Lucene search
RedHatRHSA-2009:0398HistoryMar 27, 2009 - 12:00 a.m.
(RHSA-2009:0398) Critical: seamonkey security update
2009-03-2700:00:00
access.redhat.com
19
EPSS
0.96
Percentile
99.5%
SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.
A memory corruption flaw was discovered in the way SeaMonkey handles XML
files containing an XSLT transform. A remote attacker could use this flaw
to crash SeaMonkey or, potentially, execute arbitrary code as the user
running SeaMonkey. (CVE-2009-1169)
A flaw was discovered in the way SeaMonkey handles certain XUL garbage
collection events. A remote attacker could use this flaw to crash SeaMonkey
or, potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2009-1044)
All SeaMonkey users should upgrade to these updated packages, which correct
these issues. After installing the update, SeaMonkey must be restarted for
the changes to take effect.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| RedHat | 3 | s390x | seamonkey-mail | < 1.0.9-0.36.el3 | seamonkey-mail-1.0.9-0.36.el3.s390x.rpm |
| RedHat | 3 | i386 | seamonkey-devel | < 1.0.9-0.36.el3 | seamonkey-devel-1.0.9-0.36.el3.i386.rpm |
| RedHat | 3 | s390 | seamonkey-nspr | < 1.0.9-0.36.el3 | seamonkey-nspr-1.0.9-0.36.el3.s390.rpm |
| RedHat | 3 | i386 | seamonkey-nss | < 1.0.9-0.36.el3 | seamonkey-nss-1.0.9-0.36.el3.i386.rpm |
| RedHat | 4 | i386 | seamonkey-dom-inspector | < 1.0.9-40.el4 | seamonkey-dom-inspector-1.0.9-40.el4.i386.rpm |
| RedHat | 2 | ia64 | seamonkey-nspr | < 1.0.9-0.32.el2 | seamonkey-nspr-1.0.9-0.32.el2.ia64.rpm |
| RedHat | 2 | i386 | seamonkey | < 1.0.9-0.32.el2 | seamonkey-1.0.9-0.32.el2.i386.rpm |
| RedHat | 3 | s390 | seamonkey-nss-devel | < 1.0.9-0.36.el3 | seamonkey-nss-devel-1.0.9-0.36.el3.s390.rpm |
| RedHat | 2 | i386 | seamonkey-mail | < 1.0.9-0.32.el2 | seamonkey-mail-1.0.9-0.32.el2.i386.rpm |
| RedHat | 3 | s390 | seamonkey-nspr-devel | < 1.0.9-0.36.el3 | seamonkey-nspr-devel-1.0.9-0.36.el3.s390.rpm |
Related
openvas
openvas
CentOS Update for seamonkey CESA-2009:0398-01 centos2 i386
2011-08-09 00:00:00
Fedora Core 9 FEDORA-2009-3099 (firefox)
2009-04-06 00:00:00
CentOS Security Advisory CESA-2009:0397 (firefox)
2009-04-15 00:00:00
fedora
fedora
[SECURITY] Fedora 10 Update: ruby-gnome2-0.18.1-5.fc10
2009-03-28 17:23:55
[SECURITY] Fedora 10 Update: xulrunner-1.9.0.8-1.fc10
2009-03-28 17:23:55
[SECURITY] Fedora 9 Update: mugshot-1.2.2-7.fc9
2009-03-28 01:24:44
debian
debian
[SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities
2009-03-29 18:03:00
[SECURITY] [DSA 1756-1] New xulrunner packages fix multiple vulnerabilities
2009-03-29 18:03:00
centos
centos
firefox, xulrunner security update
2009-04-09 17:48:16
seamonkey security update
2009-03-28 14:45:12
seamonkey security update
2009-03-30 22:53:22
oraclelinux
oraclelinux
firefox security update
2009-03-29 00:00:00
seamonkey security update
2009-03-29 00:00:00
nessus
nessus
Oracle Linux 4 / 5 : firefox (ELSA-2009-0397)
2013-07-12 00:00:00
Mandriva Linux Security Advisory : firefox (MDVSA-2009:084)
2009-04-23 00:00:00
CentOS 4 / 5 : firefox (CESA-2009:0397)
2010-01-06 00:00:00
redhat
redhat
(RHSA-2009:0397) Critical: firefox security update
2009-03-27 00:00:00
ubuntu
ubuntu
Firefox and Xulrunner vulnerabilities
2009-03-28 00:00:00
suse
suse
remote code execution in MozillaFirefox
2009-04-20 12:00:48
remote code execution in MozillaFirefox
2009-04-20 12:01:40
osv
osv
xulrunner - multiple vulnerabilities
2009-03-29 00:00:00
cve
cve
CVE-2009-1044
2009-03-23 14:19:12
CVE-2009-1169
2009-03-27 00:30:00
checkpoint_advisories
checkpoint_advisories
Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)
2014-03-31 00:00:00
Mozilla Firefox XUL Tree Element Code Execution - Ver2 (CVE-2009-1044)
2014-03-31 00:00:00
Mozilla Firefox XSL Transformation Memory Corruption - Ver2 (CVE-2009-1169)
2015-03-26 00:00:00
prion
prion
Design/Logic Flaw
2009-03-23 14:19:00
Code injection
2009-03-27 00:30:00
nvd
nvd
CVE-2009-1044
2009-03-23 14:19:12
CVE-2009-1169
2009-03-27 00:30:00
securityvulns
securityvulns
ZDI-09-015: Mozilla Firefox XUL _moveToEdgeShift() Memory Corruption Vulnerability
2009-04-01 00:00:00
Mozilla Foundation Security Advisory 2009-12
2009-04-01 00:00:00
Mozilla Foundation Security Advisory 2009-13
2009-04-01 00:00:00
ubuntucve
ubuntucve
CVE-2009-1044
2009-03-27 00:00:00
CVE-2009-1169
2009-03-27 00:00:00
seebug
seebug
Mozilla Firefox '_moveToEdgeShift' 远程代码执行漏洞
2009-04-04 00:00:00
Firefox _moveToEdgeShift方式远程代码执行漏洞
2009-04-01 00:00:00
Firefox XSL解析root XML标签内存破坏漏洞
2009-04-01 00:00:00
mozilla
mozilla
Arbitrary code execution via XUL tree element — Mozilla
2009-03-27 00:00:00
XSL Transformation vulnerability — Mozilla
2009-03-27 00:00:00
veracode
veracode
Arbitrary Code Execution
2020-04-10 00:31:20
Arbitrary Code Execution
2020-04-10 00:31:20
zdi
zdi
Mozilla Firefox XUL _moveToEdgeShift() Memory Corruption Vulnerability
2009-03-30 00:00:00
cvelist
cvelist
CVE-2009-1169
2009-03-27 00:00:00
CVE-2009-1044
2009-03-23 14:00:00
exploitdb
exploitdb
Mozilla Firefox XSL - Parsing Remote Memory Corruption (PoC) (1)
2009-03-25 00:00:00
gentoo
gentoo
Mozilla Products: Multiple vulnerabilities
2013-01-08 00:00:00