Mozilla: Miscellaneous memory safety hazards

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4. The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, ar...

Mozilla: Miscellaneous memory safety hazards

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.20, Thunderbird 2.x and 3.x before 3.1.12, SeaMonkey 1.x and 2.x, and possibly other products allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute...

seamonkey security update

1.0.9-72.0.1.el4 - Add mozilla-oracle-default-prefs.js and mozilla-oracle-default-bookmarks.html and remove corresponding RedHat ones 1.0.9-72.el4 - Added fixes from 1.9.2.20...

PT-2011-2074

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.20 Mozilla Firefox versions 4.x through 5 Thunderbird versions 3.x prior to 3.1.12 Thunderbird versions prior to 6 SeaMonkey versions 2.x prior to 2.3 Description The issue arises from the improper handlin...

PT-2011-4229

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 SeaMonkey versions 2.x before 2.3 Description The issue is related to the implementation of Content Security Policy CSP violation reports, which does not properly remove proxy-authorization credentials fr...

PT-2011-4224

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 Thunderbird versions prior to 6 SeaMonkey versions 2.x prior to 2.3 Description The issue affects the browser engine, allowing remote attackers to cause a denial of service, which results in memory...

PT-2011-4232

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 SeaMonkey versions 2.x before 2.3 Description The issue concerns the implementation of digital signatures for JAR files, which does not prevent calls from unsigned JavaScript code to signed code. This...

PT-2011-4226

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 Thunderbird versions prior to 6 SeaMonkey versions 2.x prior to 2.3 Description A heap-based buffer overflow issue exists in the Almost Native Graphics Layer Engine ANGLE used in the WebGL implementation...

PT-2011-4227

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 Thunderbird versions prior to 6 SeaMonkey versions 2.x prior to 2.3 Description A buffer overflow issue exists in the WebGL shader implementation, allowing remote attackers to execute arbitrary code or...

PT-2011-4228

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 SeaMonkey versions 2.x before 2.3 Thunderbird versions prior to 6 Description The issue is related to the improper implementation of WebGL in the browser engine, which can be exploited by remote attackers...

PT-2011-4230

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 SeaMonkey versions 2.x before 2.3 Thunderbird versions before 6 Description The issue is related to the improper implementation of JavaScript in the browser engine, which can be exploited by remote...

PT-2011-4220

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.20 SeaMonkey versions 2.x Thunderbird versions 3.x prior to 3.1.12 Description The issue is related to the event-management implementation, which does not properly select the context for script execution...

PT-2011-4231

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 SeaMonkey versions 2.x before 2.3 Thunderbird versions before 6 Description The issue allows remote attackers to cause a denial of service, resulting in memory corruption and application crash, or possibl...

PT-2011-4225

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions 4.x through 5 Thunderbird versions prior to 6 SeaMonkey versions 2.x prior to 2.3 Description The issue allows remote attackers to bypass the Same Origin Policy and obtain sensitive image data from a different domain b...

PT-2011-4222

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.20 Thunderbird versions prior to 3.1.12 SeaMonkey versions 1.x and 2.x Description The issue allows remote attackers to bypass the Same Origin Policy and read data from a different domain via a crafted web...

PT-2011-4221

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.20 Thunderbird versions prior to 3.1.12 SeaMonkey versions 1.x and 2.x Description The issue is related to multiple unspecified vulnerabilities in the browser engine, which can be exploited by remote...

PT-2011-3816

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.20 Thunderbird versions prior to 3.1.12 SeaMonkey versions 2.x Description The issue is related to the appendChild function not properly handling DOM objects, allowing remote attackers to execute arbitrary...

PT-2011-4223

Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 3.6.20 SeaMonkey versions 2.x Thunderbird versions prior to 3.1.12 Description The issue arises from improper handling of dropping a tab element, allowing remote attackers to execute arbitrary JavaScript code...

Security issues addressed in SeaMonkey 2.3 — Mozilla

Miscellaneous memory safety hazards rv:4.0 Impact: Critical Description: Mozilla identified and fixed several memory safety bugs in the browser engine used in SeaMonkey 2.2 and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and w...