Red Hat Security AdvisoryRHSA-2007:0402
seamonkey security update
Released 2007-05-31 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.1.el3, seamonkey-1.0.9-0.1.el3.i386, seamonkey-chat-1.0.9-0.1.el3 +17
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 seamonkey-1.0.9-0.1.el2, seamonkey-1.0.9-0.1.el2.i386, seamonkey-1.0.9-0.1.el2.ia64 +18
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.1.el3, seamonkey-1.0.9-0.1.el3.i386, seamonkey-1.0.9-0.1.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 devhelp-0.10-0.8.el4, devhelp-0.10-0.8.el4.i386, devhelp-0.10-0.8.el4.ppc +27
- Red Hat Enterprise Linux Desktop version 4 devhelp-0.10-0.8.el4, devhelp-0.10-0.8.el4.i386, devhelp-devel-0.10-0.8.el4 +13
- Red Hat Enterprise Linux ES version 2.1 seamonkey-1.0.9-0.1.el2, seamonkey-1.0.9-0.1.el2.i386, seamonkey-chat-1.0.9-0.1.el2.i386 +8
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.1.el3, seamonkey-1.0.9-0.1.el3.i386, seamonkey-1.0.9-0.1.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 devhelp-0.10-0.8.el4, devhelp-0.10-0.8.el4.i386, devhelp-devel-0.10-0.8.el4 +19
- Red Hat Enterprise Linux WS version 2.1 seamonkey-1.0.9-0.1.el2, seamonkey-1.0.9-0.1.el2.i386, seamonkey-chat-1.0.9-0.1.el2.i386 +8
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.1.el3, seamonkey-1.0.9-0.1.el3.i386, seamonkey-1.0.9-0.1.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 devhelp-0.10-0.8.el4, devhelp-0.10-0.8.el4.i386, devhelp-devel-0.10-0.8.el4 +19
- Red Hat Linux Advanced Workstation 2.1 seamonkey-1.0.9-0.1.el2, seamonkey-1.0.9-0.1.el2.ia64, seamonkey-chat-1.0.9-0.1.el2.ia64 +8
Fixes 8 records
Priority MEDIUM 48
Multiple vulnerabilities in the JavaScript engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote att…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04868 · Published 2007-06-01 · Fixed CWE-94
Priority MEDIUM 46
Multiple vulnerabilities in the layout engine for Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, Thunderbird 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2 allow remote attacke…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03407 · Published 2007-06-01 · Fixed CWE-119
Priority MEDIUM 45
The FTP protocol implementation in Mozilla Firefox before 1.5.0.11 and 2.x before 2.0.0.3 allows remote attackers to force the client to connect to other servers, perform a proxied port scan, or obtain sensitive informat…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.14271 · Published 2007-03-21 · Fixed CWE-200
Priority LOW 31
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via (1) a large cookie path parameter, which triggers memory consumption,…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.07831 · Published 2007-06-01 · Fixed CWE-20
Priority LOW 25
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to spoof or hide the browser chrome, such as the location bar, by placing XUL popups outside of the bro…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0249 · Published 2007-06-01 · Fixed
Priority LOW 24
The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service (persistent temporary CPU consumption) via a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01798 · Published 2007-06-01 · Fixed
Priority LOW 23
Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to bypass the same-origin policy and conduct cross-site scripting (XSS) and other attacks by using the…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01649 · Published 2007-06-01 · Fixed
Priority LOW 18
The APOP protocol allows remote attackers to guess the first 3 characters of a password via man-in-the-middle (MITM) attacks that use crafted message IDs and MD5 collisions.
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.02423 · Published 2007-04-16 · Fixed
THREATIST.IORead the docs