FreshPorts - VuXML

The Mozilla Project reports:

MFSA 2010-64 Miscellaneous memory safety hazards (rv:1.9.2.11/ 1.9.1.14)

MFSA 2010-65 Buffer overflow and memory corruption using document.write

MFSA 2010-66 Use-after-free error in nsBarProp

MFSA 2010-67 Dangling pointer vulnerability in LookupGetterOrSetter

MFSA 2010-68 XSS in gopher parser when parsing hrefs

MFSA 2010-69 Cross-site information disclosure via modal calls

MFSA 2010-70 SSL wildcard certificate matching IP addresses

MFSA 2010-71 Unsafe library loading vulnerabilities

MFSA 2010-72 Insecure Diffie-Hellman key exchange

gt 3.6.*,1 lt 3.6.11,1

gt 3.5.*,1 lt 3.5.14,1

gt 1.9.2.* lt 1.9.2.11

< 3.6.11,1

< 3.5.14

gt 2.0.* lt 2.0.9

ge 3.0 lt 3.0.9

ge 3.1 lt 3.1.5

The Mozilla Project reports:

MFSA 2010-49 Miscellaneous memory safety hazards (rv:1.9.2.9/ 1.9.1.12)

MFSA 2010-50 Frameset integer overflow vulnerability

MFSA 2010-51 Dangling pointer vulnerability using DOM plugin array

MFSA 2010-52 Windows XP DLL loading vulnerability

MFSA 2010-53 Heap buffer overflow in nsTextFrameUtils::TransformText

MFSA 2010-54 Dangling pointer vulnerability in nsTreeSelection

MFSA 2010-55 XUL tree removal crash and remote code execution

MFSA 2010-56 Dangling pointer vulnerability in nsTreeContentView

MFSA 2010-57 Crash and remote code execution in normalizeDocument

MFSA 2010-58 Crash on Mac using fuzzed font in data: URL

MFSA 2010-59 SJOW creates scope chains ending in outer object

MFSA 2010-60 XSS using SJOW scripted function

MFSA 2010-61 UTF-7 XSS by overriding document charset using object type attribute

MFSA 2010-62 Copy-and-paste or drag-and-drop into designMode document allows XSS

MFSA 2010-63 Information leak via XMLHttpRequest statusText

gt 3.6.*,1 lt 3.6.9,1

gt 3.5.*,1 lt 3.5.12,1

gt 1.9.2.* lt 1.9.2.9

< 3.6.9,1

< 3.5.12

gt 2.0.* lt 2.0.7

ge 3.0 lt 3.0.7

ge 3.1 lt 3.1.3

The Mozilla Project reports:

MFSA 2011-11 Update to HTTPS certificate blacklist

gt 3.6.*,1 lt 3.6.16,1

gt 3.5.*,1 lt 3.5.18,1

gt 1.9.2.* lt 1.9.2.16

< 3.6.16,1

< 3.5.18

gt 2.0.* lt 2.0.13

gt 2.0.* lt 2.0.13

The Mozilla Project reports:

MFSA 2010-73 Heap buffer overflow mixing document.write and DOM insertion

gt 3.6.*,1 lt 3.6.12,1

gt 3.5.*,1 lt 3.5.15,1

gt 1.9.2.* lt 1.9.2.12

< 3.6.12,1

< 3.5.15

< 2.0.10

< 3.1.6

gt 2.0.* lt 2.0.10

ge 3.0 lt 3.0.10

ge 3.1 lt 3.1.6

The Mozilla Project reports:

MFSA 2010-74 Miscellaneous memory safety hazards (rv:1.9.2.13/ 1.9.1.16)

MFSA 2010-75 Buffer overflow while line breaking after document.write with long string

MFSA 2010-76 Chrome privilege escalation with window.open and isindex element

MFSA 2010-77 Crash and remote code execution using HTML tags inside a XUL tree

MFSA 2010-78 Add support for OTS font sanitizer

MFSA 2010-79 Java security bypass from LiveConnect loaded via data: URL meta refresh

MFSA 2010-80 Use-after-free error with nsDOMAttribute MutationObserver

MFSA 2010-81 Integer overflow vulnerability in NewIdArray

MFSA 2010-82 Incomplete fix for CVE-2010-0179

MFSA 2010-83 Location bar SSL spoofing using network error page

MFSA 2010-84 XSS hazard in multiple character encodings

gt 3.6.*,1 lt 3.6.13,1

gt 3.5.*,1 lt 3.5.16,1

gt 1.9.2.* lt 1.9.2.13

< 3.6.13,1

< 3.5.16

gt 2.0.* lt 2.0.11

ge 3.1 lt 3.1.7

gt 2.0.* lt 2.0.11

ge 3.0 lt 3.0.11

ge 3.1 lt 3.1.7

The Mozilla Project reports:

MFSA 2011-12 Miscellaneous memory safety hazards

MFSA 2011-13 Multiple dangling pointer vulnerabilities

MFSA 2011-14 Information stealing via form history

MFSA 2011-15 Escalation of privilege through Java Embedding Plugin

MFSA 2011-16 Directory traversal in resource: protocol

MFSA 2011-17 WebGLES vulnerabilities

MFSA 2011-18 XSLT generate-id() function heap address leak

gt 3.6.*,1 lt 3.6.17,1

gt 3.5.*,1 lt 3.5.19,1

gt 4.0.*,1 lt 4.0.1,1

gt 1.9.2.* lt 1.9.2.17

< 3.6.17,1

< 3.5.19

gt 2.0.* lt 2.0.14

gt 2.0.* lt 2.0.14

The Mozilla Project reports:

MFSA 2011-01 Miscellaneous memory safety hazards (rv:1.9.2.14/ 1.9.1.17)

MFSA 2011-02 Recursive eval call causes confirm dialogs to evaluate to true

MFSA 2011-03 Use-after-free error in JSON.stringify

MFSA 2011-04 Buffer overflow in JavaScript upvarMap

MFSA 2011-05 Buffer overflow in JavaScript atom map

MFSA 2011-06 Use-after-free error using Web Workers

MFSA 2011-07 Memory corruption during text run construction (Windows)

MFSA 2011-08 ParanoidFragmentSink allows javascript: URLs in chrome documents

MFSA 2011-09 Crash caused by corrupted JPEG image

MFSA 2011-10 CSRF risk with plugins and 307 redirects

gt 3.6.*,1 lt 3.6.14,1

gt 3.5.*,1 lt 3.5.17,1

gt 1.9.2.* lt 1.9.2.14

< 3.6.14,1

< 3.5.17

gt 2.0.* lt 2.0.12

ge 3.1 lt 3.1.8

gt 2.0.* lt 2.0.12

< 3.1.8