(RHSA-2008:0977) Critical: seamonkey security update

2008-11-1200:00:00

access.redhat.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.954 High

EPSS

Percentile

99.2%

JSON

SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-0017, CVE-2008-5013, CVE-2008-5014, CVE-2008-5016,
CVE-2008-5017, CVE-2008-5018, CVE-2008-5019, CVE-2008-5021)

Several flaws were found in the way malformed content was processed. A web
site containing specially-crafted content could potentially trick a
SeaMonkey user into surrendering sensitive information. (CVE-2008-5012,
CVE-2008-5022, CVE-2008-5023, CVE-2008-5024)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches to resolve these issues.

OSVersionArchitecturePackageVersionFilename
RedHat3i386seamonkey-chat< 1.0.9-0.25.el3seamonkey-chat-1.0.9-0.25.el3.i386.rpm
RedHat3ia64seamonkey< 1.0.9-0.25.el3seamonkey-1.0.9-0.25.el3.ia64.rpm
RedHat4ppcseamonkey-mail< 1.0.9-28.el4seamonkey-mail-1.0.9-28.el4.ppc.rpm
RedHat4s390seamonkey-devel< 1.0.9-28.el4seamonkey-devel-1.0.9-28.el4.s390.rpm
RedHat2ia64seamonkey-mail< 1.0.9-0.21.el2seamonkey-mail-1.0.9-0.21.el2.ia64.rpm
RedHat3ppcseamonkey-devel< 1.0.9-0.25.el3seamonkey-devel-1.0.9-0.25.el3.ppc.rpm
RedHat4ppcseamonkey-js-debugger< 1.0.9-28.el4seamonkey-js-debugger-1.0.9-28.el4.ppc.rpm
RedHat2i386seamonkey-devel< 1.0.9-0.21.el2seamonkey-devel-1.0.9-0.21.el2.i386.rpm
RedHat3ppcseamonkey-mail< 1.0.9-0.25.el3seamonkey-mail-1.0.9-0.25.el3.ppc.rpm
RedHat3x86_64seamonkey-devel< 1.0.9-0.25.el3seamonkey-devel-1.0.9-0.25.el3.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	3	i386	seamonkey-chat	< 1.0.9-0.25.el3	seamonkey-chat-1.0.9-0.25.el3.i386.rpm
RedHat	3	ia64	seamonkey	< 1.0.9-0.25.el3	seamonkey-1.0.9-0.25.el3.ia64.rpm
RedHat	4	ppc	seamonkey-mail	< 1.0.9-28.el4	seamonkey-mail-1.0.9-28.el4.ppc.rpm
RedHat	4	s390	seamonkey-devel	< 1.0.9-28.el4	seamonkey-devel-1.0.9-28.el4.s390.rpm
RedHat	2	ia64	seamonkey-mail	< 1.0.9-0.21.el2	seamonkey-mail-1.0.9-0.21.el2.ia64.rpm
RedHat	3	ppc	seamonkey-devel	< 1.0.9-0.25.el3	seamonkey-devel-1.0.9-0.25.el3.ppc.rpm
RedHat	4	ppc	seamonkey-js-debugger	< 1.0.9-28.el4	seamonkey-js-debugger-1.0.9-28.el4.ppc.rpm
RedHat	2	i386	seamonkey-devel	< 1.0.9-0.21.el2	seamonkey-devel-1.0.9-0.21.el2.i386.rpm
RedHat	3	ppc	seamonkey-mail	< 1.0.9-0.25.el3	seamonkey-mail-1.0.9-0.25.el3.ppc.rpm
RedHat	3	x86_64	seamonkey-devel	< 1.0.9-0.25.el3	seamonkey-devel-1.0.9-0.25.el3.x86_64.rpm