SeaMonkey < 2.0 Multiple Vulnerabilities
high Nessus Plugin ID 42307
Synopsis
A web browser on the remote host is affected by multiple vulnerabilities.Description
The installed version of SeaMonkey is earlier than 2.0. Such versions are potentially affected by the following security issues :- Provided the browser is configured to use Proxy Auto-configuration it may be possible for an attacker to crash the browser or execute arbitrary code.
(MFSA 2009-55)
- Mozilla's GIF image parser is affected by a heap-based buffer overflow. (MFSA 2009-56)
- If a file contains right-to-left override character (RTL) in the filename it may be possible for an attacker to obfuscate the filename and extension of the file being downloaded. (MFSA 2009-62)
Solution
Upgrade to SeaMonkey 2.0 or later.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2009-55/
https://www.mozilla.org/en-US/security/advisories/mfsa2009-56/
https://www.mozilla.org/en-US/security/advisories/mfsa2009-62/
Plugin Details
Severity: High
ID: 42307
File Name: seamonkey_20.nasl
Version: 1.14
Type: local
Agent: windows
Family: Windows
Published: 10/29/2009
Updated: 7/27/2018
Supported Sensors: Nessus Agent
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 7.3
Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Temporal Vector: E:POC/RL:OF/RC:C
Vulnerability Information
CPE: cpe:/a:mozilla:seamonkey
Required KB Items: SeaMonkey/Version
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 10/27/2009
Vulnerability Publication Date: 10/27/2009