Red Hat Security AdvisoryRHSA-2010:0546
seamonkey security update
Released 2010-07-21 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.57.el3, seamonkey-1.0.9-0.57.el3.i386, seamonkey-chat-1.0.9-0.57.el3 +17
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.57.el3, seamonkey-1.0.9-0.57.el3.i386, seamonkey-1.0.9-0.57.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-60.el4, seamonkey-1.0.9-60.el4.i386, seamonkey-1.0.9-60.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-60.el4, seamonkey-1.0.9-60.el4.i386, seamonkey-chat-1.0.9-60.el4 +9
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.57.el3, seamonkey-1.0.9-0.57.el3.i386, seamonkey-1.0.9-0.57.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-60.el4, seamonkey-1.0.9-60.el4.i386, seamonkey-1.0.9-60.el4.ia64 +15
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.57.el3, seamonkey-1.0.9-0.57.el3.i386, seamonkey-1.0.9-0.57.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-60.el4, seamonkey-1.0.9-60.el4.i386, seamonkey-1.0.9-60.el4.ia64 +15
Fixes 6 records
Priority HIGH 71
Buffer overflow in pngpread.c in libpng before 1.2.44 and 1.4.x before 1.4.3, as used in progressive applications, might allow remote attackers to execute arbitrary code via a PNG image that triggers an additional data r…
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.43382 · Published 2010-06-30 · Fixed CWE-120
Priority MEDIUM 50
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to execute arbitrary code via plugin content with many parameter elements.
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.07585 · Published 2010-07-30 · Fixed CWE-189
Priority MEDIUM 48
Integer overflow in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allows remote attackers to execute arbitrary code via a la…
CVSS 3.1HIGH 8.8· Network · No auth · User interaction · EPSS 0.06672 · Published 2010-07-30 · Fixed CWE-190
Priority MEDIUM 46
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 allow remote att…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03726 · Published 2010-07-30 · Fixed
Priority LOW 25
dom/base/nsJSEnvironment.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, Thunderbird 3.0.x before 3.0.6 and 3.1.x before 3.1.1, and SeaMonkey before 2.0.6 does not properly suppress a script's URL in c…
CVSS 2.0MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.01069 · Published 2010-07-29 · Partial fix CWE-200
Priority LOW 17
The nsDocShell::OnRedirectStateChange function in docshell/base/nsDocShell.cpp in Mozilla Firefox 3.5.x before 3.5.11 and 3.6.x before 3.6.7, and SeaMonkey before 2.0.6, allows remote attackers to spoof the SSL security…
CVSS 2.0LOW 2.6· Network · No auth · Interaction — · EPSS 0.01873 · Published 2010-07-30 · Partial fix CWE-264
THREATIST.IORead the docs