Red Hat Security AdvisoryRHSA-2010:0781
seamonkey security update
Released 2010-10-19 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Desktop version 3 seamonkey-1.0.9-0.61.el3, seamonkey-1.0.9-0.61.el3.i386, seamonkey-chat-1.0.9-0.61.el3 +17
- Red Hat Enterprise Linux AS version 3 seamonkey-1.0.9-0.61.el3, seamonkey-1.0.9-0.61.el3.i386, seamonkey-1.0.9-0.61.el3.ia64 +37
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-64.el4, seamonkey-1.0.9-64.el4.i386, seamonkey-1.0.9-64.el4.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-64.el4, seamonkey-1.0.9-64.el4.i386, seamonkey-chat-1.0.9-64.el4 +9
- Red Hat Enterprise Linux ES version 3 seamonkey-1.0.9-0.61.el3, seamonkey-1.0.9-0.61.el3.i386, seamonkey-1.0.9-0.61.el3.ia64 +27
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-64.el4, seamonkey-1.0.9-64.el4.i386, seamonkey-1.0.9-64.el4.ia64 +15
- Red Hat Enterprise Linux WS version 3 seamonkey-1.0.9-0.61.el3, seamonkey-1.0.9-0.61.el3.i386, seamonkey-1.0.9-0.61.el3.ia64 +27
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-64.el4, seamonkey-1.0.9-64.el4.i386, seamonkey-1.0.9-64.el4.ia64 +15
Fixes 6 records
Priority MEDIUM 48
Use-after-free vulnerability in the nsBarProp function in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allows remote attackers to exec…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.04644 · Published 2010-10-21 · Fixed CWE-399
Priority MEDIUM 47
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 3.5.x before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 allow remote attacker…
CVSS 2.0HIGH 9.3· Network · No auth · Interaction — · EPSS 0.0455 · Published 2010-10-21 · Fixed
Priority LOW 38
The SSL implementation in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 does not properly set the minimum key length for Diffie-Hellman…
CVSS 2.0HIGH 7.5· Network · No auth · Interaction — · EPSS 0.03036 · Published 2010-10-21 · Partial fix CWE-310
Priority LOW 30
A certain application-launch script in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 on Linux places a zero-length directory name in th…
CVSS 2.0MEDIUM 6.9· Local · No auth · Interaction — · EPSS 0.00286 · Published 2010-10-21 · Fixed
Priority LOW 24
Multiple cross-site scripting (XSS) vulnerabilities in the Gopher parser in Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, and SeaMonkey before 2.0.9, allow remote attackers to inject arbitrary web script or HTML…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.02064 · Published 2010-10-21 · Fixed CWE-79
Priority LOW 22
Mozilla Firefox before 3.5.14 and 3.6.x before 3.6.11, Thunderbird before 3.0.9 and 3.1.x before 3.1.5, and SeaMonkey before 2.0.9 recognize a wildcard IP address in the subject's Common Name field of an X.509 certificat…
CVSS 2.0MEDIUM 4.3· Network · No auth · Interaction — · EPSS 0.01096 · Published 2010-10-21 · Fixed CWE-310
THREATIST.IORead the docs