(RHSA-2010:0113) Critical: seamonkey security update

2010-02-1700:00:00

access.redhat.com

10 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.151 Low

EPSS

Percentile

95.3%

JSON

SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.

A use-after-free flaw was found in SeaMonkey. Under low memory conditions,
visiting a web page containing malicious content could result in SeaMonkey
executing arbitrary code with the privileges of the user running SeaMonkey.
(CVE-2009-1571)

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code with the privileges of the user running
SeaMonkey. (CVE-2010-0159)

All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.

OSVersionArchitecturePackageVersionFilename
RedHat4ia64seamonkey< 1.0.9-52.el4_8seamonkey-1.0.9-52.el4_8.ia64.rpm
RedHat4s390seamonkey-chat< 1.0.9-52.el4_8seamonkey-chat-1.0.9-52.el4_8.s390.rpm
RedHat4x86_64seamonkey-dom-inspector< 1.0.9-52.el4_8seamonkey-dom-inspector-1.0.9-52.el4_8.x86_64.rpm
RedHat4i386seamonkey-devel< 1.0.9-52.el4_8seamonkey-devel-1.0.9-52.el4_8.i386.rpm
RedHat4ppcseamonkey-devel< 1.0.9-52.el4_8seamonkey-devel-1.0.9-52.el4_8.ppc.rpm
RedHat4ia64seamonkey-chat< 1.0.9-52.el4_8seamonkey-chat-1.0.9-52.el4_8.ia64.rpm
RedHat4ppcseamonkey-mail< 1.0.9-52.el4_8seamonkey-mail-1.0.9-52.el4_8.ppc.rpm
RedHat4i386seamonkey-chat< 1.0.9-52.el4_8seamonkey-chat-1.0.9-52.el4_8.i386.rpm
RedHat4ia64seamonkey-dom-inspector< 1.0.9-52.el4_8seamonkey-dom-inspector-1.0.9-52.el4_8.ia64.rpm
RedHat4i386seamonkey-dom-inspector< 1.0.9-52.el4_8seamonkey-dom-inspector-1.0.9-52.el4_8.i386.rpm

OS	Version	Architecture	Package	Version	Filename
RedHat	4	ia64	seamonkey	< 1.0.9-52.el4_8	seamonkey-1.0.9-52.el4_8.ia64.rpm
RedHat	4	s390	seamonkey-chat	< 1.0.9-52.el4_8	seamonkey-chat-1.0.9-52.el4_8.s390.rpm
RedHat	4	x86_64	seamonkey-dom-inspector	< 1.0.9-52.el4_8	seamonkey-dom-inspector-1.0.9-52.el4_8.x86_64.rpm
RedHat	4	i386	seamonkey-devel	< 1.0.9-52.el4_8	seamonkey-devel-1.0.9-52.el4_8.i386.rpm
RedHat	4	ppc	seamonkey-devel	< 1.0.9-52.el4_8	seamonkey-devel-1.0.9-52.el4_8.ppc.rpm
RedHat	4	ia64	seamonkey-chat	< 1.0.9-52.el4_8	seamonkey-chat-1.0.9-52.el4_8.ia64.rpm
RedHat	4	ppc	seamonkey-mail	< 1.0.9-52.el4_8	seamonkey-mail-1.0.9-52.el4_8.ppc.rpm
RedHat	4	i386	seamonkey-chat	< 1.0.9-52.el4_8	seamonkey-chat-1.0.9-52.el4_8.i386.rpm
RedHat	4	ia64	seamonkey-dom-inspector	< 1.0.9-52.el4_8	seamonkey-dom-inspector-1.0.9-52.el4_8.ia64.rpm
RedHat	4	i386	seamonkey-dom-inspector	< 1.0.9-52.el4_8	seamonkey-dom-inspector-1.0.9-52.el4_8.i386.rpm