Mozilla -- multiple vulnerabilities

Description:

The Mozilla Project reports:

MFSA 2011-36 Miscellaneous memory safety hazards (rv:7.0 / rv:1.9.2.23)

MFSA 2011-37 Integer underflow when using JavaScript RegExp

MFSA 2011-38 XSS via plugins and shadowed window.location object

MFSA 2011-39 Defense against multiple Location headers due to CRLF Injection

MFSA 2011-40 Code installation through holding down Enter

MFSA 2011-41 Potentially exploitable WebGL crashes

MFSA 2011-42 Potentially exploitable crash in the YARR regular expression library

MFSA 2011-43 loadSubScript unwraps XPCNativeWrapper scope parameter

MFSA 2011-44 Use after free reading OGG headers

MFSA 2011-45 Inferring Keystrokes from motion data

References:

• CVE name CVE-2011-2372
• CVE name CVE-2011-2995
• CVE name CVE-2011-2996
• CVE name CVE-2011-2997
• CVE name CVE-2011-2999
• CVE name CVE-2011-3000
• CVE name CVE-2011-3001
• CVE name CVE-2011-3002
• CVE name CVE-2011-3003
• CVE name CVE-2011-3004
• CVE name CVE-2011-3005
• CVE name CVE-2011-3232
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-36.html>
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-37.html>
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-38.html>
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-39.html>
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-40.html>
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-41.html>
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-42.html>
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-43.html>
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-44.html>
• URL: <http://www.mozilla.org/security/announce/2011/mfsa2011-45.html>

Affects:

• firefox >4.0,1 <7.0,1
• firefox >3.6.*,1 <3.6.23,1
• libxul >1.9.2.* <1.9.2.23
• linux-firefox <7.0,1
• linux-seamonkey <2.4
• linux-thunderbird <7.0
• seamonkey <2.4
• thunderbird >4.0 <7.0
• thunderbird <3.1.15

Disclaimer: The data contained on this page is derived from the VuXML document, please refer to the the original document for copyright information. The author of portaudit makes no claim of authorship or ownership of any of the information contained herein.

If you have found a vulnerability in a FreeBSD port not listed in the database, please contact the FreeBSD Security Team. Refer to "FreeBSD Security Information" for more information.