The Mozilla Foundation reports of multiple security issues in Firefox, SeaMonkey, and Thunderbird. Several of these issues can probably be used to run arbitrary code with the privilege of the user running the program.

- MFSA 2008-19 XUL popup spoofing variant (cross-tab popups)

- MFSA 2008-18 Java socket connection to any local port via LiveConnect

- MFSA 2008-17 Privacy issue with SSL Client Authentication

- MFSA 2008-16 HTTP Referrer spoofing with malformed URLs

- MFSA 2008-15 Crashes with evidence of memory corruption (rv:1.8.1.13)

- MFSA 2008-14 JavaScript privilege escalation and arbitrary code execution

This update brings Mozilla Firefox to security update version 2.0.0.13

Following security problems were fixed :

  - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant     (cross-tab popups)

  - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java     socket connection to any local port via LiveConnect

  - MFSA 2008-17/CVE-2007-4879: Privacy issue with SSL     Client Authentication

  - MFSA 2008-16/CVE-2008-1238: HTTP Referrer spoofing with     malformed URLs

  - MFSA 2008-15/CVE-2008-1236 and CVE-2008-1237: Crashes     with evidence of memory corruption (rv:1.8.1.13)

  - MFSA 2008-14/CVE-2008-1233, CVE-2008-1234, and     CVE-2008-1235: JavaScript privilege escalation and     arbitrary code execution.

Updated thunderbird packages that fix several security issues are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the processing of some malformed HTML mail content. An HTML mail message containing such malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code as the user running Thunderbird. (CVE-2008-1233, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237)

Several flaws were found in the display of malformed web content. An HTML mail message containing specially crafted content could, potentially, trick a user into surrendering sensitive information.
(CVE-2008-1234, CVE-2008-1238, CVE-2008-1241)

Note: JavaScript support is disabled by default in Thunderbird; the above issues are not exploitable unless JavaScript is enabled.

All Thunderbird users should upgrade to these updated packages, which contain backported patches to resolve these issues.

Several flaws were found in the processing of some malformed web content. A web page containing such malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. (CVE-2008-1233, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237)

Several flaws were found in the display of malformed web content. A web page containing specially crafted content could, potentially, trick a Firefox user into surrendering sensitive information.
(CVE-2008-1234, CVE-2008-1238, CVE-2008-1241)

Mozilla Firefox is an open source Web browser. Several flaws were found in the processing of some malformed web content. A web page containing such malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox.
(CVE-2008-1233, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237) Several flaws were found in the display of malformed web content. A web page containing specially crafted content could, potentially, trick a Firefox user into surrendering sensitive information. (CVE-2008-1234, CVE-2008-1238, CVE-2008-1241) All Firefox users should upgrade to these updated packages, which correct these issues, and are rebuilt against the update Firefox packages.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

# This shares a lot of text with dsa-1534.wml, dsa-1535.wml, dsa-1574.wml

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-4879     Peter Brodersen and Alexander Klink discovered that the     autoselection of SSL client certificates could lead to     users being tracked, resulting in a loss of privacy.

  - CVE-2008-1233     'moz_bug_r_a4' discovered that variants of CVE-2007-3738     and CVE-2007-5338 allow the execution of arbitrary code     through XPCNativeWrapper.

  - CVE-2008-1234     'moz_bug_r_a4' discovered that insecure handling of     event handlers could lead to cross-site scripting.

  - CVE-2008-1235     Boris Zbarsky, Johnny Stenback and 'moz_bug_r_a4'     discovered that incorrect principal handling could lead     to cross-site scripting and the execution of arbitrary     code.

  - CVE-2008-1236     Tom Ferris, Seth Spitzer, Martin Wargers, John Daggett     and Mats Palmgren discovered crashes in the layout     engine, which might allow the execution of arbitrary     code.

  - CVE-2008-1237     'georgi', 'tgirmann' and Igor Bukanov discovered crashes     in the JavaScript engine, which might allow the     execution of arbitrary code.

