seamonkey
Page content
- Author: Miklos Vajna
- Vulnerable: 1.1.11-1
- Unaffected: 1.1.13-1solaria1
Some vulnerabilities have been reported in Mozilla SeaMonkey, which can be exploited by malicious people to disclose sensitive information, bypass certain security restrictions, or compromise a user’s system.
- Several vulnerabilities can be exploited to disclose sensitive information, bypass certain security restrictions, or compromise a user’s system.
- An error exists while processing JavaScript code embedded in email messages. This can be exploited to disclose the mailbox URI of the recipient via the “.documentURI” DOM property, or to potentially disclose comments placed in a forwarded email via the “.textContent” DOM property.
- Bug Tracker URL: http://bugs.frugalware.org/task/3466
CVEs:
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0017
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-4582
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5012
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5013
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5014
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5017
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5018
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5021
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5022
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5023
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5024