Red Hat Security AdvisoryRHSA-2006:0608
seamonkey security update
Released 2006-07-27 · Red Hat rating Critical · View on Red Hat →
Fixes 14 records
Priority HIGH 73
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by changing certain properties of the window navigator object (window.navigator) that are accessed when Java…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.80005 · Published 2006-07-27 · Fixed CWE-16
Priority MEDIUM 43
Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via Javas…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.07609 · Published 2006-07-27 · Fixed
Priority MEDIUM 42
The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving garbage collection that causes…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06596 · Published 2006-07-27 · Fixed
Priority MEDIUM 42
Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via simultaneous XPCOM events, w…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.06422 · Published 2006-07-27 · Fixed
Priority MEDIUM 41
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code via script that changes the standard Object() constructor to return a reference to…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05459 · Published 2006-07-27 · Fixed
Priority MEDIUM 41
Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code via vectors involving (…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.05459 · Published 2006-07-27 · Fixed CWE-189
Priority MEDIUM 40
Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame or window, which leaves a pointer to a deleted object that allows remote attackers to execute arbitr…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.04427 · Published 2006-07-27 · Fixed
Priority LOW 38
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the UniversalBrowserRead privilege to gain UniversalXPConnect privileges and possibly execute code or obtain sens…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03094 · Published 2006-07-27 · Fixed
Priority LOW 38
Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code with elevated privileges via a PAC script that sets the FindProxyForURL function to an eval method on…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02951 · Published 2006-07-27 · Fixed
Priority LOW 36
Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the XPCNativeWrapp…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03377 · Published 2006-07-27 · Fixed
Priority LOW 31
Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might allow remote attackers to execute arbitrary code by causing the garb…
CVSS 2.0MEDIUM 5.1· Network · No auth · Interaction — · EPSS 0.0446 · Published 2006-07-27 · Fixed
Priority LOW 31
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijack native DOM methods from objects in another domain and conduct cross-site scripting (XSS) attacks us…
CVSS 2.0MEDIUM 5.8· Network · No auth · Interaction — · EPSS 0.0236 · Published 2006-07-27 · Fixed
Priority LOW 29
Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to cause a denial of service (crash) via a VCard attachment with a malformed base64 field, which copies…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03307 · Published 2006-07-27 · Fixed
Priority LOW 19
Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to reference remote files and possibly load chrome: URLs by tricking the user into copying or dragging links.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.03152 · Published 2006-07-29 · Fixed