Red Hat Security AdvisoryRHSA-2008:1037
seamonkey security update
Released 2008-12-17 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.29.el3, seamonkey-1.0.9-0.29.el3.i386, seamonkey-chat-1.0.9-0.29.el3 +17
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 seamonkey-1.0.9-0.25.el2, seamonkey-1.0.9-0.25.el2.i386, seamonkey-1.0.9-0.25.el2.ia64 +18
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.29.el3, seamonkey-1.0.9-0.29.el3.i386, seamonkey-1.0.9-0.29.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-32.el4, seamonkey-1.0.9-32.el4.i386, seamonkey-1.0.9-32.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-32.el4, seamonkey-1.0.9-32.el4.i386, seamonkey-chat-1.0.9-32.el4 +9
- Red Hat Enterprise Linux ES version 2.1 seamonkey-1.0.9-0.25.el2, seamonkey-1.0.9-0.25.el2.i386, seamonkey-chat-1.0.9-0.25.el2.i386 +8
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.29.el3, seamonkey-1.0.9-0.29.el3.i386, seamonkey-1.0.9-0.29.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-32.el4, seamonkey-1.0.9-32.el4.i386, seamonkey-1.0.9-32.el4.ia64 +15
- Red Hat Enterprise Linux WS version 2.1 seamonkey-1.0.9-0.25.el2, seamonkey-1.0.9-0.25.el2.i386, seamonkey-chat-1.0.9-0.25.el2.i386 +8
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.29.el3, seamonkey-1.0.9-0.29.el3.i386, seamonkey-1.0.9-0.29.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-32.el4, seamonkey-1.0.9-32.el4.i386, seamonkey-1.0.9-32.el4.ia64 +15
- Red Hat Linux Advanced Workstation 2.1 seamonkey-1.0.9-0.25.el2, seamonkey-1.0.9-0.25.el2.ia64, seamonkey-chat-1.0.9-0.25.el2.ia64 +8
Fixes 11 records
Priority MEDIUM 49
The layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) and possibly tr…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.03201 · Published 2008-12-17 · Fixed CWE-399
Priority LOW 38
Mozilla Firefox 2.x before 2.0.0.19 allows remote attackers to run arbitrary JavaScript with chrome privileges via vectors related to the feed preview, a different vulnerability than CVE-2008-3836.
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.02553 · Published 2008-12-17 · Fixed CWE-264
Priority LOW 35
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to run arbitrary JavaScript with c…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02863 · Published 2008-12-17 · Fixed CWE-264
Priority LOW 34
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy by causing the browser to issue an XMLHt…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.02091 · Published 2008-12-17 · Fixed CWE-264
Priority LOW 30
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allow remote attackers to bypass the same origin policy and access portions of data from another…
CVSS 2.0MEDIUM 6.0· Network · Low privileges · Interaction — · EPSS 0.0166 · Published 2008-12-17 · Fixed CWE-200
Priority LOW 29
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service via vectors that trigger an assertion failure.
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.03137 · Published 2008-12-17 · Fixed
Priority LOW 27
The layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to cause a denial of service (crash) via vectors that trigger memory corrupt…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0227 · Published 2008-12-17 · Fixed CWE-399
Priority LOW 24
Unspecified vulnerability in the session-restore feature in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19 allows remote attackers to bypass the same origin policy, inject content into documents associated with…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01784 · Published 2008-12-17 · Fixed CWE-79
Priority LOW 24
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 allows remote attackers to bypass the same origin policy and conduct cross-site scripting (XSS) a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01856 · Published 2008-12-17 · Fixed CWE-79
Priority LOW 24
Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not properly parse URLs with leading whitespace or control characters, which might allow rem…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02222 · Published 2008-12-17 · Fixed CWE-20
Priority LOW 16
The loadBindingDocument function in Mozilla Firefox 2.x before 2.0.0.19, Thunderbird 2.x before 2.0.0.19, and SeaMonkey 1.x before 1.1.14 does not perform any security checks related to the same-domain policy, which allo…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.01521 · Published 2008-12-17 · Fixed
THREATIST.IORead the docs