Server side template injection In xulrunner
Description
Mozilla Firefox before 3.6.26 and 4.x through 9.0, Thunderbird before 3.1.18 and 5.0 through 9.0, and SeaMonkey before 2.7 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a malformed XSLT stylesheet that is embedded in a document.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Component | Affected version | Patched versions |
|---|---|---|---|
 rpm rhel5 | 0:1.9.2.26-1.el5_7 | ||
rpm rhel5 | 0:3.6.26-1.el5_7 | ||
rpm rhel5 | - | - | |
rpm rhel6 | 0:3.6.26-1.el6_2 | ||
rpm rhel6 | 0:3.1.18-1.el6_2 | ||
rpm rhel6 | 0:1.9.2.26-1.el6_2 |
Aliases
1. 2. 3.