08/02/10 01:04:06 c3IpR/Ff
今回多めだねぇ。
MFSA 2008-06 aka CVE-2008-0418なんて、testcaseまで公開されてるし。
URLﾘﾝｸ(bugzilla.mozilla.org)
MFSA 2008-01 aka CVE-2008-0412: Crashes with evidence of memory corruption v1.8.1.12 (Browser crashes)
MFSA 2008-01 aka CVE-2008-0413: Crashes with evidence of memory corruption v1.8.1.12 (javascript crashes)
MFSA 2008-02 aka CVE-2008-0414: Multiple file input focus stealing vulnerabilities: 1. Focus shifting bugs and 2. Selective keystroke blocking bugs
MFSA 2008-03 aka CVE-2008-0415: Privilege escalation, XSS, Remote Code Execution (JavaScript privilege escalation bugs)
MFSA 2008-04 aka CVE-2008-0416: Multiple XSS vulnerabilities from character encoding
MFSA 2008-05 aka CVE-2008-0417: Stored password corruption
MFSA 2008-06 aka CVE-2008-0418: Directory traversal via chrome: URI
MFSA 2008-07 aka CVE-2008-0419: Web browsing history and forward navigation stealing
MFSA 2008-08 aka CVE-2008-0420: Possible information disclosure in BMP decoder
MFSA 2008-09 aka CVE-2008-0591: File action dialog tampering
MFSA 2008-10 aka CVE-2008-0592: Mishandling of locally-saved plain text files
MFSA 2008-11 aka CVE-2008-0593: URL token stealing via stylesheet redirect
MFSA 2008-12 aka CVE-2008-0594: Web forgery overwrite with div overlay