Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems:
- CVE-2009-3986:
David James discovered that the window.opener property allows Chrome privilege escalation…