Mozilla Seamonkey Multiple Vulnerabilities (Jun 2009) - Windows

Seamonkey is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CentOS Security Advisory CESA-2009:1096 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:1096. CESA-2009:1096 64209 4 $Id: ovcesa20091096.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1096 seamonkey Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

RedHat Security Advisory RHSA-2009:1096

The remote host is missing updates announced in advisory RHSA-2009:1096. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

CentOS 3 : seamonkey (CESA-2009:1096)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID da185955-5738-11de-b857-000f20797ede OpenVAS Vulnerability Test $ Description: Auto generated from VID da185955-5738-11de-b857-000f20797ede Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

CentOS Security Advisory CESA-2009:1096 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:1096. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RedHat Security Advisory RHSA-2009:1096

The remote host is missing updates announced in advisory RHSA-2009:1096. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

Mozilla Foundation Security Advisory 2009-29

Mozilla Foundation Security Advisory 2009-29 Title: Arbitrary code execution using event listeners attached to an element whose owner document is null Impact: Critical Announced: June 11, 2009 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Thunderbird...

Mozilla Foundation Security Advisory 2009-24

Mozilla Foundation Security Advisory 2009-24 Title: Crashes with evidence of memory corruption rv:1.9.0.11 Impact: Critical Announced: June 11, 2009 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Thunderbird 2.0.0.22 SeaMonkey 1.1.17...

Mozilla Foundation Security Advisory 2009-31

Mozilla Foundation Security Advisory 2009-31 Title: XUL scripts bypass content-policy checks Impact: Low Announced: June 11, 2009 Reporter: Wladimir Palant Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Description Mozilla add-on developer and community member Wladimir Palant...

Mozilla Foundation Security Advisory 2009-32

Mozilla Foundation Security Advisory 2009-32 Title: JavaScript chrome privilege escalation Impact: Critical Announced: June 11, 2009 Reporter: mozbugra4 Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.11 SeaMonkey 1.1.17 Thunderbird 2.0.0.22 Description Mozilla security researcher mozbugra4...

Mozilla Foundation Security Advisory 2009-25

Mozilla Foundation Security Advisory 2009-25 Title: URL spoofing with invalid unicode characters Impact: Low Announced: June 11, 2009 Reporter: Pavel Cvrcek Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.11 SeaMonkey 1.1.17 Description Mozilla add-on developer Pavel Cvrcek reported that certa...

CVE-2009-1841

js/src/xpconnect/src/xpcwrappedjsclass.cpp in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to execute arbitrary web script with the privileges of a chrome object, as demonstrated by the browser sidebar and the FeedWriter...

CVE-2009-1840

Mozilla Firefox before 3.0.11, Thunderbird, and SeaMonkey do not check content policy before loading a script file into a XUL document, which allows remote attackers to bypass intended access restrictions via a crafted HTML document, as demonstrated by a "web bug" in an e-mail message, or web...

Design/Logic Flaw

The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafte...

Memory corruption

The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1...

CVE-2009-1836

Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying...

CVE-2009-1832

Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors involving "double frame construction."...

CVE-2009-1838

The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafte...

Hardcoded credentials

Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying...