Fedora Update for seamonkey FEDORA-2013-22456

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

openSUSE: Security Advisory for Mozilla (openSUSE-SU-2013:1871-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Debian Announces End of Security Support for IceApe

Developers at Debian today informed users still clinging to Iceape – an Internet suite modeled on old Mozilla code – that they are cutting the cord and will stop supplying the software with security updates. Iceape is more or less a Debian-branded hybrid of several community-driven entities,...

[SECURITY] [DSA 2819-1] End-of-life announcement for iceape

------------------------------------------------------------------------- Debian Security Advisory DSA-2819-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff December 16, 2013 http://www.debian.org/security/faq -...

SeaMonkey < 2.23 Multiple Vulnerabilities

Binary data 8072.prm...

[SECURITY] Fedora 20 Update: seamonkey-2.22.1-1.fc20

SeaMonkey is an all-in-one Internet application suite. It includes a browser, mail/news client, IRC client, JavaScript debugger, and a tool to inspect the DOM for web pages. It is derived from the application formerly known as Mozilla Application Suite...

Fedora 20 : seamonkey-2.22.1-1.fc20 (2013-22377)

Update to 2.22.1 Fixes various security issues, see http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html for more info. Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatical...

Mozilla updates 2013/12 (important)

This patch contains mozilla-nss 3.15.3.1 which includes a certstore update 1.95 to explicitely revoke AC DG Tresor SSL intermediate CA which was misused. Firefox 24.2esr Thunderbird 24.2 Seamonkey 2.23 These updates fix several security issues: CVE-2013-5611 Mozilla: Application Installation...

Mozilla Firefox/ Thunderbird/SeaMonkey安全限制绕过漏洞

BUGTRAQ ID: 64213 CVECAN ID: CVE-2013-6673 Mozilla Firefox/SeaMonkey/Thunderbird是Mozilla所发布的WEB浏览器/新闻组客户端/邮件客户端。 Firefox 26、Firefox ESR 24.2、Thunderbird 24.2、Seamonkey 2.23之前版本在证书管理器的实现中存在安全漏洞，成功利用后可导致绕过身份验证机制。 0 Mozilla Firefox 26 Mozilla Thunderbird 24.2 Mozilla SeaMonkey 2.23 Mozilla Firefox E...

Mozilla Firefox/SeaMonkey跨域XSS攻击漏洞

CVECAN ID: CVE-2013-5612 Mozilla Firefox/SeaMonkey是Mozilla所发布的WEB浏览器/新闻组客户端。 Mozilla Firefox/SeaMonkey处理相关字符集编码信息继承存在一个安全漏洞，允许攻击者利用漏洞提供缺少字符集参数的Content-Type HTTP头字段，绕过跨站脚本过滤注入任意WEB脚本或HTML。 0 Mozilla Firefox 26 Mozilla SeaMonkey 2.23 厂商补丁： Mozilla ------- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载：...

Mozilla Firefox/Thunderbird/SeaMonkey代码注入漏洞

BUGTRAQ ID: 64212 CVECAN ID: CVE-2013-6671 Mozilla Firefox/SeaMonkey/Thunderbird是Mozilla所发布的WEB浏览器/新闻组客户端/邮件客户端。 Firefox 26、Firefox ESR 24.2、Thunderbird 24.2、Seamonkey 2.23之前版本在libxul.so!nsGfxScrollFrameInner::IsLTR 的实现上存在段错误，成功利用后可使攻击者造成受影响应用崩溃。 0 Mozilla Firefox 26 Mozilla Thunderbird 24.2...

Mozilla Firefox/Thunderbird/SeaMonkey释放后重利用漏洞

BUGTRAQ ID: 64211 CVECAN ID: CVE-2013-5618 Mozilla Firefox/SeaMonkey/Thunderbird是Mozilla所发布的WEB浏览器/新闻组客户端/邮件客户端。 Firefox 26、Firefox ESR 24.2、Thunderbird 24.2、Seamonkey 2.23之前版本在编辑器表格编辑用户接口的实现上存在释放后重利用漏洞，成功利用后可使攻击者造成受影响应用崩溃。 0 Mozilla Firefox 26 Mozilla Thunderbird 24.2 Mozilla SeaMonkey 2.23...

Mozilla: Character encoding cross-origin XSS attack (MFSA 2013-106)

Cross-site scripting XSS vulnerability in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 makes it easier for remote attackers to inject arbitrary web script or HTML by leveraging a Same Origin Policy violation triggered by lack of a charset parameter in a Content-Type HTTP header...

Mozilla: Miscellaneous memory safety hazards (rv:24.2) (MFSA 2013-104)

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allow remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary cod...

Mozilla: Out-of-bounds read in image rendering (MFSA 2013-22)

The RasterImage::DrawFrameTo function in Mozilla Firefox before 19.0, Thunderbird before 17.0.3, and SeaMonkey before 2.16 allows remote attackers to obtain sensitive information from process memory or cause a denial of service out-of-bounds read and application crash via a crafted GIF image...

Mozilla: Use-after-free during Table Editing (MFSA 2013-109)

Use-after-free vulnerability in the nsNodeUtils::LastRelease function in the table-editing user interface in the editor component in Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 allows remote attackers to execute arbitrary code by...

Mozilla: Sandbox restrictions not applied to nested object elements (MFSA 2013-107)

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 do not properly consider the sandbox attribute of an IFRAME element during processing of a contained OBJECT element, which allows remote attackers to bypass intended sandbox restrictions via a crafted web site...

CVE-2013-5619

Multiple integer overflows in the binary-search implementation in SpiderMonkey in Mozilla Firefox before 26.0 and SeaMonkey before 2.23 might allow remote attackers to cause a denial of service out-of-bounds array access or possibly have unspecified other impact via crafted JavaScript code...

CVE-2013-6672

Mozilla Firefox before 26.0 and SeaMonkey before 2.23 on Linux allow user-assisted remote attackers to read clipboard data by leveraging certain middle-click paste operations...

CVE-2013-6673

Mozilla Firefox before 26.0, Firefox ESR 24.x before 24.2, Thunderbird before 24.2, and SeaMonkey before 2.23 do not recognize a user's removal of trust from an EV X.509 certificate, which makes it easier for man-in-the-middle attackers to spoof SSL servers in opportunistic circumstances via a...