Red Hat Security AdvisoryRHSA-2007:0722
seamonkey security update
Released 2007-07-19 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.3.el3, seamonkey-1.0.9-0.3.el3.i386, seamonkey-chat-1.0.9-0.3.el3 +17
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 seamonkey-1.0.9-0.4.el2, seamonkey-1.0.9-0.4.el2.i386, seamonkey-1.0.9-0.4.el2.ia64 +18
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.3.el3, seamonkey-1.0.9-0.3.el3.i386, seamonkey-1.0.9-0.3.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-4.el4, seamonkey-1.0.9-4.el4.i386, seamonkey-1.0.9-4.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-4.el4, seamonkey-1.0.9-4.el4.i386, seamonkey-chat-1.0.9-4.el4 +9
- Red Hat Enterprise Linux ES version 2.1 seamonkey-1.0.9-0.4.el2, seamonkey-1.0.9-0.4.el2.i386, seamonkey-chat-1.0.9-0.4.el2.i386 +8
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.3.el3, seamonkey-1.0.9-0.3.el3.i386, seamonkey-1.0.9-0.3.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-4.el4, seamonkey-1.0.9-4.el4.i386, seamonkey-1.0.9-4.el4.ia64 +15
- Red Hat Enterprise Linux WS version 2.1 seamonkey-1.0.9-0.4.el2, seamonkey-1.0.9-0.4.el2.i386, seamonkey-chat-1.0.9-0.4.el2.i386 +8
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.3.el3, seamonkey-1.0.9-0.3.el3.i386, seamonkey-1.0.9-0.3.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-4.el4, seamonkey-1.0.9-4.el4.i386, seamonkey-1.0.9-4.el4.ia64 +15
- Red Hat Linux Advanced Workstation 2.1 seamonkey-1.0.9-0.4.el2, seamonkey-1.0.9-0.4.el2.ia64, seamonkey-chat-1.0.9-0.4.el2.ia64 +8
Fixes 7 records
Priority MEDIUM 48
Mozilla Firefox before 2.0.0.5 allows remote attackers to execute arbitrary code with chrome privileges by calling an event handler from an unspecified "element outside of a document."
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04618 · Published 2007-07-18 · Fixed
Priority MEDIUM 47
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.5 allow remote attackers to execute arbitrary code via a crafted XPCNativeWrapper.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03799 · Published 2007-07-18 · Fixed
Priority MEDIUM 44
Multiple unspecified vulnerabilities in the JavaScript engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trig…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02224 · Published 2007-07-18 · Fixed
Priority MEDIUM 44
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 2.0.0.5 and Thunderbird before 2.0.0.5 allow remote attackers to cause a denial of service (crash) via unspecified vectors that trigger…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.02224 · Published 2007-07-18 · Fixed
Priority LOW 34
Mozilla Firefox before 1.8.0.13 and 1.8.1.x before 1.8.1.5 does not perform a security zone check when processing a wyciwyg URI, which allows remote attackers to obtain sensitive information, poison the browser cache, an…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01966 · Published 2007-07-10 · Fixed CWE-200
Priority LOW 25
Mozilla Firefox before 2.0.0.5 does not prevent use of document.write to replace an IFRAME (1) during the load stage or (2) in the case of an about:blank frame, which allows remote attackers to display arbitrary HTML or…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02774 · Published 2007-06-06 · Fixed
Priority LOW 23
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.5 allows remote attackers to inject arbitrary web script "into another site's context" via a "timing issue" involving the (1) addEventListener or (…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01349 · Published 2007-07-18 · Fixed
THREATIST.IORead the docs