Sign Up for Your FREE Weekly SecurityTracker E-mail Alert Summary
|
|
|
|
|
|
|
Put SecurityTracker Vulnerability Alerts on Your Web Site -- It's Free!
|
|
|
|
Become a Partner and License Our Database or Notification Service
|
|
|
|
|
|
|
|
|
|
|
|
|
Mozilla Seamonkey Multiple Flaws Permit Remote Code Execution, Information Disclosure, and Cross-Site Scripting
|
|
SecurityTracker Alert ID: 1026123 |
|
SecurityTracker URL: http://securitytracker.com/id/1026123
|
|
CVE Reference:
CVE-2011-2372, CVE-2011-2995, CVE-2011-2996, CVE-2011-2997, CVE-2011-2999, CVE-2011-3000, CVE-2011-3001, CVE-2011-3002, CVE-2011-3003, CVE-2011-3004, CVE-2011-3005, CVE-2011-3232
(Links to External Site)
|
Updated: Sep 29 2011
|
Original Entry Date: Sep 29 2011
|
Impact:
Disclosure of authentication information, Disclosure of user information, Execution of arbitrary code via network, Modification of user information, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): prior to 2.4
|
Description:
Multiple vulnerabilities were reported in Mozilla Seamonkey. A remote user can cause arbitrary code to be executed on the target user's system. A remote user may be able to infer keystroke entries on another page. A remote user can conduct cross-site scripting attacks.
A remote user can create specially crafted HTML that, when loaded by the target user, will trigger a memory corruption error and execute arbitrary code on the target system [CVE-2011-2995, CVE-2011-2996, CVE-2011-2997]. The code will run with the privileges of the target user.
A remote user can create a frame named 'location' and shadow the window.location object to conduct cross-site scripting attacks via plugins [CVE-2011-2999].
A remote user can return multiple Location headers to cause Seamonkey to process the wrong location header [CVE-2011-3000].
A remote user can cause the target user to download and execute arbitrary code [CVE-2011-2372] or install an arbitrary extension [CVE-2011-3001] while holding down the Enter key.
A remote user can exploit flaws in WebGL to potentially execute arbitrary code [CVE-2011-3002, CVE-2011-3003].
A remote user can exploit a flaw in the YARR regular expression library to execute arbitrary code [CVE-2011-3232].
The JSSubScriptLoader() unwraps XPCNativeWrappers, which may allow a remote user to gain elevated privileges [CVE-2011-3004].
A specially crafted '.ogg' file can trigger a use-after-free memory error and execute arbitrary code [CVE-2011-3005].
A remote web page may be able to infer keystroke entries on another active web page from motion data events.
Benjamin Smedberg, Bob Clary, Jesse Ruderman, Josh Aas, Andrew McCreight, Andreas Gal, Gary Kwong, Igor Bukanov, Jason Orendorff, Marcia Knous, Ian Graham of Citrix Online, Mariusz Mlynski, Michael Jordon of Context IS, Ben Hawkes of the Google Security Team, Aki Helin, David Rees, sczimmer, Boris Zbarsky, and University of California, Davis researchers Liang Cai and Hao Chen reported these vulnerabilities.
|
Impact:
A remote user can create content that, when loaded by the target user, will execute arbitrary code on the target user's system.
A remote user may be able to infer keystroke entries on another page.
A remote user can conduct cross-site scripting attacks.
|
Solution:
The vendor has issued a fix (2.4).
The vendor's advisories are available at:
http://www.mozilla.org/security/announce/2011/mfsa2011-36.html
http://www.mozilla.org/security/announce/2011/mfsa2011-38.html
http://www.mozilla.org/security/announce/2011/mfsa2011-39.html
http://www.mozilla.org/security/announce/2011/mfsa2011-40.html
http://www.mozilla.org/security/announce/2011/mfsa2011-41.html
http://www.mozilla.org/security/announce/2011/mfsa2011-42.html
http://www.mozilla.org/security/announce/2011/mfsa2011-43.html
http://www.mozilla.org/security/announce/2011/mfsa2011-44.html
http://www.mozilla.org/security/announce/2011/mfsa2011-45.html
|
Vendor URL: www.mozilla.org/security/announce/2011/mfsa2011-36.html (Links to External Site)
|
Cause:
Access control error, Input validation error
|
Underlying OS:
Linux (Any), UNIX (Any), Windows (Any)
|
|
Message History:
This archive entry has one or more follow-up message(s) listed below.
|
Source Message Contents
|
Date: Thu, 29 Sep 2011 04:00:30 +0000
Subject: Mozilla SeaMonkey
|
http://www.mozilla.org/security/announce/2011/mfsa2011-36.html
http://www.mozilla.org/security/announce/2011/mfsa2011-39.html
http://www.mozilla.org/security/announce/2011/mfsa2011-40.html
http://www.mozilla.org/security/announce/2011/mfsa2011-41.html
http://www.mozilla.org/security/announce/2011/mfsa2011-42.html
http://www.mozilla.org/security/announce/2011/mfsa2011-43.html
http://www.mozilla.org/security/announce/2011/mfsa2011-44.html
http://www.mozilla.org/security/announce/2011/mfsa2011-45.html
CVE-2011-2372
CVE-2011-2995
CVE-2011-2996
CVE-2011-2997
CVE-2011-3000
CVE-2011-3001
CVE-2011-3002
CVE-2011-3003
CVE-2011-3004
CVE-2011-3005
CVE-2011-3232
|
|
Go to the Top of This SecurityTracker Archive Page
|
