galeon, mozilla security update

2005-05-2401:04:22

CentOS Project

lists.centos.org

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

0.929

Percentile

99.0%

JSON

CentOS Errata and Security Advisory CESA-2005:435-01

Mozilla is an open source Web browser, advanced email and newsgroup client,
IRC chat client, and HTML editor.

Several bugs were found in the way Mozilla executes javascript code.
Javascript executed from a web page should run with a restricted access
level, preventing dangerous actions. It is possible that a malicious web
page could execute javascript code with elevated privileges, allowing
access to protected data and functions. The Common Vulnerabilities and
Exposures project (cve.mitre.org) has assigned the names CAN-2005-1476,
CAN-2005-1477, CAN-2005-1531, and CAN-2005-1532 to these issues.

Users of Mozilla are advised to upgrade to this updated package, which
contains Mozilla version 1.7.8 to correct these issues.

Merged security bulletin from advisories:
https://lists.centos.org/pipermail/centos-announce/2005-May/073908.html

Affected packages:
galeon
mozilla
mozilla-chat
mozilla-devel
mozilla-dom-inspector
mozilla-js-debugger
mozilla-mail
mozilla-nspr
mozilla-nspr-devel
mozilla-nss
mozilla-nss-devel

OSVersionArchitecturePackageVersionFilename
CentOS2i386galeon< 1.2.14-1.2.5galeon-1.2.14-1.2.5.i386.rpm
CentOS2i386mozilla< 1.7.8-1.1.2.1.c2.1mozilla-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS2i386mozilla-chat< 1.7.8-1.1.2.1.c2.1mozilla-chat-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS2i386mozilla-devel< 1.7.8-1.1.2.1.c2.1mozilla-devel-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS2i386mozilla-dom-inspector< 1.7.8-1.1.2.1.c2.1mozilla-dom-inspector-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS2i386mozilla-js-debugger< 1.7.8-1.1.2.1.c2.1mozilla-js-debugger-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS2i386mozilla-mail< 1.7.8-1.1.2.1.c2.1mozilla-mail-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS2i386mozilla-nspr< 1.7.8-1.1.2.1.c2.1mozilla-nspr-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS2i386mozilla-nspr-devel< 1.7.8-1.1.2.1.c2.1mozilla-nspr-devel-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS2i386mozilla-nss< 1.7.8-1.1.2.1.c2.1mozilla-nss-1.7.8-1.1.2.1.c2.1.i386.rpm

OS	Version	Architecture	Package	Version	Filename
CentOS	2	i386	galeon	< 1.2.14-1.2.5	galeon-1.2.14-1.2.5.i386.rpm
CentOS	2	i386	mozilla	< 1.7.8-1.1.2.1.c2.1	mozilla-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS	2	i386	mozilla-chat	< 1.7.8-1.1.2.1.c2.1	mozilla-chat-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS	2	i386	mozilla-devel	< 1.7.8-1.1.2.1.c2.1	mozilla-devel-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS	2	i386	mozilla-dom-inspector	< 1.7.8-1.1.2.1.c2.1	mozilla-dom-inspector-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS	2	i386	mozilla-js-debugger	< 1.7.8-1.1.2.1.c2.1	mozilla-js-debugger-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS	2	i386	mozilla-mail	< 1.7.8-1.1.2.1.c2.1	mozilla-mail-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS	2	i386	mozilla-nspr	< 1.7.8-1.1.2.1.c2.1	mozilla-nspr-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS	2	i386	mozilla-nspr-devel	< 1.7.8-1.1.2.1.c2.1	mozilla-nspr-devel-1.7.8-1.1.2.1.c2.1.i386.rpm
CentOS	2	i386	mozilla-nss	< 1.7.8-1.1.2.1.c2.1	mozilla-nss-1.7.8-1.1.2.1.c2.1.i386.rpm