CVE-2008-6961

mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the 1 .documentURI or 2 .textContent DOM properties...

Design/Logic Flaw

mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the 1 .documentURI or 2 .textContent DOM properties...

CVE-2008-6961

mailnews in Mozilla Thunderbird before 2.0.0.18 and SeaMonkey before 1.1.13, when JavaScript is enabled in mail, allows remote attackers to obtain sensitive information about the recipient, or comments in forwarded mail, via script that reads the 1 .documentURI or 2 .textContent DOM properties...

CVE-2008-6961

CVE-2008-6961 affects mailnews in Mozilla Thunderbird (before 2.0.0.18) and SeaMonkey (before 1.1.13). When JavaScript is enabled in mail, a malicious script can read DOM properties (documentURI, textContent) to disclose sensitive recipient information or comments in forwarded mail. This is a cli...

Multiple Products NSS Library Buffer Overflow Vulnerability

Firefox or Thunderbird or SeaMonkey or Evolution or Pidgin or AOL Instant Messenger Products is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right...

Mozilla Foundation Security Advisory 2009-43

Mozilla Foundation Security Advisory 2009-43 Title: Heap overflow in certificate regexp parsing Impact: Critical Announced: August 1, 2009 Reporter: Moxie Marlinspike Products: Firefox, Thunderbird, SeaMonkey, NSS Fixed in: Firefox 3.5 NSS 3.12.3 Description Moxie Marlinspike reported a heap...

Mozilla Foundation Security Advisory 2009-42

Mozilla Foundation Security Advisory 2009-42 Title: Compromise of SSL-protected communication Impact: Critical Announced: August 1, 2009 Reporter: Dan Kaminsky Products: Firefox, Thunderbird, SeaMonkey, NSS Fixed in: Firefox 3.5 NSS 3.12.3 Description IOActive security researcher Dan Kaminsky...

seamonkey security update

CentOS Errata and Security Advisory CESA-2009:1185 Updated seamonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser,...

Mozilla SeaMonkey规则表达式解析堆缓冲区溢出漏洞

Bugraq ID: 35891 CVE ID：CVE-2009-2404 Mozilla SeaMonkey是一款开源的WEB应用程序套件。 Mozilla SeaMonkey处理用于匹配SSL证书中的公用名的规则表达式代码存在缓冲区溢出，远程攻击者可以利用漏洞以应用程序权限执行任意指令。 构建恶意的证书，诱使用户使用Mozilla SeaMonkey处理可触发此漏洞。攻击者要利用此漏洞需要使SeaMonkey认为这个证书可信，否则会显示警告消息。 RedHat Enterprise Linux WS 4 RedHat Enterprise Linux WS 3 RedHat...

RHEL 3 : seamonkey (RHSA-2009:1185)

Updated SeaMonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTM...

CentOS 3 : seamonkey (CESA-2009:1185)

Updated SeaMonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTM...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix a security issue are now available for Red Hat Enterprise Linux 3. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTM...

Code injection

Mozilla Network Security Services NSS before 3.12.3, Firefox before 3.0.13, Thunderbird before 2.0.0.23, and SeaMonkey before 1.1.18 do not properly handle a '\0' character in a domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to...

CVE-2009-2408

CVE-2009-2408 affects Mozilla NSS up to 3.12.2/Firefox up to 3.0.12/ Thunderbird up to 2.0.0.22 and SeaMonkey up to 1.1.17. The issue is improper handling of a '\0' character in the domain name present in the certificate subject’s Common Name (CN) field of an X.509 certificate. This enables a man...

seamonkey security update

1.0.9-0.41.0.1.el3 - Add mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed the corresponding RedHat ones 1.0.9-0.41.el3 - Added fixes for rhbz513780, rhbz512918...

RedHat Security Advisory RHSA-2009:1163

The remote host is missing updates announced in advisory RHSA-2009:1163. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

CentOS Security Advisory CESA-2009:1163 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:1163. CESA-2009:1163 64492 2 $Id: ovcesa20091163.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1163 seamonkey Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

Fedora Core 11 FEDORA-2009-7614 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-7614. OpenVAS Vulnerability Test $Id: fcore20097614.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7614 seamonkey Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 10 FEDORA-2009-7567 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-7567. OpenVAS Vulnerability Test $Id: fcore20097567.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-7567 seamonkey Authors: Thomas Reinke Copyright: Copyright c 200...

RedHat Security Advisory RHSA-2009:1163

The remote host is missing updates announced in advisory RHSA-2009:1163. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...