|
Mozilla Browser Remote Insecure XUL Start Up Script Loading Vulnerability
Solution: This issue has been addressed in Mozilla Firefox 1.0.2 and Mozilla Suite 1.7.6. SGI has released an advisory 20050501-01-U including updated SGI ProPack 3 Service Pack 5 packages to address this BID and other issues. Please see the referenced advisory for more information. Red Hat has released advisory RHSA-2005:384-11 and fixes to address this and other issues on Red Hat Linux Enterprise platforms. Customers who are affected are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information. RedHat has released an advisory (FEDORA-2005-246) for their Fedora Core 3 product. Please see the reference section for more information. Fedora advisory FEDORA-2005-249 is available to address this issue in Mozilla browser for Fedora Core 3. Please see the referenced advisory for more information. Fedora has released advisories FEDORA-2005-252, FEDORA-2005-254, and FEDORA-2005-255 that include updated devhelp, epiphany, and evolution packages. These packages depend on Mozilla, therefore users are advised to upgrade. Please see the referenced advisories for more information. Gentoo has released advisory GLSA 200503-31 to address this issue in Firefox. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to update their computers: Mozilla Firefox users: emerge --sync emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-1.0.2" Mozilla Firefox binary users: emerge --sync emerge --ask --oneshot ?verbose ">=www-client/mozilla-firefox-bin-1.0.2" Gentoo has released advisory GLSA 200503-30 to address this issue. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to update their computers: Mozilla Suite users: emerge --sync emerge --ask --oneshot --verbose ">=www-client/mozilla-1.7.6" Mozilla Suite binary users: emerge --sync emerge --ask --oneshot --verbose ">=www-client/mozilla-bin-1.7.6" Fedora advisory FEDORA-2005-248 is available to address this issue in Mozilla browser for Fedora Core 2. Please see the referenced advisory for more information. Fedora advisories FEDORA-2005-251 and FEDORA-2005-253 including updated devhelp and epiphany packages for Fedora Core 2 are available. Users are advised to upgrade as these packages depend on Mozilla browser. Slackware Linux has released advisory SSA:2005-085-01 along with fixes dealing with this issue. Please see the reference section for more information. RedHat has released advisories RHSA-2005:335 and RHSA-2005:336 to address this issue. Please see the referenced advisory to obtain fix information. HP has released security bulletin SSRT5940 dealing with this and other issues. For more information, please see the reference section. Mandriva has released advisory MDKSA-2005:088 and fixes to address this issue. Please see the referenced advisory for links to fixed packages. Mandriva has released an updated advisory MDKSA-2005:088-1 and updated fixes to address a bug in the initial release of the fixes. Please see the referenced advisory for links to fixed packages. RedHat Fedora Legacy has released advisory FLSA:152883 addressing this and other issues for RedHat Linux 7.3, 9 and for Fedora Core 1 and Core 2. Please see the referenced advisory for details on obtaining and applying the appropriate updates. Netscape Browser 8.0 has been released to address various security issues. Please see the vendor advisory in Web references for more information. HP advisory HPSBUX01133 (SSRT5940 rev.1 - HP-UX Mozilla remote, unauthorized user may execute privileged code) is available to address various issues affecting Mozilla. Please see the referenced advisory for more information. RedHat Fedora Core2
Mozilla Firefox 0.10
Mozilla Firefox 0.10.1
Mozilla Firefox 0.8
Mozilla Firefox 0.9
Mozilla Firefox 0.9 rc
Mozilla Firefox 0.9.1
Mozilla Firefox 0.9.2
Mozilla Firefox 0.9.3
Mozilla Browser 1.0
Mozilla Firefox 1.0
Mozilla Browser 1.0 RC1
Mozilla Browser 1.0 RC2
Mozilla Firefox 1.0.1
Mozilla Browser 1.0.1
Mozilla Browser 1.0.2
Mozilla Browser 1.1
Mozilla Browser 1.1 Alpha
Mozilla Browser 1.1 Beta
Mozilla Browser 1.2 Alpha
Mozilla Browser 1.2
Mozilla Browser 1.2 Beta
Mozilla Browser 1.2.1
Mozilla Browser 1.3
Mozilla Browser 1.3.1
Mozilla Browser 1.4
Mozilla Browser 1.4 a
Mozilla Browser 1.4 b
Mozilla Browser 1.4.1
Mozilla Browser 1.4.2
Mozilla Browser 1.5
Mozilla Browser 1.5.1
Mozilla Browser 1.6
Mozilla Browser 1.7 rc1
Mozilla Browser 1.7
Mozilla Browser 1.7 rc2
Mozilla Browser 1.7 alpha
Mozilla Browser 1.7 beta
Mozilla Browser 1.7 rc3
Mozilla Browser 1.7.1
Mozilla Browser 1.7.2
Mozilla Browser 1.7.3
Mozilla Browser 1.7.4
Mozilla Browser 1.7.5
Netscape Netscape 7.0
Netscape Netscape 7.1
Netscape Netscape 7.2
|
|
 Privacy Statement |
