Mozilla Firefox, Thunderbird, Seamonkey: Multiple Vulnerabilities (MFSA2008-14) - Linux

Mozilla Firefox, Thunderbird and Seamonkey are prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian: Security Advisory (DSA-1534-1)

The remote host is missing an update for the Debian SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

[SECURITY] [DSA 1562-1] New iceape packages fix arbitrary code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1562-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff April 28, 2008 http://www.debian.org/security/faq -...

Fedora 7 : seamonkey-1.1.9-2.fc7 (2008-3231)

Security update: fix memory corrupting crash and possibly code execution in JavaScript garbage collection CVE-2008-1380, 440518. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clea...

Fedora 8 : seamonkey-1.1.9-2.fc8 (2008-3264)

Security update: fix memory corrupting crash and possibly code execution in JavaScript garbage collection CVE-2008-1380, 440518. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clea...

DSA-1534-2 iceape - regression

Bulletin has no description...

[SECURITY] Fedora 8 Update: seamonkey-1.1.9-2.fc8

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

[SECURITY] Fedora 7 Update: seamonkey-1.1.9-2.fc7

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

CentOS 3 / 4 : firefox / seamonkey (CESA-2008:0223)

Updated SeaMonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source We...

openSUSE 10 Security Update : seamonkey (seamonkey-5167)

This update brings Mozilla SeaMonkey to the level of seamonkey security update version 1.1.9 Following security problems were fixed : - MFSA 2008-19/CVE-2008-1241: XUL popup spoofing variant cross-tab popups - MFSA 2008-18/CVE-2008-1195 and CVE-2008-1240: Java socket connection to any local port...

Mozilla Firefox JavaScript垃圾收集器内存破坏漏洞

BUGTRAQ ID: 28818 CVECAN ID: CVE-2008-1380 Firefox是一款开放源码的WEB浏览器。 Firefox所使用的JavaScript引擎在执行JavaScript垃圾收集期间可能会触发内存破坏，如果用户受骗访问了带有恶意JavaScript的网页的话就可以触发这个漏洞，但该漏洞无法被可靠的利用，只能导致拒绝服务类的稳定性问题。由于代码共享的关系这个漏洞也影响SeaMonkey。 Mozilla Firefox = 2.0.0.13 Mozilla Thunderbird = 2.0.0.13 Mozilla SeaMonkey = 1.1.9...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:0223-02 Updated seamonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...

RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2008:0223)

Updated SeaMonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source We...

Code injection

The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service garbage collector crash and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for...

CVE-2008-1380

The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service garbage collector crash and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for...

CVE-2008-1380

The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service garbage collector crash and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for...

CVE-2008-1380

The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service garbage collector crash and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for...

CVE-2008-1380

CVE-2008-1380 is described in the provided materials as a vulnerability in the processing of malformed JavaScript content that could crash the SeaMonkey web browser and potentially allow arbitrary code execution when JavaScript is enabled. Red Hat Oracle Linux advisories (e.g., RHSA-2008-0223, EL...

seamonkey security update

CentOS Errata and Security Advisory CESA-2008:0223 Updated seamonkey packages that fix a security issues are now available for Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3, and Red Hat Enterprise Linux 4. This update has been rated as having critical security impact by the Red Hat...

Firefox JavaScript garbage collection crash

The JavaScript engine in Mozilla Firefox before 2.0.0.14, Thunderbird before 2.0.0.14, and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service garbage collector crash and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for...