Red Hat Security AdvisoryRHSA-2010:0680
seamonkey security update
Released 2010-09-08 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.60.el3, seamonkey-1.0.9-0.60.el3.i386, seamonkey-chat-1.0.9-0.60.el3 +17
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.60.el3, seamonkey-1.0.9-0.60.el3.i386, seamonkey-1.0.9-0.60.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-63.el4, seamonkey-1.0.9-63.el4.i386, seamonkey-1.0.9-63.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-63.el4, seamonkey-1.0.9-63.el4.i386, seamonkey-chat-1.0.9-63.el4 +9
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.60.el3, seamonkey-1.0.9-0.60.el3.i386, seamonkey-1.0.9-0.60.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-63.el4, seamonkey-1.0.9-63.el4.i386, seamonkey-1.0.9-63.el4.ia64 +15
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.60.el3, seamonkey-1.0.9-0.60.el3.i386, seamonkey-1.0.9-0.60.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-63.el4, seamonkey-1.0.9-63.el4.i386, seamonkey-1.0.9-63.el4.ia64 +15
Fixes 7 records
Priority MEDIUM 49
The nsTreeContentView function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle node removal in XUL trees, whic…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.06527 · Published 2010-09-09 · Fixed CWE-119
Priority MEDIUM 49
Integer overflow in the FRAMESET element implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attackers to…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.05719 · Published 2010-09-09 · Fixed CWE-189
Priority MEDIUM 48
Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict the role of property changes in triggering XUL tree removal, whic…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04812 · Published 2010-09-09 · Fixed CWE-119
Priority MEDIUM 48
The navigator.plugins implementation in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 does not properly handle destruction of the DOM pl…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04684 · Published 2010-09-09 · Fixed CWE-399
Priority MEDIUM 47
Use-after-free vulnerability in the nsTreeSelection function in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 might allow remote attacke…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03952 · Published 2010-09-09 · Fixed CWE-399
Priority MEDIUM 46
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 allow remote attackers to ca…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.03726 · Published 2010-09-09 · Fixed
Priority LOW 24
Mozilla Firefox before 3.5.12 and 3.6.x before 3.6.9, Thunderbird before 3.0.7 and 3.1.x before 3.1.3, and SeaMonkey before 2.0.7 do not properly restrict use of the type attribute of an OBJECT element to set a document'…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02107 · Published 2010-09-09 · Partial fix CWE-79
THREATIST.IORead the docs