sledp2-MozillaFirefoxSecurity update for Mozilla FirefoxSecurity update for Mozilla FirefoxMozillaFirefox was updated to the 3.0.13 release, fixing
some security issues and bugs:
MFSA 2009-44 / CVE-2009-2654: Security researcher Juan
Pablo Lopez Yacubian reported that an attacker could call
window.open() on an invalid URL which looks similar to a
legitimate URL and then use document.write() to place
content within the new document, appearing to have come
from the spoofed location. Additionally, if the spoofed
document was created by a document with a valid SSL
certificate, the SSL indicators would be carried over into
the spoofed document. An attacker could use these issues to
display misleading location and SSL information for a
malicious web page.
MFSA 2009-45 / CVE-2009-2662:The browser engine in Mozilla
Firefox before 3.0.13, and 3.5.x before 3.5.2, allows
remote attackers to cause a denial of service (memory
corruption and application crash) or possibly execute
arbitrary code via vectors related to the
TraceRecorder::snapshot function in js/src/jstracer.cpp,
and unspecified other vectors.
CVE-2009-2663 / MFSA 2009-45: libvorbis before r16182, as
used in Mozilla Firefox before 3.0.13 and 3.5.x before
3.5.2 and other products, allows context-dependent
attackers to cause a denial of service (memory corruption
and application crash) or possibly execute arbitrary code
via a crafted .ogg file.
CVE-2009-2664 / MFSA 2009-45: The js_watch_set function in
js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla
Firefox before 3.0.13, and 3.5.x before 3.5.2, allows
remote attackers to cause a denial of service (assertion
failure and application exit) or possibly execute arbitrary
code via a crafted .js file, related to a "memory safety
bug."
MozillaFirefox was updated to the 3.0.13 release, fixing
some security issues and bugs:
MFSA 2009-44 / CVE-2009-2654: Security researcher Juan
Pablo Lopez Yacubian reported that an attacker could call
window.open() on an invalid URL which looks similar to a
legitimate URL and then use document.write() to place
content within the new document, appearing to have come
from the spoofed location. Additionally, if the spoofed
document was created by a document with a valid SSL
certificate, the SSL indicators would be carried over into
the spoofed document. An attacker could use these issues to
display misleading location and SSL information for a
malicious web page.
MFSA 2009-45 / CVE-2009-2662:The browser engine in Mozilla
Firefox before 3.0.13, and 3.5.x before 3.5.2, allows
remote attackers to cause a denial of service (memory
corruption and application crash) or possibly execute
arbitrary code via vectors related to the
TraceRecorder::snapshot function in js/src/jstracer.cpp,
and unspecified other vectors.
CVE-2009-2663 / MFSA 2009-45: libvorbis before r16182, as
used in Mozilla Firefox before 3.0.13 and 3.5.x before
3.5.2 and other products, allows context-dependent
attackers to cause a denial of service (memory corruption
and application crash) or possibly execute arbitrary code
via a crafted .ogg file.
CVE-2009-2664 / MFSA 2009-45: The js_watch_set function in
js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla
Firefox before 3.0.13, and 3.5.x before 3.5.2, allows
remote attackers to cause a denial of service (assertion
failure and application exit) or possibly execute arbitrary
code via a crafted .js file, related to a "memory safety
bug."
securityMozillaFirefoxi58659e2ed04160ad9354cd5ab660c359a45e3770e95MozillaFirefox-branding-SLEDi58655ae4dff1ca3df883858c69318c0b4e611c044f1MozillaFirefox-translationsi586fa30bc3a44af9f8441386d0f4d898e19d5af6d99firefox3-atkx86_64eec5b61f2ce7df9fff86c30f1272661fdaf5ef9bfirefox3-atk-32bitx86_645b107c662e59d58b33011948cfa835742e5243d2firefox3-cairox86_6451ae99eede272eddfc76f8cafad133446df9ec97firefox3-cairo-32bitx86_6462c6414638b0022c2e68fff2db63807d4787f817firefox3-glib2x86_64f01263fd02d24d1d2c66fb5f6a4b1afbbb4dd05dfirefox3-glib2-32bitx86_64a4e51f54effae74b741e61534045c537af1ebf81firefox3-gtk2x86_6463f6d0cf7ae55e2f6cb5311a9375ca5d61d2bda3firefox3-gtk2-32bitx86_645e3c188b62efe58863c35292e021a2abffa960e7firefox3-pangox86_64b8e31108fa9474deb1b53a0fca3fb59a3ccf20b2firefox3-pango-32bitx86_6473610d534859efe15dd3642ed217f7d78a2742c0mozilla-xulrunner190x86_64c2677acf52ac5a91ca6db6be86231fc36fd72392mozilla-xulrunner190-32bitx86_6460387f6539cde2f8770b7bcf8633e86e2aca70b8mozilla-xulrunner190-gnomevfsx86_64ef19e891e972fad972cbdb7f8b8e71a2ffc3ab62mozilla-xulrunner190-gnomevfs-32bitx86_64b71a143ec27fa3746c96d150aea0e216c45f4e1emozilla-xulrunner190-translationsx86_646bc47dd62ad7692d8ae1cbb21ed98ec4079a72ebmozilla-xulrunner190-translations-32bitx86_646ed2575dbe2efbb165d51f71aada3d8e6ee4812a