Red Hat Security AdvisoryRHSA-2011:0313
seamonkey security update
Released 2011-03-02 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux AS version 4 seamonkey-1.0.9-67.el4_8, seamonkey-1.0.9-67.el4_8.i386, seamonkey-1.0.9-67.el4_8.ia64 +21
- Red Hat Enterprise Linux Desktop version 4 seamonkey-1.0.9-67.el4_8, seamonkey-1.0.9-67.el4_8.i386, seamonkey-chat-1.0.9-67.el4_8 +9
- Red Hat Enterprise Linux ES version 4 seamonkey-1.0.9-67.el4_8, seamonkey-1.0.9-67.el4_8.i386, seamonkey-1.0.9-67.el4_8.ia64 +15
- Red Hat Enterprise Linux WS version 4 seamonkey-1.0.9-67.el4_8, seamonkey-1.0.9-67.el4_8.i386, seamonkey-1.0.9-67.el4_8.ia64 +15
Fixes 3 records
Priority MEDIUM 52
Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 allow remote attackers to cause a denial of servi…
CVSS 2.0HIGH 10.0· Network · No auth · Interaction — · EPSS 0.05787 · Published 2011-03-02 · Partial fix
Priority LOW 34
Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain recursive eval calls, which makes it easier for remote attackers to force a user to respond positively…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.01823 · Published 2011-03-02 · Partial fix CWE-20
Priority LOW 32
Cross-site request forgery (CSRF) vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests…
CVSS 2.0MEDIUM 6.8· Network · No auth · Interaction — · EPSS 0.00967 · Published 2011-03-02 · Fixed CWE-352
THREATIST.IORead the docs