firefox: does not properly prevent the literal rendering of homoglyph characters in IDN domain names (spoof URLs and conduct phishing attacks)

The Internationalized Domain Names IDN blacklist in Mozilla Firefox 3.0.6 and other versions before 3.0.9; Thunderbird before 2.0.0.21; and SeaMonkey before 1.1.15 does not include box-drawing characters, which allows remote attackers to spoof URLs and conduct phishing attacks, as demonstrated by...

Firefox 2 and 3 JavaScript engine crash

The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service application crash and possibly trigger memory corruption via vectors involving JSOPDEFVAR and properties that lack the JSPROPPERMANE...

Firefox 2 and 3 Layout engine crash

The browser engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service application crash and possibly trigger memory corruption via vectors related to nsSVGElement::BindToTree...

Firefox POST data sent to wrong site when saving web page with embedded frame

Mozilla Firefox before 3.0.9 and SeaMonkey before 1.1.17 allow user-assisted remote attackers to obtain sensitive information via a web page with an embedded frame, which causes POST data from an outer page to be sent to the inner frame's URL during a SAVEMODEFILEONLY save of the inner frame...

Critical: Red Hat Security Advisory: seamonkey security update

Updated seamonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4. This update has been rated as having critical security impact by the Red Hat Security Response Team. SeaMonkey is an open source Web browser, email and newsgroup client, IRC...

javascript: URIs

Mozilla Firefox before 3.0.9 and SeaMonkey 1.1.17 do not block javascript: URIs in Refresh headers in HTTP responses, which allows remote attackers to conduct cross-site scripting XSS attacks via vectors related to 1 injecting a Refresh header or 2 specifying the content of a Refresh header. NOTE...

seamonkey security update

1.0.9-41.0.1.el4 - Added mozilla-oracle-default-prefs.js, and mozilla-oracle-default-bookmarks.html and removed corresponding Redhat ones 1.0.9-41.el4 - Added fixes from 1.9.0.9...

SeaMonkey < 1.1.16 XSL Transformation Overflow DoS

Binary data 4988.prm...

Slackware 11.0 / 12.0 / 12.1 / 12.2 / current : seamonkey (SSA:2009-103-01)

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Slackware Security Advisory 2009-103-01. The text itself ...

seamonkey

New seamonkey packages are available for Slackware 11.0, 12.0, 12.1, 12.2, and -current to fix security issues. More details about the issues may be found on the Mozilla web site: http://www.mozilla.org/security/known-vulnerabilities/seamonkey11.html Here are the details from the Slackware 12.2...

SeaMonkey < 1.1.16 Multiple Vulnerabilities

The installed version of SeaMonkey is earlier than 1.1.16. Such versions are potentially affected by the following security issues : - An XSL transformation vulnerability can be leveraged with a specially crafted stylesheet to crash the browser or to execute arbitrary code. MFSA 2009-12 - Multipl...

Mozilla Seamonkey < 1.1.16 XSL Parsing Vulnerability - Windows

Mozilla Seamonkey is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Seamonkey XSL Parsing Vulnerability (Windows)

The host is installed with Mozilla Seamnkey and is prone to XSL File Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbseamonkeyxslparsingvulnwin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey XSL Parsing Vulnerability Windows Authors: Sharath S Copyright: Copyright c 2009...

Mozilla Seamonkey < 1.1.16 XSL Parsing Vulnerability - Linux

Mozilla Seamonkey is prone to an XSL file parsing vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Mozilla Seamonkey XSL Parsing Vulnerability (Linux)

The host is installed with Mozilla Seamnkey and is prone to XSL File Parsing Vulnerability. OpenVAS Vulnerability Test $Id: gbseamonkeyxslparsingvulnlin.nasl 4869 2016-12-29 11:01:45Z teissa $ Mozilla Seamonkey XSL Parsing Vulnerability Linux Authors: Sharath S Copyright: Copyright c 2009 Greenbo...

CentOS Security Advisory CESA-2009:0398-01 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:0398-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR...

Fedora Core 9 FEDORA-2009-3101 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-3101. OpenVAS Vulnerability Test $Id: fcore20093101.nasl 6624 2017-07-10 06:11:55Z cfischer $ Description: Auto-generated from advisory FEDORA-2009-3101 seamonkey Authors: Thomas Reinke Copyright: Copyright c 200...

Fedora Core 10 FEDORA-2009-3161 (seamonkey)

The remote host is missing an update to seamonkey announced via advisory FEDORA-2009-3161. Note: This VT has been deprecated and is therefore no longer functional. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by...

CentOS Security Advisory CESA-2009:0398 (seamonkey)

The remote host is missing updates to seamonkey announced in advisory CESA-2009:0398. CESA-2009:0398 63754 4 $Id: ovcesa20090398.nasl 6650 2017-07-10 11:43:12Z cfischer $ Description: Auto-generated from advisory CESA-2009:0398 seamonkey Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft...

RedHat Security Advisory RHSA-2009:0398

The remote host is missing updates announced in advisory RHSA-2009:0398. SeaMonkey is an open source Web browser, email and newsgroup client, IRC chat client, and HTML editor. A memory corruption flaw was discovered in the way SeaMonkey handles XML files containing an XSLT transform. A remote...