drucken bookmarks versenden konfigurieren admin pdf Sicherheit: Mehrere Probleme in iceweasel
Name: |
Mehrere Probleme in iceweasel |
|
ID: |
DSA-2296-1 |
|
Distribution: |
Debian |
|
Plattformen: |
Debian lenny, Debian sid, Debian squeeze |
|
Datum: |
Mi, 17. August 2011, 23:03 |
|
Referenzen: |
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2984
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-0084
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2982
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2981
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2983
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2378 |
|
Applikationen: |
Mozilla Firefox |
|
Originalnachricht |
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1
- ------------------------------------------------------------------------- Debian Security Advisory DSA-2296-1 security@debian.org http://www.debian.org/security/ Moritz Muehlenhoff August 17, 2011 http://www.debian.org/security/faq - -------------------------------------------------------------------------
Package : iceweasel Vulnerability : several Problem type : remote Debian-specific: no CVE ID : CVE-2011-0084 CVE-2011-2378 CVE-2011-2981 CVE-2011-2982 CVE-2011-2983 CVE-2011-2984
Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian.
CVE-2011-0084
"regenrecht" discovered that incorrect pointer handling in the SVG processing code could lead to the execution of arbitrary code.
CVE-2011-2378
"regenrecht" discovered that incorrect memory management in DOM processing could lead to the execution of arbitrary code.
CVE-2011-2981
"moz_bug_r_a_4" discovered a Chrome privilege escalation vulnerability in the event handler code.
CVE-2011-2982
Gary Kwong, Igor Bukanov, Nils and Bob Clary discovered memory corruption bugs, which may lead to the execution of arbitrary code.
CVE-2011-2983
"shutdown" discovered an information leak in the handling of RegExp.input.
CVE-2011-2984
"moz_bug_r_a4" discovered a Chrome privilege escalation vulnerability.
For the oldstable distribution (lenny), this problem has been fixed in version 1.9.0.19-13 of the xulrunner source package.
For the stable distribution (squeeze), this problem has been fixed in version 3.5.16-9.
For the unstable distribution (sid), this problem has been fixed in version 6.0-1
We recommend that you upgrade your iceweasel packages.
Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/
Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.11 (GNU/Linux)
iEYEARECAAYFAk5MEmoACgkQXm3vHE4uylrxZQCfcB2Rsf6ZPacKAZqurE0ytf43 1ZIAoKnQP0fpqbkWO9jnxECmDhkg5Ejj =H8se -----END PGP SIGNATURE-----
-- To UNSUBSCRIBE, email to debian-security-announce-REQUEST@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmaster@lists.debian.org Archive: http://lists.debian.org/20110817191301.GA13124@pisco.westfalen.local
|
|
|
|