SeaMonkey is an open source Web browser, email and newsgroup client, IRC
chat client, and HTML editor.
Moxie Marlinspike reported a heap overflow flaw in a regular expression
parser in the NSS library (provided by SeaMonkey) used to match common
names in certificates. A malicious website could present a
carefully-crafted certificate in such a way as to trigger the heap
overflow, leading to a crash or, possibly, arbitrary code execution with
the permissions of the user running SeaMonkey. (CVE-2009-2404)
Note: in order to exploit this issue without further user interaction, the
carefully-crafted certificate would need to be signed by a Certificate
Authority trusted by SeaMonkey, otherwise SeaMonkey presents the victim
with a warning that the certificate is untrusted. Only if the user then
accepts the certificate will the overflow take place.
All SeaMonkey users should upgrade to these updated packages, which contain
a backported patch to correct this issue. After installing the updated
packages, SeaMonkey must be restarted for the update to take effect.
OS | Version | Architecture | Package | Version | Filename |
---|---|---|---|---|---|
RedHat | 3 | ppc | seamonkey-nss-devel | <Β 1.0.9-0.41.el3 | seamonkey-nss-devel-1.0.9-0.41.el3.ppc.rpm |
RedHat | 3 | ppc | seamonkey-mail | <Β 1.0.9-0.41.el3 | seamonkey-mail-1.0.9-0.41.el3.ppc.rpm |
RedHat | 3 | ppc | seamonkey-nspr-devel | <Β 1.0.9-0.41.el3 | seamonkey-nspr-devel-1.0.9-0.41.el3.ppc.rpm |
RedHat | 3 | ppc | seamonkey-dom-inspector | <Β 1.0.9-0.41.el3 | seamonkey-dom-inspector-1.0.9-0.41.el3.ppc.rpm |
RedHat | 3 | ppc | seamonkey-chat | <Β 1.0.9-0.41.el3 | seamonkey-chat-1.0.9-0.41.el3.ppc.rpm |
RedHat | 3 | ppc | seamonkey-nss | <Β 1.0.9-0.41.el3 | seamonkey-nss-1.0.9-0.41.el3.ppc.rpm |
RedHat | 3 | ppc | seamonkey-devel | <Β 1.0.9-0.41.el3 | seamonkey-devel-1.0.9-0.41.el3.ppc.rpm |
RedHat | 3 | ppc | seamonkey | <Β 1.0.9-0.41.el3 | seamonkey-1.0.9-0.41.el3.ppc.rpm |
RedHat | 3 | ppc | seamonkey-js-debugger | <Β 1.0.9-0.41.el3 | seamonkey-js-debugger-1.0.9-0.41.el3.ppc.rpm |
RedHat | 3 | ppc | seamonkey-nspr | <Β 1.0.9-0.41.el3 | seamonkey-nspr-1.0.9-0.41.el3.ppc.rpm |