(RHSA-2009:1096) Critical: seamonkey security update

2009-06-1100:00:00

access.redhat.com

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.95 High

EPSS

Percentile

99.1%

JSON

SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-1392, CVE-2009-1833, CVE-2009-1838, CVE-2009-1841)

A flaw was found in the processing of malformed, local file content. If a
user loaded malicious, local content via the file:// URL, it was possible
for that content to access other local data. (CVE-2009-1835)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat4s390xseamonkey< 1.0.9-43.el4_8seamonkey-1.0.9-43.el4_8.s390x.rpm
RedHat4i386seamonkey-chat< 1.0.9-43.el4_8seamonkey-chat-1.0.9-43.el4_8.i386.rpm
RedHat4x86_64seamonkey-js-debugger< 1.0.9-43.el4_8seamonkey-js-debugger-1.0.9-43.el4_8.x86_64.rpm
RedHat4x86_64seamonkey-chat< 1.0.9-43.el4_8seamonkey-chat-1.0.9-43.el4_8.x86_64.rpm
RedHat4ppcseamonkey-chat< 1.0.9-43.el4_8seamonkey-chat-1.0.9-43.el4_8.ppc.rpm
RedHat4x86_64seamonkey-dom-inspector< 1.0.9-43.el4_8seamonkey-dom-inspector-1.0.9-43.el4_8.x86_64.rpm
RedHat4s390seamonkey-dom-inspector< 1.0.9-43.el4_8seamonkey-dom-inspector-1.0.9-43.el4_8.s390.rpm
RedHat4ppcseamonkey-mail< 1.0.9-43.el4_8seamonkey-mail-1.0.9-43.el4_8.ppc.rpm
RedHat4ia64seamonkey-dom-inspector< 1.0.9-43.el4_8seamonkey-dom-inspector-1.0.9-43.el4_8.ia64.rpm
RedHat4x86_64seamonkey< 1.0.9-43.el4_8seamonkey-1.0.9-43.el4_8.x86_64.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	s390x	seamonkey	< 1.0.9-43.el4_8	seamonkey-1.0.9-43.el4_8.s390x.rpm
RedHat	4	i386	seamonkey-chat	< 1.0.9-43.el4_8	seamonkey-chat-1.0.9-43.el4_8.i386.rpm
RedHat	4	x86_64	seamonkey-js-debugger	< 1.0.9-43.el4_8	seamonkey-js-debugger-1.0.9-43.el4_8.x86_64.rpm
RedHat	4	x86_64	seamonkey-chat	< 1.0.9-43.el4_8	seamonkey-chat-1.0.9-43.el4_8.x86_64.rpm
RedHat	4	ppc	seamonkey-chat	< 1.0.9-43.el4_8	seamonkey-chat-1.0.9-43.el4_8.ppc.rpm
RedHat	4	x86_64	seamonkey-dom-inspector	< 1.0.9-43.el4_8	seamonkey-dom-inspector-1.0.9-43.el4_8.x86_64.rpm
RedHat	4	s390	seamonkey-dom-inspector	< 1.0.9-43.el4_8	seamonkey-dom-inspector-1.0.9-43.el4_8.s390.rpm
RedHat	4	ppc	seamonkey-mail	< 1.0.9-43.el4_8	seamonkey-mail-1.0.9-43.el4_8.ppc.rpm
RedHat	4	ia64	seamonkey-dom-inspector	< 1.0.9-43.el4_8	seamonkey-dom-inspector-1.0.9-43.el4_8.ia64.rpm
RedHat	4	x86_64	seamonkey	< 1.0.9-43.el4_8	seamonkey-1.0.9-43.el4_8.x86_64.rpm