漏洞信息详情
Mozilla Suite/Firefox/SeaMonkey 远程安全漏洞
- CNNVD编号:CNNVD-200604-227
- 危害等级: 低危
- CVE编号: CVE-2006-1729
- 漏洞类型: 输入验证
- 发布时间: 2006-04-14
- 威胁类型: 远程
- 更新时间: 2009-07-28
- 厂 商: mozilla
- 漏洞来源: TippingPoint http:...
漏洞简介
Mozilla Suite/Firefox/SeaMonkey/Thunderbird都是Mozilla发布的WEB浏览器和邮件新闻组客户端产品。
Mozilla Firefox 1.x 以前的 1.5.0.2 和 1.0.x 以前的 1.0.8, Mozilla Suite 以前的 1.7.13, 和 SeaMonkey 以前的 1.0.1版本允许攻击者可以通过首先在弹出窗口中加载目标安全站点然后将站点位置更改至不同位置的方式欺骗浏览器的安全站点标识符。如果用户打开了\"输入安全站点\"模式警告对话框的话,就可以在显示对话框的时候更改窗口位置,而原始站点的安全浏览标识符保持不变。
漏洞公告
目前厂商已经发布了升级补丁以修复这个安全问题,补丁下载链接:
Sun Solaris 10.0
Sun 119115-21
http://sunsolve.sun.com/
Sun Solaris 8
Sun 120671-03
http://sunsolve.sun.com/patches/
HP HP-UX B.11.23
HP Firefox v2.0.0.4
http://www.hp.com/products1/unix/java/Firefox/downloads/license_firefo x_2-0-0-4.HTML
HP thunderbird_1.5.0.9_ia.depot.gz
For HP-UX B.11.23 and B.11.31 (IA)
http://www.hp.com/products1/unix/java/Firefox/downloads/license_thunde rbird_1-5-0-8.HTML
HP thunderbird_1.5.0.9_pa.depot.gz
For HP-UX B.11.11, B.11.23, and B.11.31 (PA)
http://www.hp.com/products1/unix/java/Firefox/downloads/license_thunde rbird_1-5-0-8.HTML
HP HP-UX B.11.11
HP Firefox v2.0.0.4
http://www.hp.com/products1/unix/java/Firefox/downloads/license_firefo x_2-0-0-4.HTML
HP thunderbird_1.5.0.9_pa.depot.gz
For HP-UX B.11.11, B.11.23, and B.11.31 (PA)
http://www.hp.com/products1/unix/java/Firefox/downloads/license_thunde rbird_1-5-0-8.HTML
Mozilla Thunderbird 0.8
Fedora Legacy thunderbird-1.0.8-1.1.fc3.4.legacy.i386.rpm
Fedora Core 3:
http://download.fedoralegacy.org/fedora/3/updates/i386/thunderbird-1.0 .8-1.1.fc3.4.legacy.i386.rpm
Fedora Legacy thunderbird-1.0.8-1.1.fc3.4.legacy.x86_64.rpm
Fedora Core 3:
http://download.fedoralegacy.org/fedora/3/updates/x86_64/thunderbird-1 .0.8-1.1.fc3.4.legacy.x86_64.rpm
Mozilla Firefox 1.0.4
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_alpha.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_amd64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_amd64.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_arm.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_arm.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_hppa.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_hppa.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_i386.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_i386.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_ia64.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_ia64.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_m68k.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_m68k.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_mips.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_mips.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_mipsel.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_mipsel.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_powerpc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_powerpc.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_s390.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_s390.deb
Debian mozilla-Firefox-dom-inspector_1.0.4-2sarge6_sparc.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-dom-inspector_1.0.4-2sarge6_sparc.deb
Debian mozilla-Firefox-gnome-support_1.0.4-2sarge6_alpha.deb
Debian GNU/Linux 3.1 alias sarge
http://security.debian.org/pool/updates/main/m/mozilla-Firefox/mozilla -Firefox-gnome-support_1.
