Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable4965.PRM
HistoryMar 23, 2009 - 12:00 a.m.

SeaMonkey < 1.1.15 Multiple Vulnerabilities

2009-03-2300:00:00
Tenable
www.tenable.com
14
JSON

The installed version of SeaMonkey is earlier than 1.1.15. Such versions are potentially affected by the following security issues :

  • There are several stability bugs in the browser engine that may lead to crashes with evidence of memory corruption. (MFSA 2009-01)

  • Cookies marked HTTPOnly are readable by JavaScript via the ‘XMLHttpRequest.getResponseHeader’ and ‘XMLHttpRequest.getAllResponseHeaders’ APIs. (MFSA 2009-05)

  • By exploiting stability bugs in the browser engine, it might be possible for an attacker to execute arbitrary code on the remote system under certain conditions. (MFSA 2009-07)

  • It may be possible for a website to read arbitrary XML data from another domain by using nsIRDFService and a cross-domain redirect. (MFSA 2009-09)

  • Vulnerabilities in the PNG libraries used by Mozilla could be exploited to execute arbitrary code on the remote system. (MFSA 2009-10)

Binary data 4965.prm
VendorProductVersionCPE
mozillaseamonkeycpe:/a:mozilla:seamonkey

References

JSON