Red Hat Security AdvisoryRHSA-2006:0676
seamonkey security update
Released 2006-09-15 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.5-0.1.el3, seamonkey-1.0.5-0.1.el3.i386, seamonkey-chat-1.0.5-0.1.el3 +17
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.5-0.1.el3, seamonkey-1.0.5-0.1.el3.i386, seamonkey-1.0.5-0.1.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 devhelp-0.10-0.4.el4, devhelp-0.10-0.4.el4.i386, devhelp-0.10-0.4.el4.ppc +27
- Red Hat Enterprise Linux Desktop version 4 devhelp-0.10-0.4.el4, devhelp-0.10-0.4.el4.i386, devhelp-devel-0.10-0.4.el4 +13
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.5-0.1.el3, seamonkey-1.0.5-0.1.el3.i386, seamonkey-1.0.5-0.1.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 devhelp-0.10-0.4.el4, devhelp-0.10-0.4.el4.i386, devhelp-devel-0.10-0.4.el4 +19
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.5-0.1.el3, seamonkey-1.0.5-0.1.el3.i386, seamonkey-1.0.5-0.1.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 devhelp-0.10-0.4.el4, devhelp-0.10-0.4.el4.i386, devhelp-devel-0.10-0.4.el4 +19
Fixes 7 records
Priority MEDIUM 52
Multiple unspecified vulnerabilities in Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allow remote attackers to cause a denial of service (crash), corrupt memory, and possibly execute arb…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05885 · Published 2006-09-15 · Fixed
Priority MEDIUM 49
Heap-based buffer overflow in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06172 · Published 2006-09-15 · Fixed CWE-119
Priority MEDIUM 49
Concurrency vulnerability in Mozilla Firefox 1.5.0.6 and earlier allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via multiple Javascript timed events that load a deeply ne…
CVSS 2.0HIGH 7.6· Network · No auth · Interaction — · EPSS 0.15185 · Published 2006-08-21 · Fixed CWE-264
Priority LOW 30
Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5 allows remote attackers to cause a denial of service (crash) via a malformed JavaScript regular expression that ends with a backslash…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0408 · Published 2006-09-15 · Fixed
Priority LOW 25
Mozilla Firefox before 1.5.0.7 and SeaMonkey before 1.0.5 allows remote attackers to bypass the security model and inject content into the sub-frame of another site via targetWindow.frames[n].document.open(), which facil…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02343 · Published 2006-09-15 · Fixed CWE-79
Priority LOW 23
Mozilla Network Security Service (NSS) library before 3.11.3, as used in Mozilla Firefox before 1.5.0.7, Thunderbird before 1.5.0.7, and SeaMonkey before 1.0.5, when using an RSA key with exponent 3, does not properly ha…
CVSS 2.0MEDIUM 4.0· Network · No auth · Interaction — · EPSS 0.02323 · Published 2006-09-15 · Fixed CWE-20
Priority LOW 18
Mozilla Thunderbird before 1.5.0.7 and SeaMonkey before 1.0.5, with "Load Images" enabled, allows remote user-assisted attackers to bypass settings that disable JavaScript via a remote XBL file in a message that is loade…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02437 · Published 2006-09-15 · Fixed
THREATIST.IORead the docs