A Cross Site Scripting (CSS or XSS) vulnerability in the Sun ONE and Sun Java System Application Server may allow an unprivileged remote user to steal cookie information, hijack sessions, or cause a loss of data privacy between a client and the server.

Multiple security vulnerabilities in certain versions of Mozilla (listed below), may result in one or more of the following issues:

1. A buffer overflow exists that may allow a remote unprivileged user the ability to execute arbitrary code with the privileges of a local user when that local user has loaded an X Bitmap (XBM) format image file or an ICO (Icon Image) image file supplied by an untrusted user or website. [Sun CR 6281360]

This issue is described in the following documents:

• http://www.niscc.gov.uk/niscc/docs/al-20050614-00488.html?lang=en
• https://bugzilla.mozilla.org/show_bug.cgi?id=295457
• https://bugzilla.mozilla.org/show_bug.cgi?id=245631

2. A security vulnerability may allow a malicious website to crash the Mozilla browser when the user drags an image across multiple windows. [Sun CR 6282190]

This issue is described in the following document:

• https://bugzilla.mozilla.org/show_bug.cgi?id=288006

3. A security vulnerability may allow a malicious website to inject content into a frame. This is known as the "frame injection vulnerability". [Sun CR 6282170]

This issue is described in the following documents:

• https://bugzilla.mozilla.org/show_bug.cgi?id=296850
• http://www.mozilla.org/security/announce/mfsa2005-51.html

4. A security vulnerability may allow a malicious website to hang the Mozilla web browser creating a Denial of Service (DoS) by providing a table with large rowspans or colspans. [Sun CR 6284465]

This issue is described in the following document:

• https://bugzilla.mozilla.org/show_bug.cgi?id=141818

A security vulnerability in Sun Grid Engine 5.3 and Sun N1 Grid Engine 6.0 may allow a local unprivileged user the ability to shut down the grid service, or use the grid service even if access was denied.

A local unprivileged user may be able to execute arbitrary code with the privileges of another user (including root), due to incorrect file and directory permissions from one of the package components of the Sun Storage Automated Diagnostic Environment (StorADE) Software.

On platforms supporting simultaneous multi-threading (Hyper-Threading technology), local unprivileged users might be able to deduce potentially secret data from another executing thread, using cache eviction analysis techniques.

This issue is described in "Cache Missing for Fun and Profit" by Colin Percival, at http://www.daemonology.net/papers/htt.pdf.

This issue is referenced by CERT vulnerability note VU#911878 at http://www.kb.cert.org/vuls/id/911878 and CAN-2005-0109 at http://cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2005-0109.