Red Hat Security AdvisoryRHSA-2010:0499
seamonkey security update
Released 2010-06-22 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.55.el3, seamonkey-1.0.9-0.55.el3.i386, seamonkey-chat-1.0.9-0.55.el3 +17
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.55.el3, seamonkey-1.0.9-0.55.el3.i386, seamonkey-1.0.9-0.55.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-58.el4_8, seamonkey-1.0.9-58.el4_8.i386, seamonkey-1.0.9-58.el4_8.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-58.el4_8, seamonkey-1.0.9-58.el4_8.i386, seamonkey-chat-1.0.9-58.el4_8 +9
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.55.el3, seamonkey-1.0.9-0.55.el3.i386, seamonkey-1.0.9-0.55.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-58.el4_8, seamonkey-1.0.9-58.el4_8.i386, seamonkey-1.0.9-58.el4_8.ia64 +15
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.55.el3, seamonkey-1.0.9-0.55.el3.i386, seamonkey-1.0.9-0.55.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-58.el4_8, seamonkey-1.0.9-58.el4_8.i386, seamonkey-1.0.9-58.el4_8.ia64 +15
Fixes 5 records
Priority MEDIUM 53
Integer overflow in the XSLT node sorting implementation in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary co…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.11418 · Published 2010-06-23 · Fixed CWE-189
Priority MEDIUM 48
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, Thunderbird before 3.0.5, and SeaMonkey before 2.0.5 allow remote attackers to cause a denial of s…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05021 · Published 2010-06-23 · Fixed
Priority MEDIUM 48
Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04812 · Published 2010-06-23 · Fixed CWE-399
Priority LOW 26
Mozilla Thunderbird before 2.0.0.24 and SeaMonkey before 1.1.19 process e-mail attachments with a parser that performs casts and line termination incorrectly, which allows remote attackers to cause a denial of service (a…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.03186 · Published 2010-03-22 · Fixed
Priority LOW 24
Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, does not properly handle situations in which both "Content-Disposition: attachment" and "Content-Type: multipart" are present in HTT…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.0207 · Published 2010-06-23 · Partial fix CWE-79
THREATIST.IORead the docs