Mozilla Firefox 2.0.0.14 Multiple Remote Vulnerabilities

Bugtraq ID:	30038
Class:	Unknown
CVE:	CVE-2008-2798 CVE-2008-2799 CVE-2008-2800 CVE-2008-2801 CVE-2008-2802 CVE-2008-2803 CVE-2008-2805 CVE-2008-2806 CVE-2008-2807 CVE-2008-2808 CVE-2008-2809 CVE-2008-2810 CVE-2008-2811
Remote:	Yes
Local:	No
Published:	Jul 01 2008 12:00AM
Updated:	Apr 13 2015 10:09PM
Credit:	Mozilla Foundation
Vulnerable:	Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Ubuntu Ubuntu Linux 7.10 sparc Ubuntu Ubuntu Linux 7.10 powerpc Ubuntu Ubuntu Linux 7.10 lpia Ubuntu Ubuntu Linux 7.10 i386 Ubuntu Ubuntu Linux 7.10 amd64 Ubuntu Ubuntu Linux 7.04 sparc Ubuntu Ubuntu Linux 7.04 powerpc Ubuntu Ubuntu Linux 7.04 i386 Ubuntu Ubuntu Linux 7.04 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 10 SP2 SuSE SUSE Linux Enterprise Server 10 SP1 SuSE Suse Linux Enterprise Desktop 10 SP2 SuSE Suse Linux Enterprise Desktop 10 SP1 SuSE SUSE Linux Enterprise 10 SP2 DEBUGINFO SuSE SUSE Linux Enterprise 10 SP1 DEBUGINFO Sun Solaris 10_x86 Sun Solaris 10_sparc Sun OpenSolaris build snv_94 Sun OpenSolaris build snv_93 Sun OpenSolaris build snv_92 Sun OpenSolaris build snv_91 Sun OpenSolaris build snv_90 Sun OpenSolaris build snv_89 Slackware Linux 10.2 Slackware Linux 12.1 Slackware Linux 12.0 Slackware Linux 11.0 Slackware Linux -current S.u.S.E. openSUSE 10.3 S.u.S.E. openSUSE 10.2 rPath rPath Linux 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux Optional Productivity Application 5 server Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux Desktop Workstation 5 client Redhat Enterprise Linux Desktop 5 client Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 Redhat Enterprise Linux 5 Server Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Advanced Workstation for the Itanium Processor 2.1 Pardus Linux 2007 0 Pardus Linux 2007.1 Nortel Networks Self-Service Peri Workstation 0 Nortel Networks Self-Service Peri Application 0 Nortel Networks Self-Service MPS 1000 0 Nortel Networks Self-Service - CCSS7 0 Mozilla Thunderbird 2.0 .9 Mozilla Thunderbird 2.0 .8 Mozilla Thunderbird 2.0 .6 Mozilla Thunderbird 2.0 .5 Mozilla Thunderbird 2.0 .4 Mozilla Thunderbird 2.0 .14 Mozilla Thunderbird 2.0 .13 Mozilla Thunderbird 2.0 .12 Mozilla SeaMonkey 1.1.9 Mozilla SeaMonkey 1.1.8 Mozilla SeaMonkey 1.1.7 Mozilla SeaMonkey 1.1.6 Mozilla SeaMonkey 1.1.5 Mozilla SeaMonkey 1.1.4 Mozilla SeaMonkey 1.1.3 Mozilla SeaMonkey 1.1.2 Mozilla SeaMonkey 1.1.1 Mozilla SeaMonkey 1.1 beta Mozilla Firefox 2.0 .9 Mozilla Firefox 2.0 .8 Mozilla Firefox 2.0 .7 Mozilla Firefox 2.0 .6 Mozilla Firefox 2.0 .5 Mozilla Firefox 2.0 .4 Mozilla Firefox 2.0 .3 Mozilla Firefox 2.0 .10 Mozilla Firefox 2.0 .1 Mozilla Firefox 2.0.0.2 Mozilla Firefox 2.0.0.14 Mozilla Firefox 2.0.0.13 Mozilla Firefox 2.0.0.12 Mozilla Firefox 2.0.0.11 Mozilla Firefox 2.0 RC3 Mozilla Firefox 2.0 RC2 Mozilla Firefox 2.0 beta 1 Mozilla Firefox 2.0 Mandriva Linux Mandrake 2008.1 x86_64 Mandriva Linux Mandrake 2008.1 Mandriva Linux Mandrake 2008.0 x86_64 Mandriva Linux Mandrake 2008.0 MandrakeSoft Corporate Server 4.0 x86_64 MandrakeSoft Corporate Server 3.0 x86_64 MandrakeSoft Corporate Server 3.0 MandrakeSoft Corporate Server 4.0 Gentoo Linux Debian Xulrunner 0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0 Debian Iceweasel 0 Avaya Messaging Storage Server 3.1 Avaya Message Networking MN 3.1 Avaya Message Networking 3.1 Avaya Message Networking Avaya Intuity LX 2.0 Avaya Intuity LX Avaya Interactive Response 4.0
Not Vulnerable:	Mozilla SeaMonkey 1.1.10 Mozilla Firefox 2.0.0.15

