Red Hat Security AdvisoryRHSA-2009:0325
seamonkey security update
Released 2009-03-05 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.34.el3, seamonkey-1.0.9-0.34.el3.i386, seamonkey-chat-1.0.9-0.34.el3 +17
- Red Hat Enterprise Linux AS (Advanced Server) version 2.1 seamonkey-1.0.9-0.30.el2, seamonkey-1.0.9-0.30.el2.i386, seamonkey-1.0.9-0.30.el2.ia64 +18
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.34.el3, seamonkey-1.0.9-0.34.el3.i386, seamonkey-1.0.9-0.34.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-38.el4, seamonkey-1.0.9-38.el4.i386, seamonkey-1.0.9-38.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-38.el4, seamonkey-1.0.9-38.el4.i386, seamonkey-chat-1.0.9-38.el4 +9
- Red Hat Enterprise Linux ES version 2.1 seamonkey-1.0.9-0.30.el2, seamonkey-1.0.9-0.30.el2.i386, seamonkey-chat-1.0.9-0.30.el2.i386 +8
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.34.el3, seamonkey-1.0.9-0.34.el3.i386, seamonkey-1.0.9-0.34.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-38.el4, seamonkey-1.0.9-38.el4.i386, seamonkey-1.0.9-38.el4.ia64 +15
- Red Hat Enterprise Linux WS version 2.1 seamonkey-1.0.9-0.30.el2, seamonkey-1.0.9-0.30.el2.i386, seamonkey-chat-1.0.9-0.30.el2.i386 +8
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.34.el3, seamonkey-1.0.9-0.34.el3.i386, seamonkey-1.0.9-0.34.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-38.el4, seamonkey-1.0.9-38.el4.i386, seamonkey-1.0.9-38.el4.ia64 +15
- Red Hat Linux Advanced Workstation 2.1 seamonkey-1.0.9-0.30.el2, seamonkey-1.0.9-0.30.el2.ia64, seamonkey-chat-1.0.9-0.30.el2.ia64 +8
Fixes 5 records
Priority MEDIUM 50
Double free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to execute arbitrary code via "cloned XUL DOM elements which were linked as a pa…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.04709 · Published 2009-03-05 · Fixed CWE-399
Priority MEDIUM 47
The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors re…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04047 · Published 2009-03-05 · Fixed CWE-399
Priority MEDIUM 46
The layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1.15 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via vectors re…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03722 · Published 2009-03-05 · Fixed CWE-399
Priority LOW 38
The PNG reference library (aka libpng) before 1.0.43, and 1.2.x before 1.2.35, as used in pngcrush and other applications, allows context-dependent attackers to cause a denial of service (application crash) or possibly e…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.04825 · Published 2009-02-22 · Fixed CWE-824
Priority LOW 34
nsIRDFService in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to bypass the same-origin policy and read XML data from another domain via a cross-domain re…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.016 · Published 2009-03-05 · Fixed CWE-200
THREATIST.IORead the docs