Debian Security Advisory 1956 xulrunner – several vulnerabilities

36
Article Source Debian Security Advisories
December 15, 2009, 4:00 pm

 

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems:

 

  • CVE-2009-3986:
    David James discovered that the window.opener property allows Chrome privilege escalation…