• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Multiple Mozilla/Firefox/Thunderbird Vulnerabilities

References:

• Bug 249332 Bypassing CheckLoadURI using custom getters and changing toString ret (Mozilla - Bugzilla)
  
• Bug 257308 Visual indicators of site security appear for the wrong site (lock ic (Mozilla - Bugzilla)
  
• Bug 262689 lock icon and certificates spoofable with "view-source:" (Mozilla - Bugzilla)
  
• Bug 263546 Security risk: TB uses IE to open javascript pop-up in news-feed item (Mozilla - Bugzilla)
  
• Bug 265176 Javascript allows websites to download content without prompt. (Mozilla - Bugzilla)
  
• Bug 265668 Live bookmarks can have javascript: and data: URLs (Mozilla - Bugzilla)
  
• Bug 265728 Synthetic middle-click event can paste (Mozilla - Bugzilla)
  
• Bug 267263 Browser does not test to see that server sending proxy auth request i (Mozilla - Bugzilla)
  
• Bug 268107 mailnews allows cookies, despite the pref (Mozilla - Bugzilla)
  
• Mozilla Firefox Home Page (Mozilla)
  
• Mozilla Foundation Security Advisory 2005-01 - Link opened in new tab can load (Mozilla)
  
• Mozilla Foundation Security Advisory 2005-03 - Secure site lock can be spoofed (Mozilla)
  
• Mozilla Foundation Security Advisory 2005-04 - Secure site lock can be spoofed (Mozilla)
  
• Mozilla Foundation Security Advisory 2005-07 - Script-generated event can dow (Mozilla)
  
• Mozilla Foundation Security Advisory 2005-08 - Synthetic middle-click event can (Mozilla)
  
• Mozilla Foundation Security Advisory 2005-09 - Browser responds to proxy auth r (Mozilla)
  
• Mozilla Foundation Security Advisory 2005-10 - javascript: links in Thunderbir (Mozilla)
  
• Mozilla Foundation Security Advisory 2005-11 - Mail responds to cookie request (Mozilla)
  
• Mozilla Foundation Security Advisory 2005-12 - javascript: Livefeed bookmarks c (Mozilla)
  
• RHSA-2005:323-10 Critical: mozilla security update (RedHat)
  
• RHSA-2005:335-07 Critical: mozilla security update (RedHat)
  
• RHSA-2005:384-11 - Mozilla security update (Red Hat)
  
• Security Alerts (Netscape)
  
• SSA:2005-085-01 - Mozilla/Firefox/Thunderbird (Slackware)
  
• Thunderbird Home Page (Mozilla)