Red Hat Security AdvisoryRHSA-2009:1531
seamonkey security update
Released 2009-10-27 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.47.el3, seamonkey-1.0.9-0.47.el3.i386, seamonkey-chat-1.0.9-0.47.el3 +17
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.47.el3, seamonkey-1.0.9-0.47.el3.i386, seamonkey-1.0.9-0.47.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-50.el4_8, seamonkey-1.0.9-50.el4_8.i386, seamonkey-1.0.9-50.el4_8.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-50.el4_8, seamonkey-1.0.9-50.el4_8.i386, seamonkey-chat-1.0.9-50.el4_8 +9
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.47.el3, seamonkey-1.0.9-0.47.el3.i386, seamonkey-1.0.9-0.47.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-50.el4_8, seamonkey-1.0.9-50.el4_8.i386, seamonkey-1.0.9-50.el4_8.ia64 +15
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.47.el3, seamonkey-1.0.9-0.47.el3.i386, seamonkey-1.0.9-0.47.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-50.el4_8, seamonkey-1.0.9-50.el4_8.i386, seamonkey-1.0.9-50.el4_8.ia64 +15
Fixes 7 records
Priority MEDIUM 53
Array index error in the (1) dtoa implementation in dtoa.c (aka pdtoa.c) and the (2) gdtoa (aka new dtoa) implementation in gdtoa/misc.c in libc, as used in multiple operating systems and products including in FreeBSD 6.…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.29381 · Published 2009-07-01 · Partial fix CWE-119
Priority MEDIUM 51
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allow remote attackers to cause a denial of service (memory corruption and application crash) or po…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05458 · Published 2009-10-29 · Fixed
Priority MEDIUM 46
Multiple unspecified vulnerabilities in WebKit in Apple Safari before 4.0.4 on Windows allow remote FTP servers to execute arbitrary code, cause a denial of service (application crash), or obtain sensitive information vi…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03478 · Published 2009-11-13 · Fixed
Priority MEDIUM 46
Mozilla Firefox before 3.0.15 and 3.5.x before 3.5.4, and SeaMonkey before 2.0, does not properly handle a right-to-left override (aka RLO or U+202E) Unicode character in a download filename, which allows remote attacker…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03183 · Published 2009-10-29 · Fixed CWE-16
Priority LOW 36
The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in…
CVSS 2.0HIGH 7.1· Network · No auth · Interaction — · EPSS 0.0277 · Published 2010-03-22 · Fixed CWE-264
Priority LOW 23
content/html/document/src/nsHTMLDocument.cpp in Mozilla Firefox 3.0.x before 3.0.15 and 3.5.x before 3.5.4 allows user-assisted remote attackers to bypass the Same Origin Policy and read an arbitrary content selection vi…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01674 · Published 2009-10-29 · Fixed CWE-264
Priority LOW 20
Mozilla Firefox 3.6a1, 3.5.3, 3.5.2, and earlier 3.5.x versions, and 3.0.14 and earlier 2.x and 3.x versions, on Linux uses a predictable /tmp pathname for files selected from the Downloads window, which allows local use…
CVSS 2.0MEDIUM 4.4· Local · No auth · Interaction — · EPSS 0.00292 · Published 2009-09-21 · Fixed
THREATIST.IORead the docs