Oval Definition:	oval:org.mitre.oval:def:9679
Revision Date: 2013-04-29 Version: 12 Title: The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS. Description: The XPConnect component in Mozilla Firefox before 2.0.0.17 and 3.x before 3.0.2, Thunderbird before 2.0.0.17, and SeaMonkey before 1.1.12 allows remote attackers to "pollute XPCNativeWrappers" and execute arbitrary code with chrome privileges via vectors related to (1) chrome XBL and (2) chrome JS. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2008-4058 Platform(s): CentOS Linux 3 CentOS Linux 4 CentOS Linux 5 Oracle Linux 4 Oracle Linux 5 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Red Hat Enterprise Linux 5 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.24.el3 OR seamonkey-js-debugger is earlier than 0:1.0.9-0.24.el3 OR seamonkey-nss-devel is earlier than 0:1.0.9-0.24.el3 OR seamonkey is earlier than 0:1.0.9-0.24.el3 OR seamonkey-nspr-devel is earlier than 0:1.0.9-0.24.el3 OR seamonkey-mail is earlier than 0:1.0.9-0.24.el3 OR seamonkey-chat is earlier than 0:1.0.9-0.24.el3 OR seamonkey-devel is earlier than 0:1.0.9-0.24.el3 OR seamonkey-dom-inspector is earlier than 0:1.0.9-0.24.el3 OR seamonkey-nss is earlier than 0:1.0.9-0.24.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section devhelp-devel is earlier than 0:0.10-0.10.el4 OR seamonkey-js-debugger is earlier than 0:1.0.9-26.el4 OR thunderbird is earlier than 0:1.5.0.12-16.el4 OR seamonkey is earlier than 0:1.0.9-26.el4 OR devhelp is earlier than 0:0.10-0.10.el4 OR firefox is earlier than 0:3.0.2-3.el4 OR seamonkey-mail is earlier than 0:1.0.9-26.el4 OR seamonkey-chat is earlier than 0:1.0.9-26.el4 OR seamonkey-devel is earlier than 0:1.0.9-26.el4 OR seamonkey-dom-inspector is earlier than 0:1.0.9-26.el4 OR OS Section: RHEL5, CentOS5, Oracle Linux 5 RHEL5, CentOS5 or Oracle Linux 5 The operating system installed on the system is Red Hat Enterprise Linux 5 OR The operating system installed on the system is CentOS Linux 5.x OR Oracle Linux 5.x AND Configuration section devhelp-devel is earlier than 0:0.12-19.el5 OR nss-pkcs11-devel is earlier than 0:3.12.1.1-1.el5 OR xulrunner-devel is earlier than 0:1.9.0.2-5.el5 OR nss is earlier than 0:3.12.1.1-1.el5 OR thunderbird is earlier than 0:2.0.0.17-1.el5 OR xulrunner is earlier than 0:1.9.0.2-5.el5 OR yelp is earlier than 0:2.16.0-21.el5 OR devhelp is earlier than 0:0.12-19.el5 OR xulrunner-devel-unstable is earlier than 0:1.9.0.2-5.el5 OR firefox is earlier than 0:3.0.2-3.el5 OR nss-devel is earlier than 0:3.12.1.1-1.el5 OR nss-tools is earlier than 0:3.12.1.1-1.el5
BACK