dbg111-MozillaFirefox openSUSE 11.1 MozillaFirefox was updated to the 3.0.13 release, fixing some security issues and bugs: MFSA 2009-44 / CVE-2009-2654: Security researcher Juan Pablo Lopez Yacubian reported that an attacker could call window.open() on an invalid URL which looks similar to a legitimate URL and then use document.write() to place content within the new document, appearing to have come from the spoofed location. Additionally, if the spoofed document was created by a document with a valid SSL certificate, the SSL indicators would be carried over into the spoofed document. An attacker could use these issues to display misleading location and SSL information for a malicious web page. MFSA 2009-45 / CVE-2009-2662:The browser engine in Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the TraceRecorder::snapshot function in js/src/jstracer.cpp, and unspecified other vectors. CVE-2009-2663 / MFSA 2009-45: libvorbis before r16182, as used in Mozilla Firefox before 3.0.13 and 3.5.x before 3.5.2 and other products, allows context-dependent attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via a crafted .ogg file. CVE-2009-2664 / MFSA 2009-45: The js_watch_set function in js/src/jsdbgapi.cpp in the JavaScript engine in Mozilla Firefox before 3.0.13, and 3.5.x before 3.5.2, allows remote attackers to cause a denial of service (assertion failure and application exit) or possibly execute arbitrary code via a crafted .js file, related to a "memory safety bug." MozillaFirefox-debuginfo-3.0.13-0.1.2.i586.rpm MozillaFirefox-debuginfo-3.0.13-0.1.3.ppc.rpm MozillaFirefox-debuginfo-3.0.13-0.1.2.x86_64.rpm MozillaFirefox-debugsource-3.0.13-0.1.2.i586.rpm MozillaFirefox-debugsource-3.0.13-0.1.3.ppc.rpm MozillaFirefox-debugsource-3.0.13-0.1.2.x86_64.rpm gconf2-debuginfo-2.24.0-2.15.i586.rpm gconf2-debuginfo-2.24.0-2.17.ppc.rpm gconf2-debuginfo-2.24.0-2.17.x86_64.rpm gconf2-debuginfo-32bit-2.24.0-2.15.x86_64.rpm gconf2-debugsource-2.24.0-2.15.i586.rpm gconf2-debugsource-2.24.0-2.17.ppc.rpm gconf2-debugsource-2.24.0-2.17.x86_64.rpm libidl-debuginfo-0.8.11-1.27.i586.rpm libidl-debuginfo-0.8.11-1.23.ppc.rpm libidl-debuginfo-0.8.11-1.33.x86_64.rpm libidl-debuginfo-32bit-0.8.11-1.27.x86_64.rpm libidl-debuginfo-64bit-0.8.11-1.9.ppc.rpm libidl-debugsource-0.8.11-1.27.i586.rpm libidl-debugsource-0.8.11-1.23.ppc.rpm libidl-debugsource-0.8.11-1.33.x86_64.rpm mozilla-xulrunner190-debuginfo-1.9.0.13-1.1.1.i586.rpm mozilla-xulrunner190-debuginfo-1.9.0.13-1.1.1.ppc.rpm mozilla-xulrunner190-debuginfo-1.9.0.13-1.1.1.x86_64.rpm mozilla-xulrunner190-debuginfo-32bit-1.9.0.13-1.1.1.x86_64.rpm mozilla-xulrunner190-debugsource-1.9.0.13-1.1.1.i586.rpm mozilla-xulrunner190-debugsource-1.9.0.13-1.1.1.ppc.rpm mozilla-xulrunner190-debugsource-1.9.0.13-1.1.1.x86_64.rpm orbit2-debuginfo-2.14.16-1.23.i586.rpm orbit2-debuginfo-2.14.16-1.21.ppc.rpm orbit2-debuginfo-2.14.16-1.28.x86_64.rpm orbit2-debuginfo-32bit-2.14.16-1.23.x86_64.rpm orbit2-debuginfo-64bit-2.14.16-1.11.ppc.rpm orbit2-debugsource-2.14.16-1.23.i586.rpm orbit2-debugsource-2.14.16-1.21.ppc.rpm orbit2-debugsource-2.14.16-1.28.x86_64.rpm