Mozilla Firefox 2.0.0.14 Multiple Remote Vulnerabilities

The Mozilla Foundation has released multiple security advisories specifying various vulnerabilities in Firefox 2.0.0.14 and prior versions.

Exploiting these issues can allow attackers to:

- steal authentication credentials
- obtain potentially sensitive information
- violate the same-origin policy
- execute scripts with elevated privileges
- upload arbitrary files to affected computers
- cause denial-of-service conditions
- execute arbitrary code

Other attacks are also possible.

These issues are present in Firefox 2.0.0.14 and prior versions.

Mozilla Thunderbird is affected by the issues described in Mozilla advisories MFSA 2008-21, MFSA 2008-24, and MFSA 2008-25. Note that these issues arise in Thunderbird only when JavaScript is enabled. JavaScript is not enabled in the default installation.

Mozilla Firefox 2.0.0.14 Multiple Remote Vulnerabilities

Some of the vulnerabilities described in this BID may not require exploits. For the issues that do require exploit code, we are not aware of any publicly available exploits.

Mozilla Firefox 2.0.0.14 Multiple Remote Vulnerabilities

Solution:
Updates are available. Please see the references for more information.


Ubuntu Ubuntu Linux 7.10 powerpc

• Mozilla firefox-dom-inspector_2.0.0.15+1nobinonly-0ubuntu0.7.10_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom- inspector_2.0.0.15+1nobinonly-0ubuntu0.7.10_all.deb

Mozilla Firefox 2.0.0.13

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Mozilla Firefox 2.0 RC2

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Debian Linux 4.0 amd64

• Debian iceape-browser_1.0.13~pre080614i-0etch1_amd64.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1 .0.13~pre080614i-0etch1_amd64.deb


• Debian iceape-calendar_1.0.13~pre080614i-0etch1_amd64.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_ 1.0.13~pre080614i-0etch1_amd64.deb


• Debian iceape-chatzilla_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-chatzilla _1.0.13~pre080614i-0etch1_all.deb


• Debian iceape-dbg_1.0.13~pre080614i-0etch1_amd64.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.1 3~pre080614i-0etch1_amd64.deb


• Debian iceape-dev_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dev_1.0.1 3~pre080614i-0etch1_all.deb


• Debian iceape-dom-inspector_1.0.13~pre080614i-0etch1_amd64.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspe ctor_1.0.13~pre080614i-0etch1_amd64.deb


• Debian iceape-gnome-support_1.0.13~pre080614i-0etch1_amd64.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-sup port_1.0.13~pre080614i-0etch1_amd64.deb


• Debian iceape-mailnews_1.0.13~pre080614i-0etch1_amd64.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_ 1.0.13~pre080614i-0etch1_amd64.deb


• Debian iceape_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.13~pr e080614i-0etch1_all.deb


