Red Hat Security AdvisoryRHSA-2007:0980
seamonkey security update
Released 2007-10-19 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.5.el3, seamonkey-1.0.9-0.5.el3.i386, seamonkey-chat-1.0.9-0.5.el3 +17
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 seamonkey-1.0.9-0.6.el2, seamonkey-1.0.9-0.6.el2.i386, seamonkey-1.0.9-0.6.el2.ia64 +18
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.5.el3, seamonkey-1.0.9-0.5.el3.i386, seamonkey-1.0.9-0.5.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-6.el4, seamonkey-1.0.9-6.el4.i386, seamonkey-1.0.9-6.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-6.el4, seamonkey-1.0.9-6.el4.i386, seamonkey-chat-1.0.9-6.el4 +9
- Red Hat Enterprise Linux ES version 2.1 seamonkey-1.0.9-0.6.el2, seamonkey-1.0.9-0.6.el2.i386, seamonkey-chat-1.0.9-0.6.el2.i386 +8
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.5.el3, seamonkey-1.0.9-0.5.el3.i386, seamonkey-1.0.9-0.5.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-6.el4, seamonkey-1.0.9-6.el4.i386, seamonkey-1.0.9-6.el4.ia64 +15
- Red Hat Enterprise Linux WS version 2.1 seamonkey-1.0.9-0.6.el2, seamonkey-1.0.9-0.6.el2.i386, seamonkey-chat-1.0.9-0.6.el2.i386 +8
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.5.el3, seamonkey-1.0.9-0.5.el3.i386, seamonkey-1.0.9-0.5.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-6.el4, seamonkey-1.0.9-6.el4.i386, seamonkey-1.0.9-6.el4.ia64 +15
- Red Hat Linux Advanced Workstation 2.1 seamonkey-1.0.9-0.6.el2, seamonkey-1.0.9-0.6.el2.ia64, seamonkey-chat-1.0.9-0.6.el2.ia64 +8
Fixes 9 records
Priority MEDIUM 46
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allow remote attackers to execute arbitrary Javascript with user privileges by using the Script object to modify XPCNativeWrappers in a way that causes the script…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03153 · Published 2007-10-21 · Fixed CWE-16
Priority LOW 34
CRLF injection vulnerability in the Digest Authentication support for Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 allows remote attackers to conduct HTTP request splitting attacks via LF (%0a) bytes in the…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.12736 · Published 2007-04-26 · Fixed CWE-20
Priority LOW 34
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 do not properly implement JavaScript onUnload handlers, which allows remote attackers to run certain JavaScript code and access the location DOM hierarchy in the…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.0226 · Published 2007-02-26 · Fixed
Priority LOW 28
Mozilla Firefox 2.0.0.5, Thunderbird 2.0.0.5 and before 1.5.0.13, and SeaMonkey 1.1.3 allows remote attackers to conduct cross-site scripting (XSS) attacks with chrome privileges via an addon that inserts a (1) javascrip…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.05447 · Published 2007-08-08 · Fixed
Priority LOW 26
Multiple vulnerabilities in the Javascript engine in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML tha…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0343 · Published 2007-10-21 · Fixed CWE-20
Priority LOW 26
Multiple vulnerabilities in Mozilla Firefox before 2.0.0.8, Thunderbird before 2.0.0.8, and SeaMonkey before 1.1.5 allow remote attackers to cause a denial of service (crash) via crafted HTML that triggers memory corrupt…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0343 · Published 2007-10-21 · Fixed CWE-20
Priority LOW 26
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5 can hide the window's titlebar when displaying XUL markup language documents, which makes it easier for remote attackers to conduct phishing and spoofing attacks…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03017 · Published 2007-10-21 · Fixed CWE-16
Priority LOW 25
Mozilla Firefox before 2.0.0.8 and SeaMonkey before 1.1.5, when running on Linux systems with gnome-vfs support, might allow remote attackers to read arbitrary files on SSH/sftp servers that accept key authentication by…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02441 · Published 2007-10-21 · Fixed CWE-200
Priority LOW 25
The focus handling for the onkeydown event in Mozilla Firefox 1.5.0.12, 2.0.0.4 and other versions before 2.0.0.8, and SeaMonkey before 1.1.5 allows remote attackers to change field focus and copy keystrokes via the "for…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02357 · Published 2007-07-03 · Fixed
THREATIST.IORead the docs