Oval Definition:	oval:org.mitre.oval:tst:120986
Comment: Mozilla Thunderbird ESR version is less than 10.0.7 and greater than or equal to 10.x Type: file_test Namespace: windows Check_Existence: at_least_one_exists Check: all State Operator: AND References Object: oval:org.mitre.oval:obj:30278 State: oval:org.mitre.oval:ste:32874 State: oval:org.mitre.oval:ste:33425 Referencing Definitions Definition ID Class Title Last Modified oval:org.mitre.oval:def:16777 V DEPRECATED: The WebGL implementation in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 on Linux, when a large number of sampler uniforms are used, does not properly interact with Mesa drivers, which allows remote attackers to execute arbitrary code or cause a denial of service (stack memory corruption) via a crafted web site. 2014-09-17 oval:org.mitre.oval:def:16935 V The nsLocation::CheckURL function in Mozilla Firefox before 15.0, Firefox ESR 10.x before 10.0.7, Thunderbird before 15.0, Thunderbird ESR 10.x before 10.0.7, and SeaMonkey before 2.12 does not properly follow the security model of the location object, which allows remote attackers to bypass intended content-loading restrictions or possibly have unspecified other impact via vectors involving chrome code. 2014-10-06
BACK