• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Mozilla Firefox Large History File Buffer Overflow Vulnerability

Solution:
Please see the referenced vendor advisories for details on obtaining and applying fixes.


Sun Solaris 10.0

• Sun 119115-19
  Mozilla 1.7 for Solaris 10
  http://sunsolve.sun.com/search/document.do?assetkey=urn:cds:docid:1-21 -119115-19-1

Mozilla SeaMonkey 1.0 dev

• Mozilla SeaMonkey 1.0
  http://ftp.mozilla.org/pub/mozilla.org/seamonkey/releases/1.0/seamonke y-1.0.en-US.win32.installer.exe

Mozilla Firefox 0.10.1

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US


• RedHat firefox-1.0.7-1.3.fc3.legacy.i386.rpm
  Fedora Core 3:
  http://download.fedoralegacy.org/fedora/3/updates/i386/firefox-1.0.7-1 .3.fc3.legacy.i386.rpm


• RedHat firefox-1.0.7-1.3.fc3.legacy.x86_64.rpm
  Fedora Core 3:
  http://download.fedoralegacy.org/fedora/3/updates/x86_64/firefox-1.0.7 -1.3.fc3.legacy.x86_64.rpm

Mozilla Firefox 0.8

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Firefox 0.9

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Firefox 0.9 rc

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Firefox 1.0.1

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Firefox 1.0.2

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Firefox 1.0.4

• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_alpha.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_amd64.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_arm.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_hppa.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_i386.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_ia64.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_m68k.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_mips.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_mipsel.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_powerpc.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_s390.deb


• Debian mozilla-firefox-dom-inspector_1.0.4-2sarge6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-dom-inspector_1.0.4-2sarge6_sparc.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_alpha.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_amd64.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_arm.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_hppa.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_i386.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_ia64.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_m68k.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_mips.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_mipsel.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_powerpc.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_s390.deb


• Debian mozilla-firefox-gnome-support_1.0.4-2sarge6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox-gnome-support_1.0.4-2sarge6_sparc.deb


• Debian mozilla-firefox_1.0.4-2sarge6_alpha.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_alpha.deb


• Debian mozilla-firefox_1.0.4-2sarge6_amd64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_amd64.deb


• Debian mozilla-firefox_1.0.4-2sarge6_arm.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_arm.deb


• Debian mozilla-firefox_1.0.4-2sarge6_hppa.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_hppa.deb


• Debian mozilla-firefox_1.0.4-2sarge6_i386.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_i386.deb


• Debian mozilla-firefox_1.0.4-2sarge6_ia64.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_ia64.deb


• Debian mozilla-firefox_1.0.4-2sarge6_m68k.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_m68k.deb


• Debian mozilla-firefox_1.0.4-2sarge6_mips.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_mips.deb


• Debian mozilla-firefox_1.0.4-2sarge6_mipsel.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_mipsel.deb


• Debian mozilla-firefox_1.0.4-2sarge6_powerpc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_powerpc.deb


• Debian mozilla-firefox_1.0.4-2sarge6_s390.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_s390.deb


• Debian mozilla-firefox_1.0.4-2sarge6_sparc.deb
  Debian GNU/Linux 3.1 alias sarge
  http://security.debian.org/pool/updates/main/m/mozilla-firefox/mozilla -firefox_1.0.4-2sarge6_sparc.deb


• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Firefox 1.0.5

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Firefox 1.0.5

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Firefox 1.0.7

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Browser 1.4.1

• RedHat mozilla-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-1.7.12- 1.1.2.legacy.i386.rpm


• RedHat mozilla-chat-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-chat-1. 7.12-1.1.2.legacy.i386.rpm


• RedHat mozilla-devel-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-devel-1 .7.12-1.1.2.legacy.i386.rpm


• RedHat mozilla-dom-inspector-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-dom-ins pector-1.7.12-1.1.2.legacy.i386.rpm


• RedHat mozilla-js-debugger-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-js-debu gger-1.7.12-1.1.2.legacy.i386.rpm


• RedHat mozilla-mail-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-mail-1. 7.12-1.1.2.legacy.i386.rpm


• RedHat mozilla-nspr-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-1. 7.12-1.1.2.legacy.i386.rpm


• RedHat mozilla-nspr-devel-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nspr-de vel-1.7.12-1.1.2.legacy.i386.rpm


• RedHat mozilla-nss-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-1.7 .12-1.1.2.legacy.i386.rpm


• RedHat mozilla-nss-devel-1.7.12-1.1.2.legacy.i386.rpm
  Fedora Core 1:
  http://download.fedoralegacy.org/fedora/1/updates/i386/mozilla-nss-dev el-1.7.12-1.1.2.legacy.i386.rpm

Mozilla Firefox 1.5 beta 2

• Mozilla Firefox 1.5.0.1
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.1& os=win&lang=en-US

Mozilla Browser 1.6

• RedHat mozilla-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-1.7.12- 1.2.3.legacy.i386.rpm


• RedHat mozilla-chat-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-chat-1. 7.12-1.2.3.legacy.i386.rpm


• RedHat mozilla-devel-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-devel-1 .7.12-1.2.3.legacy.i386.rpm


• RedHat mozilla-dom-inspector-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-dom-ins pector-1.7.12-1.2.3.legacy.i386.rpm


• RedHat mozilla-js-debugger-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-js-debu gger-1.7.12-1.2.3.legacy.i386.rpm


• RedHat mozilla-mail-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-mail-1. 7.12-1.2.3.legacy.i386.rpm


• RedHat mozilla-nspr-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nspr-1. 7.12-1.2.3.legacy.i386.rpm


• RedHat mozilla-nspr-devel-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nspr-de vel-1.7.12-1.2.3.legacy.i386.rpm


• RedHat mozilla-nss-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nss-1.7 .12-1.2.3.legacy.i386.rpm


• RedHat mozilla-nss-devel-1.7.12-1.2.3.legacy.i386.rpm
  Fedora Core 2:
  http://download.fedoralegacy.org/fedora/2/updates/i386/mozilla-nss-dev el-1.7.12-1.2.3.legacy.i386.rpm

Netscape Netscape 7.2

• Netscape Netscape 8.x Latest Download
  http://browser.netscape.com/ns8/download/default.jsp

Netscape Browser 8.0.4

• Netscape Netscape 8.x Latest Download
  http://browser.netscape.com/ns8/download/default.jsp