Mozilla Seamonkey Multiple Vulnerability Jun-09 (Linux)

The host is installed with Seamonkey, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbseamonkeymultvulnjun09lin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey Multiple Vulnerabilities Jun-09 Linux Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbone...

Mozilla Seamonkey Multiple Vulnerability Jun-09 (Windows)

The host is installed with Seamonkey, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbseamonkeymultvulnjun09win.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey Multiple Vulnerabilities Jun-09 Windows Authors: Antu Sanadi Copyright: Copyright c 2009 Greenbon...

RedHat Security Advisory RHSA-2009:1096

The remote host is missing updates announced in advisory RHSA-2009:1096. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

CentOS Security Advisory CESA-2009:1096 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:1096. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

RedHat Security Advisory RHSA-2009:1096

The remote host is missing updates announced in advisory RHSA-2009:1096. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause...

CentOS Security Advisory CESA-2009:1096 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:1096. CESA-2009:1096 64209 4 $Id: ovcesa20091096.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:1096 seamonkey Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

CentOS 3 : seamonkey (CESA-2009:1096)

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 3 and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat...

FreeBSD Ports: firefox

The remote host is missing an update to the system as announced in the referenced advisory. VID da185955-5738-11de-b857-000f20797ede OpenVAS Vulnerability Test $ Description: Auto generated from VID da185955-5738-11de-b857-000f20797ede Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

Mozilla Foundation Security Advisory 2009-24

Mozilla Foundation Security Advisory 2009-24 Title: Crashes with evidence of memory corruption rv:1.9.0.11 Impact: Critical Announced: June 11, 2009 Reporter: Mozilla developers and community Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Thunderbird 2.0.0.22 SeaMonkey 1.1.17...

Mozilla Foundation Security Advisory 2009-31

Mozilla Foundation Security Advisory 2009-31 Title: XUL scripts bypass content-policy checks Impact: Low Announced: June 11, 2009 Reporter: Wladimir Palant Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Description Mozilla add-on developer and community member Wladimir Palant...

Mozilla Foundation Security Advisory 2009-32

Mozilla Foundation Security Advisory 2009-32 Title: JavaScript chrome privilege escalation Impact: Critical Announced: June 11, 2009 Reporter: mozbugra4 Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.11 SeaMonkey 1.1.17 Thunderbird 2.0.0.22 Description Mozilla security researcher mozbugra4...

Mozilla Foundation Security Advisory 2009-29

Mozilla Foundation Security Advisory 2009-29 Title: Arbitrary code execution using event listeners attached to an element whose owner document is null Impact: Critical Announced: June 11, 2009 Reporter: mozbugra4 Products: Firefox, Thunderbird, SeaMonkey Fixed in: Firefox 3.0.11 Thunderbird...

Mozilla Foundation Security Advisory 2009-25

Mozilla Foundation Security Advisory 2009-25 Title: URL spoofing with invalid unicode characters Impact: Low Announced: June 11, 2009 Reporter: Pavel Cvrcek Products: Firefox, SeaMonkey Fixed in: Firefox 3.0.11 SeaMonkey 1.1.17 Description Mozilla add-on developer Pavel Cvrcek reported that certa...

Design/Logic Flaw

The garbage-collection implementation in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 sets an element's owner document to null in unspecified circumstances, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafte...

Hardcoded credentials

Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 use the HTTP Host header to determine the context of a document provided in a non-200 CONNECT response from a proxy server, which allows man-in-the-middle attackers to execute arbitrary web script by modifying...

Memory corruption

The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1 jsLeaveSharpObject, 2...

CVE-2009-1833

The JavaScript engine in Mozilla Firefox before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1 jsLeaveSharpObject, 2...

Design/Logic Flaw

Visual truncation vulnerability in netwerk/dns/src/nsIDNService.cpp in Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 allows remote attackers to spoof the location bar via an IDN with invalid Unicode characters that are displayed as whitespace, as demonstrated by the \u115A through...

Design/Logic Flaw

Mozilla Firefox before 3.0.11 and SeaMonkey before 1.1.17 associate local documents with external domain names located after the file:// substring in a URL, which allows user-assisted remote attackers to read arbitrary cookies via a crafted HTML document, as demonstrated by a URL with...

CVE-2009-1392

The browser engine in Mozilla Firefox 3 before 3.0.11, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.17 allows remote attackers to cause a denial of service memory corruption and application crash or possibly execute arbitrary code via vectors related to 1...