• Debian mozilla-browser_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-browser_ 1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-calendar_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-calendar _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-chatzilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-chatzill a_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dev_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dev_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dom-inspector_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dom-insp ector_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-js-debugger_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-js-debug ger_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-mailnews_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-mailnews _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-psm_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-psm_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla_1.8+1.0. 13~pre080614i-0etch1_all.deb

Debian Linux 4.0 ia-32

• Debian iceape-browser_1.0.13~pre080614i-0etch1_i386.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1 .0.13~pre080614i-0etch1_i386.deb


• Debian iceape-calendar_1.0.13~pre080614i-0etch1_i386.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_ 1.0.13~pre080614i-0etch1_i386.deb


• Debian iceape-chatzilla_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-chatzilla _1.0.13~pre080614i-0etch1_all.deb


• Debian iceape-dbg_1.0.13~pre080614i-0etch1_i386.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.1 3~pre080614i-0etch1_i386.deb


• Debian iceape-dev_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dev_1.0.1 3~pre080614i-0etch1_all.deb


• Debian iceape-dom-inspector_1.0.13~pre080614i-0etch1_i386.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspe ctor_1.0.13~pre080614i-0etch1_i386.deb


• Debian iceape-gnome-support_1.0.13~pre080614i-0etch1_i386.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-sup port_1.0.13~pre080614i-0etch1_i386.deb


• Debian iceape-mailnews_1.0.13~pre080614i-0etch1_i386.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_ 1.0.13~pre080614i-0etch1_i386.deb


• Debian iceape_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.13~pr e080614i-0etch1_all.deb


• Debian mozilla-browser_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-browser_ 1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-calendar_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-calendar _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-chatzilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-chatzill a_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dev_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dev_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dom-inspector_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dom-insp ector_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-js-debugger_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-js-debug ger_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-mailnews_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-mailnews _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-psm_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-psm_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla_1.8+1.0. 13~pre080614i-0etch1_all.deb

Ubuntu Ubuntu Linux 7.04 i386

• Mozilla firefox-dom-inspector_2.0.0.15+0nobinonly-0ubuntu0.7.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom- inspector_2.0.0.15+0nobinonly-0ubuntu0.7.4_all.deb

Debian Linux 4.0 mips

• Debian iceape-browser_1.0.13~pre080614i-0etch1_mips.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1 .0.13~pre080614i-0etch1_mips.deb


• Debian iceape-calendar_1.0.13~pre080614i-0etch1_mips.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_ 1.0.13~pre080614i-0etch1_mips.deb


• Debian iceape-chatzilla_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-chatzilla _1.0.13~pre080614i-0etch1_all.deb


• Debian iceape-dbg_1.0.13~pre080614i-0etch1_mips.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.1 3~pre080614i-0etch1_mips.deb


• Debian iceape-dev_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dev_1.0.1 3~pre080614i-0etch1_all.deb


• Debian iceape-dom-inspector_1.0.13~pre080614i-0etch1_mips.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspe ctor_1.0.13~pre080614i-0etch1_mips.deb


• Debian iceape-gnome-support_1.0.13~pre080614i-0etch1_mips.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-sup port_1.0.13~pre080614i-0etch1_mips.deb


• Debian iceape-mailnews_1.0.13~pre080614i-0etch1_mips.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_ 1.0.13~pre080614i-0etch1_mips.deb


• Debian iceape_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.13~pr e080614i-0etch1_all.deb


• Debian mozilla-browser_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-browser_ 1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-calendar_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-calendar _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-chatzilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-chatzill a_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dev_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dev_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dom-inspector_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dom-insp ector_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-js-debugger_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-js-debug ger_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-mailnews_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-mailnews _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-psm_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-psm_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla_1.8+1.0. 13~pre080614i-0etch1_all.deb

Debian Linux 4.0 arm

• Debian iceape-chatzilla_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-chatzilla _1.0.13~pre080614i-0etch1_all.deb


• Debian iceape-dev_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dev_1.0.1 3~pre080614i-0etch1_all.deb


• Debian iceape_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.13~pr e080614i-0etch1_all.deb


