The Mozilla XULRunner 1.8.1 engine was updated to security update version 1.8.1.12.

This includes fixes for the following security issues :

  - MFSA 2008-10/CVE-2008-0593 URL token stealing via     stylesheet redirect

  - MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved     plain text files

  - MFSA 2008-06/CVE-2008-0419 Web browsing history and     forward navigation stealing

  - MFSA 2008-05/CVE-2008-0418 Directory traversal via     chrome: URI

  - MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS,     Remote Code Execution

  - MFSA 2008-02/CVE-2008-0414 Multiple file input focus     stealing vulnerabilities

  - MFSA 2008-01/CVE-2008-0412 Crashes with evidence of     memory corruption (rv:1.8.1.12)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2008-0103 advisory.

    [1.5.0.12-9.0.1]
     - Added Oracle specific links into default bookmarks

     [1.5.0.12-9]
     - Update to latest snapshot of Mozilla 1.8.0 branch
     - Added a patch with backported fixes from 1.8.1.12

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of SeaMonkey is affected by various security issues :

  - Several stability bugs leading to crashes which, in     some cases, show traces of memory corruption

  - Several file input focus stealing vulnerabilities     that could result in uploading of arbitrary files     provided their full path and file names are known.

  - Several issues that allow scripts from page content     to escape from their sandboxed context and/or run     with chrome privileges, resulting in privilege     escalation, XSS, and/or remote code execution.

  - A directory traversal vulnerability via the     'chrome:' URI.

  - A vulnerability involving 'designMode' frames that     may result in web browsing history and forward     navigation stealing.

  - An information disclosure issue in the BMP     decoder.

  - Mis-handling of locally-saved plaintext files.

  - Possible disclosure of sensitive URL parameters,     such as session tokens, via the .href property of     stylesheet DOM nodes reflecting the final URI of     the stylesheet after following any 302 redirects.

  - A heap-based buffer overflow that can be triggered     when viewing an email with an external MIME     body.

  - Multiple cross-site scripting vulnerabilities     related to character encoding.

Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 2.1, 3, and 4.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

SeaMonkey is an open source Web browser, advanced email and newsgroup client, IRC chat client, and HTML editor.

Several flaws were found in the way SeaMonkey processed certain malformed web content. A webpage containing malicious content could cause SeaMonkey to crash, or potentially execute arbitrary code as the user running SeaMonkey. (CVE-2008-0412, CVE-2008-0413, CVE-2008-0415, CVE-2008-0419)

Several flaws were found in the way SeaMonkey displayed malformed web content. A webpage containing specially crafted content could trick a user into surrendering sensitive information. (CVE-2008-0591, CVE-2008-0593)

A flaw was found in the way SeaMonkey stored password data. If a user saves login information for a malicious website, it could be possible to corrupt the password database, preventing the user from properly accessing saved password data. (CVE-2008-0417)

A flaw was found in the way SeaMonkey handles certain chrome URLs. If a user has certain extensions installed, it could allow a malicious website to steal sensitive session data. Note: this flaw does not affect a default installation of SeaMonkey. (CVE-2008-0418)

A flaw was found in the way SeaMonkey saves certain text files. If a website offers a file of type 'plain/text', rather than 'text/plain', SeaMonkey will not show future 'text/plain' content to the user in the browser, forcing them to save those files locally to view the content.
(CVE-2008-0592)

Users of SeaMonkey are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

Mozilla Thunderbird is a standalone mail and newsgroup client. Several flaws were found in the way Thunderbird processed certain malformed HTML mail content. A HTML mail message containing malicious content could cause Thunderbird to crash, or potentially execute arbitrary code as the user running Thunderbird. (CVE-2008-0412, CVE-2008-0413, CVE-2008-0415, CVE-2008-0419) Several flaws were found in the way Thunderbird displayed malformed HTML mail content. A HTML mail message containing specially crafted content could trick a user into surrendering sensitive information. (CVE-2008-0591, CVE-2008-0593) A flaw was found in the way Thunderbird handles certain chrome URLs. If a user has certain extensions installed, it could allow a malicious HTML mail message to steal sensitive session data. Note: this flaw does not affect a default installation of Thunderbird. (CVE-2008-0418) Note: JavaScript support is disabled by default in Thunderbird; the above issues are not exploitable unless JavaScript is enabled. A flaw was found in the way Thunderbird saves certain text files. If a remote site offers a file of type 'plain/text', rather than 'text/plain', Thunderbird will not show future 'text/plain' content to the user, forcing them to save those files locally to view the content.
(CVE-2008-0592) Users of thunderbird are advised to upgrade to these updated packages, which contain backported patches to resolve these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The installed version of Firefox is affected by various security issues :

