|
Sun Solaris Firefox Multiple Vulnerabilities
|
|
|
|
|
Secunia Advisory:
|
SA30620
|
|
|
Release Date:
|
2008-06-11
|
|
|
Critical:
|
Highly critical
|
|
Impact:
|
Security Bypass
Cross Site Scripting
Spoofing
Exposure of sensitive information
DoS
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| OS: | Sun Solaris 10
|
|
| | CVE reference: | CVE-2007-4879 (Secunia mirror)
CVE-2008-0412 (Secunia mirror)
CVE-2008-0413 (Secunia mirror)
CVE-2008-0414 (Secunia mirror)
CVE-2008-0415 (Secunia mirror)
CVE-2008-0416 (Secunia mirror)
CVE-2008-0417 (Secunia mirror)
CVE-2008-0418 (Secunia mirror)
CVE-2008-0419 (Secunia mirror)
CVE-2008-0420 (Secunia mirror)
CVE-2008-0591 (Secunia mirror)
CVE-2008-0592 (Secunia mirror)
CVE-2008-0593 (Secunia mirror)
CVE-2008-0594 (Secunia mirror)
CVE-2008-1233 (Secunia mirror)
CVE-2008-1234 (Secunia mirror)
CVE-2008-1235 (Secunia mirror)
CVE-2008-1236 (Secunia mirror)
CVE-2008-1237 (Secunia mirror)
CVE-2008-1238 (Secunia mirror)
CVE-2008-1195 (Secunia mirror)
CVE-2008-1240 (Secunia mirror)
CVE-2008-1241 (Secunia mirror)
CVE-2008-1380 (Secunia mirror)
|
|
|
Want to know the next time vulnerabilities are fixed in this product?
- Companies can be alerted via email and SMS! |
|
|
Description:
Sun has acknowledged some vulnerabilities in Firefox included in Sun Solaris, which can be exploited by malicious people to disclose sensitive information, bypass certain security restrictions, conduct spoofing, cross-site scripting, and phishing attacks, or to compromise a user's system.
For more information:
SA28622
SA28758
SA29526
SA29787
The vulnerabilities affect Firefox 2.0 for Solaris 10 on SPARC and x86 platforms.
Solution:
Apply patches.
-- SPARC Platform --
Solaris 10:
Apply patch 125539-04 or later.
OpenSolaris:
Fixed in build snv_89 or later.
-- x86 Platform --
Solaris 10:
Apply patch 125540-04 or later.
OpenSolaris:
Fixed in build snv_89 or later.
Original Advisory:
http://sunsolve.sun.com/search/document.do?assetkey=1-66-238492-1
Other References:
SA28622:
http://secunia.com/advisories/28622/
SA28758:
http://secunia.com/advisories/28758/
SA29526:
http://secunia.com/advisories/29526/
SA29787:
http://secunia.com/advisories/29787/
|
|
|
|
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
|
|
|
237 Related Secunia Security Advisories, displaying 10
|
|
|
1. Sun Solaris Kernel Covert Channel Security Bypass
|
|
2. Sun Solaris NFS RPC Zones Denial of Service
|
|
3. Sun Solaris NFS Kernel Module Denial of Service
|
|
4. Sun Solaris NFSv4 Client Kernel Module Denial of Service
|
|
5. Sun Solaris "sendfilev()" Denial of Service
|
|
6. Sun Solaris Trusted Extensions Labeled Networking Unauthorised Access
|
|
7. Sun Solaris "snoop" Multiple Vulnerabilities
|
|
8. Sun Solaris namefs Kernel Module Privilege Escalation
|
|
9. Sun Solaris Adobe Reader Multiple Vulnerabilities
|
|
10. Sun Solaris "pthread_mutex_reltimedlock_np" Local Denial of Service
|
Show all related advisories
|
|
|
Send Feedback to Secunia
|
|
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
|
|
|
|
