Debian DSA 1306-1: xulrunner Multiple Vulnerabilities (CVE-2007-1362/2867-2871)

Key Information Summary Vulnerability Overview Announcement ID: DSA 1306-1 Software: xulrunner Version: 1.8.0.12-0etch1 Vulnerability Type: Multiple remote vulnerabilities Affected CVE IDs CVE-2007-1362: Insufficient cookie validation may lead to denial of service. CVE-2007-2867: Layout engine crash, potentially leading to arbitrary code execution. CVE-2007-2868: JavaScript engine crash, potentially leading to arbitrary code execution. CVE-2007-2869: Autocomplete feature causes excessive resource consumption, leading to denial of service. CVE-2007-2870: Adding event listeners via addEventListener() function may lead to cross-site scripting attacks. CVE-2007-2871: XUL popups may be exploited for phishing or spoofing attacks. Affected Scope Debian stable (Etch) has been patched Debian unstable (Sid) will be patched soon Debian oldstable (Sarge) does not include xulrunner Recommended Upgrade Upgrade the xulrunner package to the latest version Download and Upgrade Commands Package URLs: [Provides a series of deb package download links for different architectures] Use and commands for manual download and installation, or use and for automatic upgrade. ```markdown

Goal Reached Thanks to every supporter — we hit 100%!

Debian DSA 1306-1: xulrunner Multiple Vulnerabilities (CVE-2007-1362/2867-2871)