Updated SeaMonkey packages that fix several security issues are now available for Red Hat Enterprise Linux 4.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

SeaMonkey is an open source web browser, email and newsgroup client, IRC chat client, and HTML editor.

A flaw was found in the way SeaMonkey handled dialog boxes. An attacker could use this flaw to create a malicious web page that would present a blank dialog box that has non-functioning buttons. If a user closes the dialog box window, it could unexpectedly grant the malicious web page elevated privileges. (CVE-2011-0051)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2011-0053)

A flaw was found in the way SeaMonkey handled plug-ins that perform HTTP requests. If a plug-in performed an HTTP request, and the server sent a 307 redirect response, the plug-in was not notified, and the HTTP request was forwarded. The forwarded request could contain custom headers, which could result in a Cross Site Request Forgery attack.
(CVE-2011-0059)

All SeaMonkey users should upgrade to these updated packages, which correct these issues. After installing the update, SeaMonkey must be restarted for the changes to take effect.

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey :

  - CVE-2010-1585     Roberto Suggi Liverani discovered that the sanitising     performed by ParanoidFragmentSink was incomplete.

  - CVE-2011-0051     Zach Hoffmann discovered that incorrect parsing of     recursive eval() calls could lead to attackers forcing     acceptance of a confirmation dialogue.

  - CVE-2011-0053     Crashes in the layout engine may lead to the execution     of arbitrary code.

  - CVE-2011-0054     Christian Holler discovered buffer overflows in the     JavaScript engine, which could allow the execution of     arbitrary code.

  - CVE-2011-0055     'regenrecht' and Igor Bukanov discovered a     use-after-free error in the JSON-Implementation, which     could lead to the execution of arbitrary code.

  - CVE-2011-0056     Christian Holler discovered buffer overflows in the     JavaScript engine, which could allow the execution of     arbitrary code.

  - CVE-2011-0057     Daniel Kozlowski discovered that incorrect memory     handling the web workers implementation could lead to     the execution of arbitrary code.

  - CVE-2011-0059     Peleus Uhley discovered a cross-site request forgery     risk in the plugin code.

The oldstable distribution (lenny) is not affected. The iceape package only provides the XPCOM code.

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian.

  - CVE-2010-1585     Roberto Suggi Liverani discovered that the sanitising     performed by ParanoidFragmentSink was incomplete.

  - CVE-2011-0051     Zach Hoffmann discovered that incorrect parsing of     recursive eval() calls could lead to attackers forcing     acceptance of a confirmation dialogue.

  - CVE-2011-0053     Crashes in the layout engine may lead to the execution     of arbitrary code.

  - CVE-2011-0054, CVE-2010-0056     Christian Holler discovered buffer overflows in the     JavaScript engine, which could allow the execution of     arbitrary code.

  - CVE-2011-0055     'regenrecht' and Igor Bukanov discovered a     use-after-free error in the JSON-Implementation, which     could lead to the execution of arbitrary code.

  - CVE-2011-0057     Daniel Kozlowski discovered that incorrect memory     handling the web workers implementation could lead to     the execution of arbitrary code.

  - CVE-2011-0059     Peleus Uhley discovered a cross-site request forgery     risk in the plugin code.

Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client.

  - CVE-2010-1585     Roberto Suggi Liverani discovered that the sanitising     performed by ParanoidFragmentSink was incomplete.

  - CVE-2011-0051     Zach Hoffmann discovered that incorrect parsing of     recursive eval() calls could lead to attackers forcing     acceptance of a confirmation dialogue.

  - CVE-2011-0053     Crashes in the layout engine may lead to the execution     of arbitrary code.

  - CVE-2011-0054, CVE-2010-0056     Christian Holler discovered buffer overflows in the     JavaScript engine, which could allow the execution of     arbitrary code.

  - CVE-2011-0055     'regenrecht' and Igor Bukanov discovered a     use-after-free error in the JSON-Implementation, which     could lead to the execution of arbitrary code.

  - CVE-2011-0057     Daniel Kozlowski discovered that incorrect memory     handling the web workers implementation could lead to     the execution of arbitrary code.

  - CVE-2011-0059     Peleus Uhley discovered a cross-site request forgery     risk in the plugin code.

As indicated in the Lenny (oldstable) release notes, security support for the Icedove packages in the oldstable needed to be stopped before the end of the regular Lenny security maintenance life cycle. You are strongly encouraged to upgrade to stable or switch to a different mail client.

MozillaThunderbird was updated to version 3.1.8, fixing various security issues.

Following security issues were fixed: MFSA 2011-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code.

Jesse Ruderman, Igor Bukanov, Olli Pettay, Gary Kwong, Jeff Walden, Henry Sivonen, Martijn Wargers, David Baron and Marcia Knous reported memory safety problems that affected Firefox 3.6 and Firefox 3.5.
(CVE-2011-0053)

Igor Bukanov and Gary Kwong reported memory safety problems that affected Firefox 3.6 only. (CVE-2011-0062)

MFSA 2011-08 / CVE-2010-1585: Mozilla security developer Roberto Suggi Liverani reported that ParanoidFragmentSink, a class used to sanitize potentially unsafe HTML for display, allows javascript: URLs and other inline JavaScript when the embedding document is a chrome document.
While there are no unsafe uses of this class in any released products, extension code could have potentially used it in an unsafe manner.

MFSA 2011-09 / CVE-2011-0061: Security researcher Jordi Chancel reported that a JPEG image could be constructed that would be decoded incorrectly, causing data to be written past the end of a buffer created to store the image. An attacker could potentially craft such an image that would cause malicious code to be stored in memory and then later executed on a victim's computer.

ID	Name	Product	Family	Published	Updated	Severity
52497	RHEL 4 : seamonkey (RHSA-2011:0313)	Nessus	Red Hat Local Security Checks	3/2/2011	1/14/2021	critical
52537	Debian DSA-2180-1 : iceape - several vulnerabilities	Nessus	Debian Local Security Checks	3/4/2011	1/4/2021	critical
52618	Debian DSA-2186-1 : iceweasel - several vulnerabilities	Nessus	Debian Local Security Checks	3/11/2011	1/4/2021	critical
52619	Debian DSA-2187-1 : icedove - several vulnerabilities	Nessus	Debian Local Security Checks	3/11/2011	1/4/2021	critical
75963	openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-4149)	Nessus	SuSE Local Security Checks	6/13/2014	1/14/2021	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical