DSA-1886 iceweasel -- several vulnerabilitiesID: oval:org.mitre.oval:def:8008 | Date: (C)2009-12-15 (M)2024-02-19 |
Class: PATCH | Family: unix |
Several remote vulnerabilities have been discovered in the Iceweasel web browser, an unbranded version of the Firefox browser. The Common Vulnerabilities and Exposures project identifies the following problems: "moz_bug_r_a4" discovered that a programming error in the FeedWriter module could lead to the execution of Javascript code with elevated privileges. Prateek Saxena discovered a cross-site scripting vulnerability in the MozSearch plugin interface.