The Mozilla XULRunner engine was updated to version 1.9.0.16, fixing lots of bugs and various security issues.

The following issues were fixed :

  - Crashes with evidence of memory corruption (1.9.0.16).
    (MFSA 2009-65 / CVE-2009-3979 / CVE-2009-3981)

  - (bmo#487872) NTLM reflection vulnerability. (MFSA     2009-68 / CVE-2009-3983)

  - (bmo#521461, bmo#514232) Location bar spoofing     vulnerabilities. (MFSA 2009-69 / CVE-2009-3984 /     CVE-2009-3985)

  - (bmo#522430) Privilege escalation via chrome     window.opener. (MFSA 2009-70 / CVE-2009-3986)

USN-873-1 fixed vulnerabilities in Firefox and Xulrunner. The upstream changes introduced a regression when using NTLM authentication. This update fixes the problem and adds additional stability fixes.

We apologize for the inconvenience.

Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Olli Pettay, and David James discovered several flaws in the browser and JavaScript engines of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-3979, CVE-2009-3981, CVE-2009-3986)

Takehiro Takahashi discovered flaws in the NTLM implementation in Firefox. If an NTLM authenticated user visited a malicious website, a remote attacker could send requests to other applications, authenticated as the user.
(CVE-2009-3983)

Jonathan Morgan discovered that Firefox did not properly display SSL indicators under certain circumstances. This could be used by an attacker to spoof an encrypted page, such as in a phishing attack. (CVE-2009-3984)

Jordi Chancel discovered that Firefox did not properly display invalid URLs for a blank page. If a user were tricked into accessing a malicious website, an attacker could exploit this to spoof the location bar, such as in a phishing attack. (CVE-2009-3985).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

USN-874-1 fixed vulnerabilities in Firefox and Xulrunner. The upstream changes introduced a regression when using NTLM authentication. This update fixes the problem and adds additional stability fixes.

We apologize for the inconvenience.

Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Olli Pettay, and David James discovered several flaws in the browser and JavaScript engines of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-3979, CVE-2009-3980, CVE-2009-3982, CVE-2009-3986)

Takehiro Takahashi discovered flaws in the NTLM implementation in Firefox. If an NTLM authenticated user visited a malicious website, a remote attacker could send requests to other applications, authenticated as the user.
(CVE-2009-3983)

Jonathan Morgan discovered that Firefox did not properly display SSL indicators under certain circumstances. This could be used by an attacker to spoof an encrypted page, such as in a phishing attack. (CVE-2009-3984)

Jordi Chancel discovered that Firefox did not properly display invalid URLs for a blank page. If a user were tricked into accessing a malicious website, an attacker could exploit this to spoof the location bar, such as in a phishing attack. (CVE-2009-3985)

David Keeler, Bob Clary, and Dan Kaminsky discovered several flaws in third party media libraries. If a user were tricked into opening a crafted media file, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program.
(CVE-2009-3388, CVE-2009-3389).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2009-3979, CVE-2009-3981, CVE-2009-3986)

A flaw was found in the Firefox NT Lan Manager (NTLM) authentication protocol implementation. If an attacker could trick a local user that has NTLM credentials into visiting a specially crafted web page, they could send arbitrary requests, authenticated with the user's NTLM credentials, to other applications on the user's system.
(CVE-2009-3983)

A flaw was found in the way Firefox displayed the SSL location bar indicator. An attacker could create an unencrypted web page that appears to be encrypted, possibly tricking the user into believing they are visiting a secure page. (CVE-2009-3984)

A flaw was found in the way Firefox displayed blank pages after a user navigates to an invalid address. If a user visits an attacker-controlled web page that results in a blank page, the attacker could inject content into that blank page, possibly tricking the user into believing they are viewing a legitimate page.
(CVE-2009-3985)

After installing the update, Firefox must be restarted for the changes to take effect.

The remote host is affected by the vulnerability described in GLSA-201301-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information,       bypass restrictions and protection mechanisms, force file downloads,       conduct XML injection attacks, conduct XSS attacks, bypass the Same       Origin Policy, spoof URL&rsquo;s for phishing attacks, trigger a vertical       scroll, spoof the location bar, spoof an SSL indicator, modify the       browser&rsquo;s font, conduct clickjacking attacks, or have other unspecified       impact.
    A local attacker could gain escalated privileges, obtain sensitive       information, or replace an arbitrary downloaded file.
  Workaround :

    There is no known workaround at this time.

