Red Hat Security AdvisoryRHSA-2008:0208
seamonkey security update
Released 2008-03-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.16.el3, seamonkey-1.0.9-0.16.el3.i386, seamonkey-chat-1.0.9-0.16.el3 +17
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 seamonkey-1.0.9-0.14.el2, seamonkey-1.0.9-0.14.el2.i386, seamonkey-1.0.9-0.14.el2.ia64 +18
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.16.el3, seamonkey-1.0.9-0.16.el3.i386, seamonkey-1.0.9-0.16.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-15.el4, seamonkey-1.0.9-15.el4.i386, seamonkey-1.0.9-15.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-15.el4, seamonkey-1.0.9-15.el4.i386, seamonkey-chat-1.0.9-15.el4 +9
- Red Hat Enterprise Linux ES version 2.1 seamonkey-1.0.9-0.14.el2, seamonkey-1.0.9-0.14.el2.i386, seamonkey-chat-1.0.9-0.14.el2.i386 +8
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.16.el3, seamonkey-1.0.9-0.16.el3.i386, seamonkey-1.0.9-0.16.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-15.el4, seamonkey-1.0.9-15.el4.i386, seamonkey-1.0.9-15.el4.ia64 +15
- Red Hat Enterprise Linux WS version 2.1 seamonkey-1.0.9-0.14.el2, seamonkey-1.0.9-0.14.el2.i386, seamonkey-chat-1.0.9-0.14.el2.i386 +8
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.16.el3, seamonkey-1.0.9-0.16.el3.i386, seamonkey-1.0.9-0.16.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-15.el4, seamonkey-1.0.9-15.el4.i386, seamonkey-1.0.9-15.el4.ia64 +15
- Red Hat Linux Advanced Workstation 2.1 seamonkey-1.0.9-0.14.el2, seamonkey-1.0.9-0.14.el2.ia64, seamonkey-chat-1.0.9-0.14.el2.ia64 +8
Fixes 8 records
Priority MEDIUM 49
Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via unknown vectors that cause JavaScript to execute…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06055 · Published 2008-03-27 · Fixed
Priority LOW 37
Unspecified vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to execute arbitrary code via "XPCNativeWrapper pollution."
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04344 · Published 2008-03-27 · Fixed CWE-94
Priority LOW 36
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03373 · Published 2008-03-27 · Fixed CWE-399
Priority LOW 36
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.03373 · Published 2008-03-27 · Fixed CWE-399
Priority LOW 28
Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9, when generating the HTTP Referer header, does not list the entire URL when it contains Basic Authentication credentials without a username, which makes it easie…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.02443 · Published 2008-03-27 · Fixed CWE-287
Priority LOW 25
Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 2.0.0.13, Thunderbird before 2.0.0.13, and SeaMonkey before 1.1.9 allows remote attackers to inject arbitrary web script or HTML via event handlers, aka…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02765 · Published 2008-03-27 · Fixed CWE-79
Priority LOW 24
GUI overlay vulnerability in Mozilla Firefox before 2.0.0.13 and SeaMonkey before 1.1.9 allows remote attackers to spoof form elements and redirect user inputs via a borderless XUL pop-up window from a background tab.
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01791 · Published 2008-03-27 · Fixed CWE-59
Priority LOW 24
Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to trick the user into uploading arbitrary files via label tags that shift focus to a file input field, aka "focus spoofing…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02086 · Published 2008-02-08 · Fixed CWE-20
THREATIST.IORead the docs