| To: | security-announce@lists.rpath.com, update-announce@lists.rpath.com |
|---|---|
| Subject: | rPSA-2006-0234-1 firefox |
| From: | rPath Update Announcements <announce-noreply@rpath.com> |
| Date: | Fri, 22 Dec 2006 01:41:58 -0500 |
| Cc: | full-disclosure@lists.grok.org.uk, bugtraq@securityfocus.com, lwn@lwn.net |
| Delivered-to: | sp-com-lists@consult.net |
| Delivered-to: | bugtraq-list@securepoint.com |
| Delivered-to: | mailing list bugtraq@securityfocus.com |
| Delivered-to: | moderator for bugtraq@securityfocus.com |
| List-help: | <mailto:bugtraq-help@securityfocus.com> |
| List-id: | <bugtraq.list-id.securityfocus.com> |
| List-post: | <mailto:bugtraq@securityfocus.com> |
| List-subscribe: | <mailto:bugtraq-subscribe@securityfocus.com> |
| List-unsubscribe: | <mailto:bugtraq-unsubscribe@securityfocus.com> |
| Mailing-list: | contact bugtraq-help@securityfocus.com; run by ezmlm |
| User-agent: | nail 11.22 3/20/05 |
rPath Security Advisory: 2006-0234-1
Published: 2006-12-22
Products: rPath Linux 1
Rating: Severe
Exposure Level Classification:
Indirect User Deterministic Unauthorized Access
Updated Versions:
firefox=/conary.rpath.com@rpl:devel//1/1.5.0.9-0.1-1
References:
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6497
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6498
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6501
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6502
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6503
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6504
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6505
https://issues.rpath.com/browse/RPL-883
Description:
Previous versions of the firefox package are vulnerable to multiple
types of attacks, including one that enables an attacker to run
arbitrary attacker-provided executable code if JavaScript is enabled.
|
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | Xt-News 0.1 : SQL Injection Vulnerability & XSS, mr_kaliman |
|---|---|
| Next by Date: | Oracle Applications/Portal 9i/10g Cross Site Scripting, putosoft softputo |
| Previous by Thread: | Xt-News 0.1 : SQL Injection Vulnerability & XSS, mr_kaliman |
| Next by Thread: | Oracle Applications/Portal 9i/10g Cross Site Scripting, putosoft softputo |
| Indexes: | [Date] [Thread] [Top] [All Lists] |