The remote host is running a version of Mozilla Firefox earlier than 3.0.16 or 3.5.6.  Such versions are potentially affected by multiple vulnerabilities : 

 - Multiple crashes that could result in arbitrary code execution. (MFSA 2009-65)
 - Multiple vulnerabilities in 'liboggplay'  which could lead to arbitrary code execution.  Note that this only affects the 3.5.x branch. (MFSA 2009-66)
 - An integer overflow in the 'Theora' video library which could lead to a crash or the execution of arbitrary code.  Note that this only affects the 3.5.x branch. (MFSA 2009-67)
 - The NTML implementation is vulnerable to reflection attacks in which NTML credentials from one application could be forwarded to another application. (MFSA 2009-68)
 - Multiple location bar spoofing vulnerabilities. (MFSA 2009-69)
 - A content window which is opened by a chrome window retains a reference to the chrome window via the 'window.opener' property which could lead to a privilege escalation. (MFSA 2009-70)
 - The exception messages generated by the 'GeckoActiveXObject' differ based on whether or not the requested COM object's ProgID is present in the system registry. (MFSA 2009-71)



The remote host is running a version of SeaMonkey earlier than 2.0.1.  Such versions are potentially affected by multiple vulnerabilities : 

  - Multiple crashes that could result in arbitrary code execution. (MFSA 2009-65)

  - Multiple vulnerabilities in 'liboggplay'  which could lead to arbitrary code execution.  Note that this only affects the 3.5.x branch. (MFSA 2009-66)

  - An integer overflow in the 'Theora' video library which could lead to a crash or the execution of arbitrary code.  Note that this only affects the 3.5.x branch. (MFSA 2009-67)

  - The NTML implementation is vulnerable to reflection attacks in which NTML credentials from one application could be forwarded to another application. (MFSA 2009-68)

  - Multiple location bar spoofing vulnerabilities. (MFSA 2009-69)

  - A content window which is opened by a chrome window retains a reference to the chrome window via the 'window.opener' property which could lead to a privilege escalation. (MFSA 2009-70)

  - The exception messages generated by the 'GeckoActiveXObject' differ based on whether or not the requested COM object's ProgID is present in the system registry. (MFSA 2009-71)

The remote host is running a version of Mozilla SeaMonkey earlier than 2.0.1.  Such versions are potentially affected by multiple vulnerabilities : 

  - Multiple crashes that could result in arbitrary code execution. (MFSA 2009-65)

  - Multiple vulnerabilities in 'liboggplay'  which could lead to arbitrary code execution.  Note that this only affects the 3.5.x branch. (MFSA 2009-66)

  - An integer overflow in the 'Theora' video library which could lead to a crash or the execution of arbitrary code.  Note that this only affects the 3.5.x branch. (MFSA 2009-67)

  - The NTML implementation is vulnerable to reflection attacks in which NTML credentials from one application could be forwarded to another application. (MFSA 2009-68)

  - Multiple location bar spoofing vulnerabilities. (MFSA 2009-69)

  - A content window which is opened by a chrome window retains a reference to the chrome window via the 'window.opener' property which could lead to a privilege escalation. (MFSA 2009-70)

  - The exception messages generated by the 'GeckoActiveXObject' differ based on whether or not the requested COM object's ProgID is present in the system registry. (MFSA 2009-71)

The remote host is running a version of Mozilla Firefox earlier than 3.0.16 or 3.5.6.  Such versions are potentially affected by multiple vulnerabilities : 

  - Multiple crashes that could result in arbitrary code execution. (MFSA 2009-65)

  - Multiple vulnerabilities in 'liboggplay'  which could lead to arbitrary code execution.  Note that this only affects the 3.5.x branch. (MFSA 2009-66)

  - An integer overflow in the 'Theora' video library which could lead to a crash or the execution of arbitrary code.  Note that this only affects the 3.5.x branch. (MFSA 2009-67)

  - The NTML implementation is vulnerable to reflection attacks in which NTML credentials from one application could be forwarded to another application. (MFSA 2009-68)

  - Multiple location bar spoofing vulnerabilities. (MFSA 2009-69)

  - A content window which is opened by a chrome window retains a reference to the chrome window via the 'window.opener' property which could lead to a privilege escalation. (MFSA 2009-70)

  - The exception messages generated by the 'GeckoActiveXObject' differ based on whether or not the requested COM object's ProgID is present in the system registry. (MFSA 2009-71)

ID	Name	Product	Family	Published	Updated	Severity
43399	SuSE 10 Security Update : XULRunner (ZYPP Patch Number 6736)	Nessus	SuSE Local Security Checks	12/23/2009	1/14/2021	high
43823	Ubuntu 8.04 LTS / 8.10 / 9.04 : firefox-3.0, xulrunner-1.9 regression (USN-877-1)	Nessus	Ubuntu Local Security Checks	1/8/2010	9/19/2019	high
43824	Ubuntu 9.10 : firefox-3.5, xulrunner-1.9.1 regression (USN-878-1)	Nessus	Ubuntu Local Security Checks	1/8/2010	9/19/2019	high
60709	Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	high
63402	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	1/8/2013	12/5/2022	critical
5264	Mozilla Firefox < 3.0.16 / 3.5.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	12/16/2009	3/6/2019	medium
5265	SeaMonkey < 2.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	12/16/2009	3/6/2019	medium
801360	Mozilla SeaMonkey < 2.0.1 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	12/16/2009		high
801369	Mozilla Firefox < 3.0.16 / 3.5.6 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	12/16/2009		high

Detections

Analytics

Plugins Search

high

high

high

high

critical

medium

medium

high

high