ubuntu mozilla-psm_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla/mozilla-psm_1.7. 10-0ubuntu05.04_powerpc.deb


• Ubuntu mozilla_1.7.10-0ubuntu04.10_amd64.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla_1.7. 10-0ubuntu04.10_amd64.deb


• Ubuntu mozilla_1.7.10-0ubuntu04.10_i386.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla_1.7. 10-0ubuntu04.10_i386.deb


• Ubuntu mozilla_1.7.10-0ubuntu04.10_powerpc.deb
  Ubuntu 4.10 (Warty Warthog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla_1.7. 10-0ubuntu04.10_powerpc.deb


• Ubuntu mozilla_1.7.10-0ubuntu05.04_amd64.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla_1.7. 10-0ubuntu05.04_amd64.deb


• Ubuntu mozilla_1.7.10-0ubuntu05.04_i386.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla_1.7. 10-0ubuntu05.04_i386.deb


• Ubuntu mozilla_1.7.10-0ubuntu05.04_powerpc.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla/mozilla_1.7. 10-0ubuntu05.04_powerpc.deb

Mozilla Browser 1.7 rc2

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.7 alpha

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.7 beta

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

HP Secure Web Browser for OpenVMS Alpha 1.7 -7

• HP CSWB-OPENVMS-ALPHA-V178.SFX_AXPEXE
  http://h71000.www7.hp.com/openvms/products/ips/cswb/cswb_download.html

Mozilla Browser 1.7.1

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.7.2

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.7.3

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.7.4

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Mozilla Browser 1.7.6

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/


• Ubuntu mozilla-locale-da_1.7.6-2ubuntu0.1_all.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-locale-da/mozill a-locale-da_1.7.6-2ubuntu0.1_all.deb


• Ubuntu mozilla-locale-fr_1.7.6-1ubuntu0.1_all.deb
  Ubuntu 5.04 (Hoary Hedgehog)
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-locale-fr/mozill a-locale-fr_1.7.6-1ubuntu0.1_all.deb

Mozilla Browser 1.7.7

• Mozilla Browser Suite 1.x
  http://www.mozilla.org/products/mozilla1.x/

Netscape Netscape 7.0

• Netscape Netscape 8.0.1
  http://browser.netscape.com/ns8/download/

Netscape Netscape 7.1

• Netscape Netscape 8.0.1
  http://browser.netscape.com/ns8/download/

Netscape Netscape 7.2

• Netscape Netscape 8.0.1
  http://browser.netscape.com/ns8/download/

Netscape Netscape 8.0

• Netscape Netscape 8.0.1
  http://browser.netscape.com/ns8/download/

S.u.S.E. Linux Personal 9.0 x86_64

• SuSE MozillaFirebird-1.0.4-2.x86_64.rpm
  SUSE Linux 9.0:
  ftp://ftp.suse.com/pub/suse/x86_64/update/9.0/rpm/x86_64/MozillaFirebi rd-1.0.4-2.x86_64.rpm

Mozilla Suite And Firefox Multiple Script Manager Security Bypass Vulnerabilities

References:

• Known Vulnerabilities in Mozilla (Mozilla)
  
• MFSA 2005-43 - "Wrapped" javascript: urls bypass security checks (Mozilla)
  
• Mozilla Firefox Home Page (Mozilla)
  
• Mozilla Homepage (Mozilla Foundation)
  
• RHSA-2005:434-10 - Important: firefox security update (RedHat)
  
• RHSA-2005:435-06 - Important: mozilla security update (RedHat)
  
• Security Alerts (Netscape)