 - Several stability bugs leading to crashes that, in some cases, show traces of memory corruption
 - Several file input focus stealing vulnerabilities that could result in uploading of arbitrary files provided their full path and file names are known.
 - Several issues that allow scripts from page content to escape from their sandboxed context and/or run with chrome privileges, resulting in privilege escalation, XSS and/or remote code execution.
 - An issue that could allow a malicious site to inject newlines into the application's password store when a user saves his password, resulting in corruption of saved passwords for other sites.
 - A directory traversal vulnerability via the 'chrome:' URI.
 - A vulnerability involving 'designMode' frames that may result in web browsing history and forward navigation stealing.
 - A file action dialog tampering vulnerability involving timer-enabled security dialogs.
 - Mis-handling of locally-saved plain text files.
 - Possible disclosure of sensitive URL parameters, such as session tokens, via the .href property of stylesheet DOM nodes reflecting the final URI of the stylesheet after following any 302 redirects.
 - A failure to display a web forgery warning dialog in cases where the entire contents of a page are enclosed in a '<div>' tag with absolute positioning.

The installed version of SeaMonkey is affected by various security issues :

 - Several stability bugs leading to crashes that, in some cases, show traces of memory corruption

 - Several file input focus stealing vulnerabilities that could result in uploading of arbitrary files provided their full path and file names are known.

 - Several issues that allow scripts from page content to escape from their sandboxed context and/or run with chrome privileges, resulting in privilege escalation, XSS and/or remote code execution.

 - A directory traversal vulnerability via the 'chrome:' URI.

 - A vulnerability involving 'designMode' frames that may result in web browsing history and forward navigation stealing.

 - Mis-handling of locally-saved plain text files.

 - Possible disclosure of sensitive URL parameters, such as session tokens, via the .href property of stylesheet DOM nodes reflecting the final URI of the stylesheet after following any 302 redirects.

The installed version of Thunderbird is missing a critical patch. The vendor has released a patch that addresses a number of remote vulnerabilities. 

ID	Name	Product	Family	Published	Updated	Severity
31622	openSUSE 10 Security Update : epiphany (epiphany-5102)	Nessus	SuSE Local Security Checks	3/19/2008	1/14/2021	high
67647	Oracle Linux 5 : Critical: / firefox (ELSA-2008-0103)	Nessus	Oracle Linux Local Security Checks	7/12/2013	4/29/2025	medium
30210	SeaMonkey < 1.1.8 Multiple Vulnerabilities	Nessus	Windows	2/8/2008	7/27/2018	high
30246	RHEL 2.1 / 3 / 4 : seamonkey (RHSA-2008:0104)	Nessus	Red Hat Local Security Checks	2/11/2008	1/14/2021	high
31314	Fedora 8 : thunderbird-2.0.0.12-1.fc8 (2008-2060)	Nessus	Fedora Local Security Checks	2/29/2008	1/11/2021	high
31318	Fedora 7 : thunderbird-2.0.0.12-1.fc7 (2008-2118)	Nessus	Fedora Local Security Checks	2/29/2008	1/11/2021	high
4365	Mozilla Firefox < 2.0.0.12 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2/8/2008	3/6/2019	high
4366	SeaMonkey < 1.1.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2/8/2008	3/6/2019	high
4367	Mozilla Thunderbird < 2.0.0.12 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	2/8/2008	3/6/2019	high

Detections

Analytics

Plugins Search

high

medium

high

high

high

high

high

high

high