ALT-BU-2013-1390-1
Branch t6 update bulletin.
Package thunderbird updated to version 17.0.9-alt0.M60P.1 for branch t6 in task 109074.
Closed vulnerabilities
BDU:2014-00303
Уязвимость пакета программ Mozilla SeaMonkey, позволяющая злоумышленнику внедрить произвольный веб-сценарий или HTML-код
Modified: 2024-11-21
CVE-2013-6674
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in an IFRAME element, a related issue to CVE-2014-2018.
- 102566
- 102566
- http://packetstormsecurity.com/files/124965/Mozilla-Thunderbird-Filter-Bypass.html
- http://packetstormsecurity.com/files/124965/Mozilla-Thunderbird-Filter-Bypass.html
- 20140127 Mozilla Bug Bounty #5 - WireTap Remote Web Vulnerability
- 20140127 Mozilla Bug Bounty #5 - WireTap Remote Web Vulnerability
- VU#863369
- VU#863369
- http://www.mozilla.org/security/announce/2014/mfsa2014-14.html
- http://www.mozilla.org/security/announce/2014/mfsa2014-14.html
- 1029773
- 1029773
- 1029774
- 1029774
- USN-2119-1
- USN-2119-1
- https://bugzilla.mozilla.org/show_bug.cgi?id=868267
- https://bugzilla.mozilla.org/show_bug.cgi?id=868267
Modified: 2024-11-21
CVE-2014-2018
Cross-site scripting (XSS) vulnerability in Mozilla Thunderbird 17.x through 17.0.8, Thunderbird ESR 17.x through 17.0.10, and SeaMonkey before 2.20 allows user-assisted remote attackers to inject arbitrary web script or HTML via an e-mail message containing a data: URL in a (1) OBJECT or (2) EMBED element, a related issue to CVE-2013-6674.
- VU#863369
- VU#863369
- http://www.mozilla.org/security/announce/2014/mfsa2014-14.html
- http://www.mozilla.org/security/announce/2014/mfsa2014-14.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- http://www.oracle.com/technetwork/topics/security/bulletinapr2016-2952098.html
- 1029773
- 1029773
- 1029774
- 1029774
- http://www.vulnerability-lab.com/get_content.php?id=953
- http://www.vulnerability-lab.com/get_content.php?id=953
- https://bugzilla.mozilla.org/show_bug.cgi?id=875818
- https://bugzilla.mozilla.org/show_bug.cgi?id=875818
No data currently available.
No data currently available.
No data currently available.
No data currently available.
No data currently available.
No data currently available.
No data currently available.
No data currently available.
No data currently available.
No data currently available.
No data currently available.
No data currently available.
No data currently available.