Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

altlinux логотип

ALT-PU-2017-2721

Высокий

ALT-PU-2017-2721: package palemoon update to version 27.6.2-alt1

Источник
errata.altlinux.org
Дата публикации
02.12.2017
Дата обновления
02.12.2017
Устраненные уязвимости
6

ALT Linux branch p11
ALT Container
ALT Education
ALT Workstation
ALT Workstation K
ALT Server
ALT Virtualization PVE Edition
ALT Linux branch p10
ALT Server
ALT Virtualization Server
ALT Workstation
ALT Workstation K
ALT Education
Simply Linux
Starterkit
ALT Container

Описание

This update upgrades palemoon to version 27.6.2-alt1.

Устраненные уязвимости6

Связанные уязвимости

CVSS3: 9.8
altlinux
почти 9 лет назад

ALT-PU-2017-2739: package `firefox` update to version 57.0.1-alt1

CVSS3: 5.3
ubuntu
больше 8 лет назад

The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or grave, can be spoofed in the addressbar by the dotless version of 'i' followed by the same accent as a second character with most font sets. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57.

CVSS3: 5.3
nvd
больше 8 лет назад

The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or grave, can be spoofed in the addressbar by the dotless version of 'i' followed by the same accent as a second character with most font sets. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57.

CVSS3: 5.3
debian
больше 8 лет назад

The combined, single character, version of the letter 'i' with any of ...

CVSS3: 5.3
github
больше 4 лет назад

The combined, single character, version of the letter 'i' with any of the potential accents in unicode, such as acute or grave, can be spoofed in the addressbar by the dotless version of 'i' followed by the same accent as a second character with most font sets. This allows for domain spoofing attacks because these combined domain names do not display as punycode. This vulnerability affects Firefox < 57.