• info
• discussion
• exploit
• solution
• references

Mozilla Firefox Sage Extension RSS Feeds Cross Domain Scripting Vulnerability

Solution:
Updates are available. Please see the references for more information.


Debian Linux 4.0 amd64

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 4.0 ia-32

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 4.0 arm

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 5.0 hppa

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 5.0 ia-64

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 4.0 hppa

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 4.0 sparc

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 4.0 s/390

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 5.0 m68k

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 5.0 arm

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 4.0 powerpc

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 4.0 alpha

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 4.0 armel

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 5.0 armel

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 4.0 m68k

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 5.0

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 4.0

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 4.0 mipsel

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 5.0 amd64

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 5.0 alpha

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 5.0 ia-32

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 5.0 mips

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 5.0 s/390

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 5.0 mipsel

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 5.0 powerpc

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb

Debian Linux 4.0 ia-64

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 4.0 mips

• Debian firefox-sage_1.3.6-4etch1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.3.6-4etch1_all.deb

Debian Linux 5.0 sparc

• Debian firefox-sage_1.4.2-0.1+lenny1_all.deb
  http://security.debian.org/pool/updates/main/f/firefox-sage/firefox-sa ge_1.4.2-0.1+lenny1_all.deb