RETIRED: Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2011-19 through -28 Multiple Vulnerabilities
BID:48354
Info
RETIRED: Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2011-19 through -28 Multiple Vulnerabilities
| Bugtraq ID: | 48354 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 21 2011 12:00AM |
| Updated: | Jun 22 2011 04:40PM |
| Credit: | Bob Clary, Kevin Brosnan, Nils, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz, Marcia Knous, Luke Wagner, Rh0, secenv, Martin Barbella, Jordi Chancel, Chris Rohlf, Yan Ivnitskiy, reg |
| Vulnerable: |
Mozilla Thunderbird 3.1.7 Mozilla Thunderbird 3.1.5 Mozilla Thunderbird 3.1.5 Mozilla Thunderbird 3.1.4 Mozilla Thunderbird 3.0.11 Mozilla Thunderbird 3.0.9 Mozilla Thunderbird 3.0.9 Mozilla Thunderbird 3.0.8 Mozilla Thunderbird 3.0.5 Mozilla Thunderbird 3.0.5 Mozilla Thunderbird 3.0.4 Mozilla Thunderbird 3.0.2 Mozilla Thunderbird 3.0.1 Mozilla Thunderbird 2.0 24 Mozilla Thunderbird 2.0 .9 Mozilla Thunderbird 2.0 .8 Mozilla Thunderbird 2.0 .6 Mozilla Thunderbird 2.0 .5 Mozilla Thunderbird 2.0 .4 Mozilla Thunderbird 2.0 .19 Mozilla Thunderbird 2.0 .17 Mozilla Thunderbird 2.0 .16 Mozilla Thunderbird 2.0 .15 Mozilla Thunderbird 2.0 .14 Mozilla Thunderbird 2.0 .13 Mozilla Thunderbird 2.0 .12 Mozilla Thunderbird 3.1.9 Mozilla Thunderbird 3.1.8 Mozilla Thunderbird 3.1.7 Mozilla Thunderbird 3.1.6 Mozilla Thunderbird 3.1.3 Mozilla Thunderbird 3.1.2 Mozilla Thunderbird 3.1.2 Mozilla Thunderbird 3.1.10 Mozilla Thunderbird 3.1.1 Mozilla Thunderbird 3.1 Mozilla Thunderbird 3.0.7 Mozilla Thunderbird 3.0.6 Mozilla Thunderbird 3.0.4 Mozilla Thunderbird 3.0.3 Mozilla Thunderbird 3.0.11 Mozilla Thunderbird 3.0.10 Mozilla Thunderbird 3.0 Mozilla Thunderbird 2.0.0.23 Mozilla Thunderbird 2.0.0.22 Mozilla Thunderbird 2.0.0.21 Mozilla Thunderbird 2.0.0.18 Mozilla SeaMonkey 2.0.11 Mozilla SeaMonkey 2.0.11 Mozilla SeaMonkey 2.0.9 Mozilla SeaMonkey 2.0.8 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.3 Mozilla SeaMonkey 2.0.2 Mozilla SeaMonkey 2.0.1 Mozilla SeaMonkey 2.1b2 Mozilla SeaMonkey 2.1 Alpha3 Mozilla SeaMonkey 2.1 Alpha2 Mozilla SeaMonkey 2.1 Alpha1 Mozilla SeaMonkey 2.0.9 Mozilla SeaMonkey 2.0.7 Mozilla SeaMonkey 2.0.6 Mozilla SeaMonkey 2.0.5 Mozilla SeaMonkey 2.0.4 Mozilla SeaMonkey 2.0.14 Mozilla SeaMonkey 2.0.13 Mozilla SeaMonkey 2.0.12 Mozilla SeaMonkey 2.0.10 Mozilla SeaMonkey 2.0 Rc2 Mozilla SeaMonkey 2.0 Rc1 Mozilla SeaMonkey 2.0 Beta 2 Mozilla SeaMonkey 2.0 Beta 1 Mozilla SeaMonkey 2.0 Alpha 3 Mozilla SeaMonkey 2.0 Alpha 2 Mozilla SeaMonkey 2.0 Alpha 1 Mozilla SeaMonkey 2.0 Mozilla SeaMonkey 1.5.0.9 Mozilla SeaMonkey 1.5.0.8 Mozilla SeaMonkey 1.5.0.10 Mozilla Firefox 3.6.13 Mozilla Firefox 3.6.13 Mozilla Firefox 3.6.10 Mozilla Firefox 3.6.9 Mozilla Firefox 3.6.8 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6.4 Mozilla Firefox 3.6.3 Mozilla Firefox 3.6.2 Mozilla Firefox 3.6.2 Mozilla Firefox 3.5.17 Mozilla Firefox 3.5.16 Mozilla Firefox 3.5.14 Mozilla Firefox 3.5.13 Mozilla Firefox 3.5.10 Mozilla Firefox 3.5.10 Mozilla Firefox 