CentOS Update for seamonkey CESA-2011:0313 centos4 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for seamonkey RHSA-2011:0313-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

Debian DSA-2180-1 : iceape - several vulnerabilities

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey : - CVE-2010-1585 Roberto Suggi Liverani discovered that the sanitising performed by ParanoidFragmentSink was incomplete. - CVE-2011-0051 Zach Hoffmann discovered that incorrect parsing of...

seamonkey security update

CentOS Errata and Security Advisory CESA-2011:0313 Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS ba...

Mozilla Foundation Security Advisory 2011-05

Mozilla Foundation Security Advisory 2011-05 Title: Buffer overflow in JavaScript atom map Impact: Critical Announced: March 1, 2011 Reporter: Christian Holler Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Security researcher Christian Holler...

CentOS 4 : seamonkey (CESA-2011:0313)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Mozilla Foundation Security Advisory 2011-01

Mozilla Foundation Security Advisory 2011-01 Title: Miscellaneous memory safety hazards rv:1.9.2.14/ 1.9.1.17 Impact: Critical Announced: March 1, 2011 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 Thunderbird 3.1.8...

Mozilla Foundation Security Advisory 2011-03

Mozilla Foundation Security Advisory 2011-03 Title: Use-after-free error in JSON.stringify Impact: Critical Announced: March 1, 2011 Reporter: regenrecht Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Security researcher regenrecht reported via...

Mozilla Foundation Security Advisory 2011-06

Mozilla Foundation Security Advisory 2011-06 Title: Use-after-free error using Web Workers Impact: Critical Announced: March 1, 2011 Reporter: Daniel Kozlowski Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Daniel Kozlowski reported that a...

Mozilla Firefox/Thunderbird/SeaMonkey MFSA多个安全漏洞

BUGTRAQ ID: 46368 CVE ID: CVE-2010-1585,VE-2011-0051,VE-2011-0054,VE-2011-0055,VE-2011-0056,VE-2011-0057,VE-2011-0058,VE-2011-0059,VE-2011-0061,VE-2011-0062 Firefox是一款非常流行的开源WEB浏览器。Thunderbird是一个邮件客户端，支持IMAP、POP邮件协议以及HTML邮件格式。SeaMonkey是开源的Web浏览器、邮件和新闻组客户端、IRC会话客户端和HTML编辑器。 Mozilla...

Mozilla Foundation Security Advisory 2011-04

Mozilla Foundation Security Advisory 2011-04 Title: Buffer overflow in JavaScript upvarMap Impact: Critical Announced: March 1, 2011 Reporter: Christian Holler Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Security researcher Christian Holler...

Mozilla Foundation Security Advisory 2011-10

Mozilla Foundation Security Advisory 2011-10 Title: CSRF risk with plugins and 307 redirects Impact: High Announced: March 1, 2011 Reporter: Peleus Uhley Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Adobe security researcher Peleus Uhley report...

Mozilla Foundation Security Advisory 2011-08

Mozilla Foundation Security Advisory 2011-08 Title: ParanoidFragmentSink allows javascript: URLs in chrome documents Impact: Moderate Announced: March 1, 2011 Reporter: Roberto Suggi Liverani Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 Thunderbird 3.1.8...

Mozilla Foundation Security Advisory 2011-07

Mozilla Foundation Security Advisory 2011-07 Title: Memory corruption during text run construction Windows Impact: Critical Announced: March 1, 2011 Reporter: Alex Miller Products: Firefox, SeaMonkey Fixed in: Firefox 3.6.14 Firefox 3.5.17 SeaMonkey 2.0.12 Description Alex Miller reported that wh...

SeaMonkey < 2.0.12 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 2.0.12. Such versions are potentially affected by multiple vulnerabilities : - Multiple memory corruption errors exist and may lead to arbitrary code execution. MFSA 2011-01 - An error exists in the processing of recursive calls to 'eval' when th...

CVE-2011-0058

Buffer overflow in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a long string that triggers construction of a long text run...

CVE-2011-0061

Buffer overflow in Mozilla Firefox 3.6.x before 3.6.14, Thunderbird before 3.1.8, and SeaMonkey before 2.0.12 might allow remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted JPEG image...

CVE-2011-0059

Cross-site request forgery CSRF vulnerability in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to hijack the authentication of arbitrary users for requests that were initiated by a plugin and received a 307 redirect to a page on a...

CVE-2011-0051

Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, does not properly handle certain recursive eval calls, which makes it easier for remote attackers to force a user to respond positively to a dialog question, as demonstrated by a question about granting privileges...

CVE-2011-0055

Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via unspecified vectors related to the jsHasOwnProperty function and garbage...