Lucene search
SecurityvulnsSECURITYVULNS:DOC:19036HistoryFeb 10, 2008 - 12:00 a.m.
Mozilla Foundation Security Advisory 2008-04
2008-02-1000:00:00
vulners.com
12
Mozilla Foundation Security Advisory 2008-04
Title: Stored password corruption
Impact: Moderate
Announced: February 7, 2008
Reporter: Justin Dolske
Products: Firefox
Fixed in: Firefox 2.0.0.12
Description
Mozilla developer Justin Dolske discovered that malicious sites, upon a user saving his or her password, could inject newlines into Firefox's password store and corrupt saved passwords for other sites.
Workaround
Do not ask Firefox to save passwords on untrusted sites until a version containing these fixes can be installed.
References
* https://bugzilla.mozilla.org/show_bug.cgi?id=394610
* CVE-2008-0417
Related
cve
cve
CVE-2008-0417
2008-02-08 22:00:00
veracode
veracode
Privilege Escalation
2020-04-10 00:19:46
prion
prion
Crlf injection
2008-02-08 22:00:00
ubuntucve
ubuntucve
CVE-2008-0417
2008-02-08 00:00:00
mozilla
mozilla
Stored password corruption — Mozilla
2008-02-07 00:00:00
openvas
openvas
CentOS Update for seamonkey CESA-2008:0104 centos4 x86_64
2009-02-27 00:00:00
CentOS Update for firefox CESA-2008:0103 centos5 x86_64
2009-02-27 00:00:00
CentOS Update for seamonkey CESA-2008:0104 centos4 x86_64
2009-02-27 00:00:00
nessus
nessus
Scientific Linux Security Update : firefox on SL4.x, SL5.x i386/x86_64
2012-08-01 00:00:00
Scientific Linux Security Update : seamonkey on SL3.x, SL4.x i386/x86_64
2012-08-01 00:00:00
SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 5001)
2008-02-14 00:00:00
fedora
fedora
[SECURITY] Fedora 8 Update: seamonkey-1.1.8-1.fc8
2008-02-13 04:53:43
[SECURITY] Fedora 7 Update: seamonkey-1.1.8-1.fc7
2008-02-13 15:10:50
[SECURITY] Fedora 7 Update: epiphany-extensions-2.18.3-7
2008-02-13 04:51:06
seebug
seebug
Mozilla Thunderbird/Seamonkey/Firefox 2.0.0.12修复多个安全漏洞
2008-02-22 00:00:00
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulonerabilities
2008-02-11 00:00:00
centos
centos
firefox security update
2008-02-08 19:18:05
seamonkey security update
2008-02-11 00:20:26
seamonkey security update
2008-02-08 19:04:30
suse
suse
remote code execution in MozillaFirefox,seamonkey
2008-02-15 17:07:07
debian
debian
[SECURITY] [DSA 1506-1] New iceape packages fix several vulnerabilities
2008-02-24 12:30:41
[SECURITY] [DSA 1506-2] New iceape packages fix regression
2008-03-20 01:41:06
[SECURITY] [DSA 1484-1] New xulrunner packages fix several vulnerabilities
2008-02-10 20:23:48
oraclelinux
oraclelinux
Critical: firefox security update
2008-02-08 00:00:00
Critical: seamonkey security update
2008-02-08 00:00:00
redhat
redhat
(RHSA-2008:0103) Critical: firefox security update
2008-02-07 00:00:00
(RHSA-2008:0104) Critical: seamonkey security update
2008-02-07 00:00:00
osv
osv
iceweasel - several vulnerabilities
2008-02-10 00:00:00
xulrunner - several vulnerabilities
2008-02-10 00:00:00
iceape - several vulnerabilities
2008-02-24 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2008-02-07 00:00:00
ubuntu
ubuntu
Firefox vulnerabilities
2008-02-08 00:00:00
gentoo
gentoo
Mozilla products: Multiple vulnerabilities
2008-05-20 00:00:00
Related for SECURITYVULNS:DOC:19036