  - CVE-2008-1238     Gregory Fleischer discovered that HTTP Referrer headers     were handled incorrectly in combination with URLs     containing Basic Authentication credentials with empty     usernames, resulting in potential Cross-Site Request     Forgery attacks.

  - CVE-2008-1240     Gregory Fleischer discovered that web content fetched     through the jar: protocol can use Java to connect to     arbitrary ports. This is only an issue in combination     with the non-free Java plugin.

  - CVE-2008-1241     Chris Thomas discovered that background tabs could     generate XUL popups overlaying the current tab,     resulting in potential spoofing attacks.

The Mozilla products from the old stable distribution (sarge) are no longer supported.

This update brings the Mozilla XULRunner engine to security update version level 1.1.9

Following security problems were fixed :

  - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant     (cross-tab popups)

  - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java     socket connection to any local port via LiveConnect

  - MFSA 2008-17/CVE-2007-4879: Privacy issue with SSL     Client Authentication

  - MFSA 2008-16/CVE-2008-1238: HTTP Referrer spoofing with     malformed URLs

  - MFSA 2008-15/CVE-2008-1236 and CVE-2008-1237: Crashes     with evidence of memory corruption (rv:1.8.1.13)

  - MFSA 2008-14/CVE-2008-1233, CVE-2008-1234, and     CVE-2008-1235: JavaScript privilege escalation and     arbitrary code execution.

Several flaws were found in the processing of some malformed web content. A web page containing such malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code as the user running SeaMonkey. (CVE-2008-1233, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237)

Several flaws were found in the display of malformed web content. A web page containing specially crafted content could, potentially, trick a SeaMonkey user into surrendering sensitive information.
(CVE-2008-1234, CVE-2008-1238, CVE-2008-1241)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0207 advisory.

    [1.5.0.12-14.0.1]
    - Add firefox-oracle-default-bookmarks.html and firefox-oracle-default-prefs.js

    [1.5.0.12-14]
    - Fix assertions from script

    [1.5.0.12-13]
    - Ensure wrappers are properly disposed of

    [1.5.0.12-12]
    - Update to latest snapshot of Mozilla 1.8.0 branch
    - Add patches for backported fixes from 1.8.1.13

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of Thunderbird is affected by various security issues :

  - A series of vulnerabilities exist that allow for     JavaScript privilege escalation and arbitrary code     execution.

  - Several stability bugs exist leading to crashes which,     in some cases, show traces of memory corruption.

ID	Name	Product	Family	Published	Updated	Severity
31714	FreeBSD : mozilla -- multiple vulnerabilities (12b336c6-fe36-11dc-b09c-001c2514716c)	Nessus	FreeBSD Local Security Checks	3/31/2008	1/6/2021	high
31715	openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-5135)	Nessus	SuSE Local Security Checks	3/31/2008	1/14/2021	high
31946	CentOS 4 / 5 : thunderbird (CESA-2008:0209)	Nessus	CentOS Local Security Checks	4/17/2008	1/4/2021	high
60376	Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	high
31689	Fedora 7 : Miro-1.1.2-2.fc7 / chmsee-1.0.0-1.30.fc7 / devhelp-0.13-15.fc7 / epiphany-2.18.3-8.fc7 / etc (2008-2662)	Nessus	Fedora Local Security Checks	3/28/2008	1/11/2021	high
31709	Debian DSA-1532-1 : xulrunner - several vulnerabilities	Nessus	Debian Local Security Checks	3/31/2008	1/4/2021	high
32025	openSUSE 10 Security Update : mozilla-xulrunner (mozilla-xulrunner-5163)	Nessus	SuSE Local Security Checks	4/22/2008	1/14/2021	high
60377	Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	high
67675	Oracle Linux 5 : firefox (ELSA-2008-0207)	Nessus	Oracle Linux Local Security Checks	7/12/2013	10/22/2024	medium
32134	Mozilla Thunderbird < 2.0.0.14 Multiple Vulnerabilities	Nessus	Windows	5/6/2008	8/10/2018	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

medium

high