Red Hat Security AdvisoryRHSA-2009:1096
seamonkey security update
Released 2009-06-11 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.38.el3, seamonkey-1.0.9-0.38.el3.i386, seamonkey-chat-1.0.9-0.38.el3 +17
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.38.el3, seamonkey-1.0.9-0.38.el3.i386, seamonkey-1.0.9-0.38.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-43.el4_8, seamonkey-1.0.9-43.el4_8.i386, seamonkey-1.0.9-43.el4_8.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-43.el4_8, seamonkey-1.0.9-43.el4_8.i386, seamonkey-chat-1.0.9-43.el4_8 +9
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.38.el3, seamonkey-1.0.9-0.38.el3.i386, seamonkey-1.0.9-0.38.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-43.el4_8, seamonkey-1.0.9-43.el4_8.i386, seamonkey-1.0.9-43.el4_8.ia64 +15
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.38.el3, seamonkey-1.0.9-0.38.el3.i386, seamonkey-1.0.9-0.38.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-43.el4_8, seamonkey-1.0.9-43.el4_8.i386, seamonkey-1.0.9-43.el4_8.ia64 +15
Fixes 5 records
Priority MEDIUM 52
The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09176 · Published 2009-06-12 · Fixed CWE-94
Priority MEDIUM 52
The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly e…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.09282 · Published 2009-06-12 · Fixed CWE-94
Priority MEDIUM 48
js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrom…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04795 · Published 2009-06-12 · Fixed CWE-94
Priority MEDIUM 48
The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04795 · Published 2009-06-12 · Fixed CWE-94
Priority LOW 25
Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary c…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02325 · Published 2009-06-12 · Fixed CWE-200
THREATIST.IORead the docs