Red Hat Security AdvisoryRHSA-2009:0257
seamonkey security update
Released 2009-02-04 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.32.el3, seamonkey-1.0.9-0.32.el3.i386, seamonkey-chat-1.0.9-0.32.el3 +17
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 seamonkey-1.0.9-0.27.el2, seamonkey-1.0.9-0.27.el2.i386, seamonkey-1.0.9-0.27.el2.ia64 +18
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.32.el3, seamonkey-1.0.9-0.32.el3.i386, seamonkey-1.0.9-0.32.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-35.el4, seamonkey-1.0.9-35.el4.i386, seamonkey-1.0.9-35.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-35.el4, seamonkey-1.0.9-35.el4.i386, seamonkey-chat-1.0.9-35.el4 +9
- Red Hat Enterprise Linux ES version 2.1 seamonkey-1.0.9-0.27.el2, seamonkey-1.0.9-0.27.el2.i386, seamonkey-chat-1.0.9-0.27.el2.i386 +8
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.32.el3, seamonkey-1.0.9-0.32.el3.i386, seamonkey-1.0.9-0.32.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-35.el4, seamonkey-1.0.9-35.el4.i386, seamonkey-1.0.9-35.el4.ia64 +15
- Red Hat Enterprise Linux WS version 2.1 seamonkey-1.0.9-0.27.el2, seamonkey-1.0.9-0.27.el2.i386, seamonkey-chat-1.0.9-0.27.el2.i386 +8
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.32.el3, seamonkey-1.0.9-0.32.el3.i386, seamonkey-1.0.9-0.32.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-35.el4, seamonkey-1.0.9-35.el4.i386, seamonkey-1.0.9-35.el4.ia64 +15
- Red Hat Linux Advanced Workstation 2.1 seamonkey-1.0.9-0.27.el2, seamonkey-1.0.9-0.27.el2.ia64, seamonkey-chat-1.0.9-0.27.el2.ia64 +8
Fixes 4 records
Priority MEDIUM 50
Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or po…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04331 · Published 2009-02-04 · Fixed CWE-399
Priority MEDIUM 50
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application cr…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04331 · Published 2009-02-04 · Fixed CWE-399
Priority LOW 28
components/sessionstore/src/nsSessionStore.js in Mozilla Firefox before 3.0.6 does not block changes of INPUT elements to type="file" during tab restoration, which allows user-assisted remote attackers to read arbitrary…
CVSS 2.0MEDIUM 5.4· Network · No auth · Interaction — · EPSS 0.01635 · Published 2009-02-04 · Fixed CWE-264
Priority LOW 26
Mozilla Firefox before 3.0.6 and SeaMonkey before 1.1.15 do not properly restrict access from web pages to the (1) Set-Cookie and (2) Set-Cookie2 HTTP response headers, which allows remote attackers to obtain sensitive i…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.0156 · Published 2009-02-04 · Fixed CWE-264