3.5.9 Mozilla Firefox 3.5.9 Mozilla Firefox 3.5.8 Mozilla Firefox 3.5.7 Mozilla Firefox 3.5.6 Mozilla Firefox 3.5.5 Mozilla Firefox 3.5.4 Mozilla Firefox 3.5.3 Mozilla Firefox 3.5.2 Mozilla Firefox 3.5.1 Mozilla Firefox 3.5 Mozilla Firefox 4.0.1 Mozilla Firefox 4.0 Beta1 Mozilla Firefox 4.0 Beta1 Mozilla Firefox 4.0 Mozilla Firefox 3.6.7 Mozilla Firefox 3.6.6 Mozilla Firefox 3.6.17 Mozilla Firefox 3.6.16 Mozilla Firefox 3.6.15 Mozilla Firefox 3.6.14 Mozilla Firefox 3.6.12 Mozilla Firefox 3.6.11 Mozilla Firefox 3.6 Beta 3 Mozilla Firefox 3.6 Beta 2 Mozilla Firefox 3.6 Mozilla Firefox 3.5.19 Mozilla Firefox 3.5.18 Mozilla Firefox 3.5.17 Mozilla Firefox 3.5.15 Mozilla Firefox 3.5.12 Mozilla Firefox 3.5.11 |
| Not Vulnerable: |
Mozilla Thunderbird 3.1.11 Mozilla Firefox 5.0 Mozilla Firefox 3.6.18 |
Discussion
RETIRED: Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2011-19 through -28 Multiple Vulnerabilities
The Mozilla Foundation has released multiple security advisories specifying vulnerabilities in Mozilla Firefox, Thunderbird, and SeaMonkey.
These vulnerabilities allow attackers to execute arbitrary code in the context of the vulnerable application, crash affected applications, and obtain potentially sensitive information; other attacks may also be possible.
These issues are fixed in:
Firefox 3.6.18
Firefox 5
Thunderbird 3.1.11
This BID is being retired. The following individual records exist to better document the issues:
48319 Mozilla Firefox WebGL Information Disclosure Vulnerability
48357 Mozilla Firefox/Thunderbird/SeaMonkey SVG Parsing Remote Code Execution Vulnerability
48358 Mozilla Firefox/Thunderbird/SeaMonkey SVG Polygon Parsing Remote Code Execution Vulnerability
48360 Mozilla Firefox/Thunderbird/SeaMonkey XUL Document Handling Remote Code Execution Vulnerability
48361 Mozilla Firefox and Thunderbird CVE-2011-2374 Memory Corruption Vulnerability
48365 Mozilla Firefox and Thunderbird CVE-2011-2375 Memory Corruption Vulnerability
48366 Mozilla Firefox and Thunderbird CVE-2011-2376 Memory Corruption Vulnerability
48367 Mozilla Firefox and Thunderbird CVE-2011-2364 Memory Corruption Vulnerability
48368 Mozilla Firefox and Thunderbird CVE-2011-2365 Memory Corruption Vulnerability
48369 Mozilla Firefox/Thunderbird/SeaMonkey CVE-2011-2377 Remote Memory Corruption Vulnerability
48371 Mozilla Firefox WebGL Out of Bound Read Information Disclosure Vulnerability
48372 Mozilla Firefox/Thunderbird/SeaMonkey 'Array.reduceRight()' Remote Code Execution Vulnerability
48373 Mozilla Firefox/Thunderbird/SeaMonkey XUL Document Use-After-Free Vulnerability
48375 Mozilla Firefox WebGL Invalid Write Remote Code Execution Vulnerability
48376 Mozilla Firefox/Thunderbird/SeaMonkey Cookie Cross Domain Information Disclosure Vulnerability
48379 Mozilla Firefox CVE-2011-2369 HTML Injection Vulnerability
48380 Mozilla Firefox CVE-2011-2370 Security Bypass Vulnerability
The Mozilla Foundation has released multiple security advisories specifying vulnerabilities in Mozilla Firefox, Thunderbird, and SeaMonkey.
