Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 496
Alerts This Week
Warning Icon 1 496

Ubuntu 9.10 USN-1123-1 Critical: Xulrunner-1.9.1 Remote Code Execution

ubuntu
Calendar Grey April 30, 2011
Scroller Ubuntu
Several security flaws in xulrunner-1.9.1 were fixed in Ubuntu USN-1123-1, released on April 30, 2011.
Multiple xulrunner-1.9.1 vulnerabilities

Summary

Multiple xulrunner-1.9.1 vulnerabilities

Software Description:

- xulrunner-1.9.1: XUL + XPCOM application runner

Details:

A large number of security issues were discovered in the Gecko rendering

engine. If a user were tricked into viewing a malicious website, a remote

attacker could exploit a variety of issues related to web browser security,

including cross-site scripting attacks, denial of service attacks, and

arbitrary code execution.

Topics%20covered

Topics Covered

security advisory denial of service remote code execution ubuntu xulrunner

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 9.10:
  xulrunner-1.9.1                 1.9.1.19+build2+nobinonly-0ubuntu0.9.10.1

After a standard system update you need to restart any applications which
use Xulrunner to make all the necessary changes.

References

CVE-2010-3776 CVE-2010-3778 CVE-2011-0053 CVE-2011-0062 CVE-2011-0051 CVE-2011-0055 CVE-2011-0054 CVE-2011-0056 CVE-2011-0057 CVE-2011-0058 CVE-2010-1585 CVE-2011-0059 CVE-2011-0069 CVE-2011-0070 CVE-2011-0080 CVE-2011-0074 CVE-2011-0075 CVE-2011-0077 CVE-2011-0078 CVE-2011-0072 CVE-2011-0065 CVE-2011-0066 CVE-2011-0073 CVE-2011-0067 CVE-2011-0071 CVE-2011-1202

Severity
critical
Lowest
Low
Medium
High
Critical

April 30, 2011

Topics%20covered

Topics Covered

security advisory denial of service remote code execution ubuntu xulrunner

Package Information

https://launchpad.net/ubuntu/+source/xulrunner-1.9.1/1.9.1.19+build2+nobinonly-0ubuntu0.9.10.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.