Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2009 -14 through -22 Multiple Remote Vulnerabilities

Threat level definition

Mozilla Firefox/Thunderbird/SeaMonkey MFSA 2009 -14 through -22 Multiple Remote Vulnerabilities

References:

Mozilla Homepage (Mozilla Foundation)
Cross-Site Scripting vulnerabilities in Mozilla, Internet Explorer, Opera and Ch ("MustLive" )
ASA-2009-152 - firefox security update (RHSA-2009-0436) (Avaya)
ASA-2009-154 seamonkey security update (RHSA-2009-0437) (Avaya )
ASA-2009-250 - thunderbird security update (RHSA-2009-1125) (Avaya)
MFSA 2009-14 Crashes with evidence of memory corruption (rv:1.9.0.9) (Mozilla)
MFSA 2009-15 URL spoofing with box drawing character (Mozilla)
MFSA 2009-16 jar: scheme ignores the content-disposition: header on the inner U (Mozilla)
MFSA 2009-17 Same-origin violations when Adobe Flash loaded via view-source: sc (Mozilla)
MFSA 2009-18 XSS hazard using third-party stylesheets and XBL binding (Mozilla)
MFSA 2009-19 Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toSt (Mozilla)
MFSA 2009-20 Malicious search plugins can inject code into arbitrary sites (Mozilla)
MFSA 2009-21 POST data sent to wrong site when saving web page with embedded fr (Mozilla)
MFSA 2009-22 Firefox allows Refresh header to redirect to javascript: URIs (Mozilla)
RHSA-2009:0437-1 seamonkey security update (Red Hat)
Solution 264308: Multiple Security Vulnerabilities in Firefox (Sun)

Privacy Statement
Copyright 2009, SecurityFocus