参考网址
来源: XF
名称: mozilla-textbox-file-access(25823)
链接:http://xforce.iss.net/xforce/xfdb/25823
来源: UBUNTU
名称: USN-275-1
链接:http://www.ubuntulinux.org/support/documentation/usn/usn-275-1
来源: UBUNTU
名称: USN-271-1
链接:http://www.ubuntulinux.org/support/documentation/usn/usn-271-1
来源: BID
名称: 17516
链接:http://www.securityfocus.com/bid/17516
来源: HP
名称: SSRT061181
链接:http://www.securityfocus.com/archive/1/archive/1/446658/100/200/threaded
来源: FEDORA
名称: FLSA:189137-2
链接:http://www.securityfocus.com/archive/1/archive/1/436338/100/0/threaded
来源: FEDORA
名称: FLSA:189137-1
链接:http://www.securityfocus.com/archive/1/archive/1/436296/100/0/threaded
来源: REDHAT
名称: RHSA-2006:0329
链接:http://www.redhat.com/support/errata/RHSA-2006-0329.HTML
来源: REDHAT
名称: RHSA-2006:0328
链接:http://www.redhat.com/support/errata/RHSA-2006-0328.HTML
来源: FEDORA
名称: FEDORA-2006-411
链接:http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00154.HTML
来源: FEDORA
名称: FEDORA-2006-410
链接:http://www.redhat.com/archives/fedora-announce-list/2006-April/msg00153.HTML
来源: SUSE
名称: SUSE-SA:2006:035
链接:http://www.novell.com/linux/security/advisories/2006_35_mozilla.HTML
来源: www.mozilla.org
链接:http://www.mozilla.org/security/announce/2006/mfsa2006-23.HTML
来源: MANDRIVA
名称: MDKSA-2006:076
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:076
来源: MANDRIVA
名称: MDKSA-2006:075
链接:http://www.mandriva.com/security/advisories?name=MDKSA-2006:075
来源: GENTOO
名称: GLSA-200604-18
链接:http://www.gentoo.org/security/en/glsa/glsa-200604-18.xml
来源: GENTOO
名称: GLSA-200604-12
链接:http://www.gentoo.org/security/en/glsa/glsa-200604-12.xml
来源: VUPEN
名称: ADV-2008-0083
链接:http://www.frsirt.com/english/advisories/2008/0083
来源: VUPEN
名称: ADV-2006-3748
链接:http://www.frsirt.com/english/advisories/2006/3748
来源: VUPEN
名称: ADV-2006-3391
链接:http://www.frsirt.com/english/advisories/2006/3391
来源: VUPEN
名称: ADV-2006-1356
链接:http://www.frsirt.com/english/advisories/2006/1356
来源: DEBIAN
名称: DSA-1051
链接:http://www.debian.org/security/2006/dsa-1051
来源: DEBIAN
名称: DSA-1046
链接:http://www.debian.org/security/2006/dsa-1046
来源: DEBIAN
名称: DSA-1044
链接:http://www.debian.org/security/2006/dsa-1044
来源: support.avaya.com
链接:http://support.avaya.com/elmodocs2/security/ASA-2006-205.htm
来源: SUNALERT
名称: 228526
链接:http://sunsolve.sun.com/search/document.do?assetkey=1-26-228526-1
来源: SUNALERT
名称: 102550
链接:http://sunsolve.sun.com/search/document.do?assetkey=1-26-102550-1
来源: SECUNIA
名称: 22066
链接:http://secunia.com/advisories/22066
来源: SECUNIA
名称: 21622
链接:http://secunia.com/advisories/21622
来源: SECUNIA
名称: 21033
链接:http://secunia.com/advisories/21033
来源: SECUNIA
名称: 19941
链接:http://secunia.com/advisories/19941
来源: SECUNIA
名称: 19902
链接:http://secunia.com/advisories/19902
来源: SECUNIA
名称: 19863
链接:http://secunia.com/advisories/19863
来源: SECUNIA
名称: 19862
链接:http://secunia.com/advisories/19862
来源: SECUNIA
名称: 19852
链接:http://secunia.com/advisories/19852
来源: SECUNIA
名称: 19811
链接:http://secunia.com/advisories/19811
来源: SECUNIA
名称: 19794
链接:http://secunia.com/advisories/19794
来源: SECUNIA
名称: 19759
链接:http://secunia.com/advisories/19759
来源: SECUNIA
名称: 19746
链接:http://secunia.com/advisories/19746
来源: SECUNIA
名称: 19729
链接:http://secunia.com/advisories/19729
来源: SECUNIA
名称: 19721
链接:http://secunia.com/advisories/19721
来源: SECUNIA
名称: 19714
链接:http://secunia.com/advisories/19714
来源: SECUNIA
名称: 19696
链接:http://secunia.com/advisories/19696
来源: SECUNIA
名称: 19649
链接:http://secunia.com/advisories/19649
来源: SECUNIA
名称: 19631
链接:http://secunia.com/advisories/19631
来源: SUSE
名称: SUSE-SA:2006:021
链接:http://lists.suse.com/archive/suse-security-announce/2006-Apr/0003.HTML
来源: MANDRIVA
名称: MDKSA-2006:076
链接:http://frontal2.mandriva.com/security/advisories?name=MDKSA-2006:076
来源: MANDRIVA
名称: MDKSA-2006:075
链接:h
受影响实体
- Mozilla Thunderbird:1.0.7
- Mozilla Thunderbird:1.5
- Mozilla Thunderbird:1.5:Beta2
- Mozilla Thunderbird:1.5.0.1
- Mozilla Thunderbird:1.0.5:Beta
补丁
暂无
评论