These vulnerabilities allow attackers to execute arbitrary code in the context of the vulnerable application, crash affected applications, and obtain potentially sensitive information; other attacks may also be possible.
These issues are fixed in:
Firefox 3.6.18
Firefox 5
Thunderbird 3.1.11
This BID is being retired. The following individual records exist to better document the issues:
48319 Mozilla Firefox WebGL Information Disclosure Vulnerability
48357 Mozilla Firefox/Thunderbird/SeaMonkey SVG Parsing Remote Code Execution Vulnerability
48358 Mozilla Firefox/Thunderbird/SeaMonkey SVG Polygon Parsing Remote Code Execution Vulnerability
48360 Mozilla Firefox/Thunderbird/SeaMonkey XUL Document Handling Remote Code Execution Vulnerability
48361 Mozilla Firefox and Thunderbird CVE-2011-2374 Memory Corruption Vulnerability
48365 Mozilla Firefox and Thunderbird CVE-2011-2375 Memory Corruption Vulnerability
48366 Mozilla Firefox and Thunderbird CVE-2011-2376 Memory Corruption Vulnerability
48367 Mozilla Firefox and Thunderbird CVE-2011-2364 Memory Corruption Vulnerability
48368 Mozilla Firefox and Thunderbird CVE-2011-2365 Memory Corruption Vulnerability
48369 Mozilla Firefox/Thunderbird/SeaMonkey CVE-2011-2377 Remote Memory Corruption Vulnerability
48371 Mozilla Firefox WebGL Out of Bound Read Information Disclosure Vulnerability
48372 Mozilla Firefox/Thunderbird/SeaMonkey 'Array.reduceRight()' Remote Code Execution Vulnerability
48373 Mozilla Firefox/Thunderbird/SeaMonkey XUL Document Use-After-Free Vulnerability
48375 Mozilla Firefox WebGL Invalid Write Remote Code Execution Vulnerability
48376 Mozilla Firefox/Thunderbird/SeaMonkey Cookie Cross Domain Information Disclosure Vulnerability
48379 Mozilla Firefox CVE-2011-2369 HTML Injection Vulnerability
48380 Mozilla Firefox CVE-2011-2370 Security Bypass Vulnerability
Exploit / POC
RETIRED: Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2011-19 through -28 Multiple Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may not require specific exploit code and may be trivial to exploit.
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Some of these issues may not require specific exploit code and may be trivial to exploit.
Solution / Fix
RETIRED: Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2011-19 through -28 Multiple Vulnerabilities
Solution:
Vendor updates are available. Please see the references for more information.
Solution:
Vendor updates are available. Please see the references for more information.
References
RETIRED: Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2011-19 through -28 Multiple Vulnerabilities
References:
References:
- Cisco NX-OS Download Page (Cisco)
- SeaMonkey Homepage (Mozilla)
- Cisco NX-OS Software TACACS+ Command Authorization Vulnerability (Cisco)
- Mozilla Foundation Security Advisory 2011-19 (Mozilla)
- Mozilla Foundation Security Advisory 2011-20 (Mozilla)
- Mozilla Foundation Security Advisory 2011-21 (Mozilla)
- Mozilla Foundation Security Advisory 2011-22 (Mozilla)
- Mozilla Foundation Security Advisory 2011-23 (Mozilla)
- Mozilla Foundation Security Advisory 2011-24 (Mozilla)
- Mozilla Foundation Security Advisory 2011-26 (Mozilla)
- Mozilla Foundation Security Advisory 2011-27 (Mozilla)
- Mozilla Foundation Security Advisory 2011-28 (Mozila)