• Debian mozilla-browser_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-browser_ 1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-calendar_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-calendar _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-chatzilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-chatzill a_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dev_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dev_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dom-inspector_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dom-insp ector_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-js-debugger_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-js-debug ger_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-mailnews_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-mailnews _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-psm_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-psm_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla_1.8+1.0. 13~pre080614i-0etch1_all.deb

Debian Linux 4.0 powerpc

• Debian iceape-browser_1.0.13~pre080614i-0etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1 .0.13~pre080614i-0etch1_powerpc.deb


• Debian iceape-calendar_1.0.13~pre080614i-0etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_ 1.0.13~pre080614i-0etch1_powerpc.deb


• Debian iceape-chatzilla_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-chatzilla _1.0.13~pre080614i-0etch1_all.deb


• Debian iceape-dbg_1.0.13~pre080614i-0etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.1 3~pre080614i-0etch1_powerpc.deb


• Debian iceape-dev_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dev_1.0.1 3~pre080614i-0etch1_all.deb


• Debian iceape-dom-inspector_1.0.13~pre080614i-0etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspe ctor_1.0.13~pre080614i-0etch1_powerpc.deb


• Debian iceape-gnome-support_1.0.13~pre080614i-0etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-sup port_1.0.13~pre080614i-0etch1_powerpc.deb


• Debian iceape-mailnews_1.0.13~pre080614i-0etch1_powerpc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_ 1.0.13~pre080614i-0etch1_powerpc.deb


• Debian iceape_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.13~pr e080614i-0etch1_all.deb


• Debian mozilla-browser_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-browser_ 1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-calendar_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-calendar _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-chatzilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-chatzill a_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dev_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dev_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dom-inspector_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dom-insp ector_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-js-debugger_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-js-debug ger_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-mailnews_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-mailnews _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-psm_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-psm_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla_1.8+1.0. 13~pre080614i-0etch1_all.deb

Debian Linux 4.0 m68k

• Debian iceape-chatzilla_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-chatzilla _1.0.13~pre080614i-0etch1_all.deb


• Debian iceape-dev_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dev_1.0.1 3~pre080614i-0etch1_all.deb


• Debian iceape_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.13~pr e080614i-0etch1_all.deb


• Debian mozilla-browser_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-browser_ 1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-calendar_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-calendar _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-chatzilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-chatzill a_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dev_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dev_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dom-inspector_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dom-insp ector_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-js-debugger_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-js-debug ger_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-mailnews_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-mailnews _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-psm_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-psm_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla_1.8+1.0. 13~pre080614i-0etch1_all.deb

Ubuntu Ubuntu Linux 7.04 amd64

• Mozilla firefox-dom-inspector_2.0.0.15+0nobinonly-0ubuntu0.7.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom- inspector_2.0.0.15+0nobinonly-0ubuntu0.7.4_all.deb

Mozilla Firefox 2.0.0.12

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Mozilla Firefox 2.0.0.2

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Ubuntu Ubuntu Linux 7.10 lpia

• Mozilla firefox-dom-inspector_2.0.0.15+1nobinonly-0ubuntu0.7.10_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom- inspector_2.0.0.15+1nobinonly-0ubuntu0.7.10_all.deb

Ubuntu Ubuntu Linux 6.06 LTS i386

• Mozilla mozilla-firefox_1.5.dfsg+1.5.0.15~prepatch080614c-0ubuntu1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/mozilla-firefox_ 1.5.dfsg+1.5.0.15~prepatch080614c-0ubuntu1_all.deb

Debian Linux 4.0 sparc

• Debian iceape-browser_1.0.13~pre080614i-0etch1_sparc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-browser_1 .0.13~pre080614i-0etch1_sparc.deb


• Debian iceape-calendar_1.0.13~pre080614i-0etch1_sparc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-calendar_ 1.0.13~pre080614i-0etch1_sparc.deb


• Debian iceape-chatzilla_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-chatzilla _1.0.13~pre080614i-0etch1_all.deb


