Secunia Logo
Netsikker nu! 2008
 
HP-UX update for firefox
Secunia Advisory: SA22066
Release Date: 2006-09-22
Last Update: 2007-09-19
Popularity: 8,017 views

Critical:
Highly critical
Impact: Cross Site Scripting
Spoofing
Exposure of sensitive information
DoS
System access
Where: From remote
Solution Status: Partial Fix

OS:HP-UX 11.x

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2006-0748
CVE-2006-1529
CVE-2006-1530
CVE-2006-1531
CVE-2006-1723
CVE-2006-1724
CVE-2006-1725
CVE-2006-1726
CVE-2006-1727
CVE-2006-1728
CVE-2006-1730
CVE-2006-1942
CVE-2006-1993
CVE-2006-2775
CVE-2006-2776
CVE-2006-2777
CVE-2006-2778
CVE-2006-2779
CVE-2006-2780
CVE-2006-2782
CVE-2006-2783
CVE-2006-2784
CVE-2006-2785
CVE-2006-2786
CVE-2006-2787
CVE-2006-3113
CVE-2006-3677
CVE-2006-3801
CVE-2006-3802
CVE-2006-3803
CVE-2006-3805
CVE-2006-3806
CVE-2006-3807
CVE-2006-3808
CVE-2006-3809
CVE-2006-3810
CVE-2006-3811
CVE-2006-3812
CVE-2006-4253
CVE-2006-4340
CVE-2006-4565
CVE-2006-4566
CVE-2006-4567
CVE-2006-4568
CVE-2006-4569
CVE-2006-4571
CVE-2006-5462
CVE-2006-5463
CVE-2006-5464
CVE-2006-5747
CVE-2006-6077
CVE-2006-6497
CVE-2006-6498
CVE-2006-6499
CVE-2006-6500
CVE-2006-6501
CVE-2006-6502
CVE-2006-6503
CVE-2006-6504
CVE-2006-6506
CVE-2006-6507
CVE-2007-0008
CVE-2007-0009
CVE-2007-0775
CVE-2007-0776
CVE-2007-0777
CVE-2007-0778
CVE-2007-0779
CVE-2007-0780
CVE-2007-0800
CVE-2007-0981
CVE-2007-0994
CVE-2007-0995
CVE-2007-0996
CVE-2007-1092
CVE-2007-1362
CVE-2007-1558
CVE-2007-2867
CVE-2007-2868
CVE-2007-2869
CVE-2007-2870
CVE-2007-2871
CVE-2007-3089
CVE-2007-3656
CVE-2007-3670
CVE-2007-3734
CVE-2007-3735
CVE-2007-3736
CVE-2007-3737
CVE-2007-3738


Description:
HP has issued an update for firefox. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, gain knowledge of potentially sensitive information, conduct cross-site scripting, phishing, and HTTP response smuggling attacks, or compromise a user's system.

For more information:
SA14938
SA19631
SA19698
SA19802
SA19873
SA20376
SA21906
SA22722
SA23282
SA24205
SA25469
SA25984
SA25990
SA26095

Solution:
A preliminary version of Firefox v2.0.0.6 is available:
ftp://ftp.mozilla.org/pub/mozilla.org/firefox/releases/2.0.0.6/contrib/

Changelog:
2007-09-03: Updated "Solution" section. Added additional links and CVE references.
2007-09-19: Updated "Solution" section. Added additional links and CVE references.

Original Advisory:
HPSBUX02153 SSRT061181:
http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742

Other References:
SA14938:
http://secunia.com/advisories/14938/

SA19631:
http://secunia.com/advisories/19631/

SA19698:
http://secunia.com/advisories/19698/

SA19873:
http://secunia.com/advisories/19873/

SA20376:
http://secunia.com/advisories/20376/

SA21906:
http://secunia.com/advisories/21906/

SA22722:
http://secunia.com/advisories/22722/

SA23282:
http://secunia.com/advisories/23282/

SA24205:
http://secunia.com/advisories/24205/

SA25469:
http://secunia.com/advisories/25469/

SA25984:
http://secunia.com/advisories/25984/

SA25990:
http://secunia.com/advisories/25990/

SA26095:
http://secunia.com/advisories/26095/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. phpBB "gen_rand_string()" Predictable RNG Weakness // 24 views
2. CA ARCserve Backup Multiple Vulnerabilities // 24 views
3. phpJobScheduler "installed_config_file" File Inclusion Vulnerabilities // 23 views
4. Sun Java System Web Proxy Server FTP Subsystem Buffer Overflow // 22 views
5. Red Hat update for cups // 20 views
6. phpBB Avatar Script Insertion Vulnerability // 19 views
7. ScriptsEz Easy Image Downloader "id" File Disclosure Vulnerability // 19 views
8. Apple Mac OS X Security Update Fixes Multiple Vulnerabilities // 18 views
9. CUPS Multiple Vulnerabilities // 18 views
10. Opera Multiple Vulnerabilities // 18 views