• Debian iceape-dbg_1.0.13~pre080614i-0etch1_sparc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dbg_1.0.1 3~pre080614i-0etch1_sparc.deb


• Debian iceape-dev_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dev_1.0.1 3~pre080614i-0etch1_all.deb


• Debian iceape-dom-inspector_1.0.13~pre080614i-0etch1_sparc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-dom-inspe ctor_1.0.13~pre080614i-0etch1_sparc.deb


• Debian iceape-gnome-support_1.0.13~pre080614i-0etch1_sparc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-gnome-sup port_1.0.13~pre080614i-0etch1_sparc.deb


• Debian iceape-mailnews_1.0.13~pre080614i-0etch1_sparc.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape-mailnews_ 1.0.13~pre080614i-0etch1_sparc.deb


• Debian iceape_1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/iceape_1.0.13~pr e080614i-0etch1_all.deb


• Debian mozilla-browser_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-browser_ 1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-calendar_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-calendar _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-chatzilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-chatzill a_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dev_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dev_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-dom-inspector_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-dom-insp ector_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-js-debugger_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-js-debug ger_1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-mailnews_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-mailnews _1.8+1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla-psm_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla-psm_1.8+ 1.0.13~pre080614i-0etch1_all.deb


• Debian mozilla_1.8+1.0.13~pre080614i-0etch1_all.deb
  http://security.debian.org/pool/updates/main/i/iceape/mozilla_1.8+1.0. 13~pre080614i-0etch1_all.deb

Ubuntu Ubuntu Linux 7.10 amd64

• Mozilla firefox-dom-inspector_2.0.0.15+1nobinonly-0ubuntu0.7.10_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom- inspector_2.0.0.15+1nobinonly-0ubuntu0.7.10_all.deb

Ubuntu Ubuntu Linux 7.04 powerpc

• Mozilla firefox-dom-inspector_2.0.0.15+0nobinonly-0ubuntu0.7.4_all.deb
  http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom- inspector_2.0.0.15+0nobinonly-0ubuntu0.7.4_all.deb

Mozilla Firefox 2.0.0.14

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Ubuntu Ubuntu Linux 6.06 LTS sparc

• Mozilla mozilla-firefox_1.5.dfsg+1.5.0.15~prepatch080614c-0ubuntu1_all.deb
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/mozilla-firefox_ 1.5.dfsg+1.5.0.15~prepatch080614c-0ubuntu1_all.deb

Mozilla Firefox 2.0 .1

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Mozilla Firefox 2.0 .9

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Mozilla Firefox 2.0 .5

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Mozilla Firefox 2.0 .7

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Mozilla Firefox 2.0 .10

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Mozilla Firefox 2.0 .3

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Mozilla Firefox 2.0 .6

• Mozilla Mozilla Firefox Download
  http://www.mozilla.com/en-US/firefox/all.html

Mozilla Firefox 2.0.0.14 Multiple Remote Vulnerabilities

References:

• What's New in Firefox 2.0.0.15 (Mozilla Foundation)
  
• ASA-2009-158 - Multiple Security Vulnerabilities in Firefox Versions Before 2.0. (Avaya)
  
• Avaya Security Advisory ASA-2008-285 Mozilla Firefox (Avaya)
  
• Avaya Security Advisory ASA-2008-286 SeaMonkey (Avaya)
  
• Fixed in Firefox 2.0.0.15 (Mozilla Foundation)
  
• Nortel Response to Sun Alert 256408 - Solaris 10 - Vulnerabilities in Firefox Ma (Nortel Networks)
  
• RHSA-2008:0547-5 Critical: seamonkey security update (Red Hat)
  
• RHSA-2008:0549-6 Critical: firefox security update (Red Hat)
  
• RHSA-2008:0569-16 Critical: firefox security update (Red Hat)
  
• RHSA-2008:0616-9: Moderate: thunderbird security update (Red Hat)
  
• Solution 256408: Multiple Security Vulnerabilities in Firefox (Sun)
  
• VU#607267 - Mozilla Firefox code execution vulnerability (US-CERT)