Oval Definition:oval:com.redhat.rhsa:def:20100680
Revision Date:2010-09-08Version:637
Title:RHSA-2010:0680: seamonkey security update (Critical)
Description:SeaMonkey is an open source web browser, email and newsgroup client, IRC chat client, and HTML editor.

  • Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2010-3169)

  • A buffer overflow flaw was found in SeaMonkey. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2010-2765)

  • A use-after-free flaw and several dangling pointer flaws were found in SeaMonkey. A web page containing malicious content could cause SeaMonkey to crash or, potentially, execute arbitrary code with the privileges of the user running SeaMonkey. (CVE-2010-2760, CVE-2010-2767, CVE-2010-3167, CVE-2010-3168)

  • A cross-site scripting (XSS) flaw was found in SeaMonkey. A web page containing malicious content could cause SeaMonkey to run JavaScript code with the permissions of a different website. (CVE-2010-2768)

    All SeaMonkey users should upgrade to these updated packages, which correct these issues. After installing the update, SeaMonkey must be restarted for the changes to take effect.
  • Family:unixClass:patch
    Status:Reference(s):CVE-2010-2760
    CVE-2010-2765
    CVE-2010-2767
    CVE-2010-2768
    CVE-2010-3167
    CVE-2010-3168
    CVE-2010-3169
    RHSA-2010:0680
    RHSA-2010:0680-01
    RHSA-2010:0680-01
    Platform(s):Red Hat Enterprise Linux 3
    Red Hat Enterprise Linux 4
    Product(s):
    Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 3 is installed
  • AND
  • seamonkey-mail is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey-mail is signed with Red Hat master key
  • seamonkey-chat is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey-chat is signed with Red Hat master key
  • seamonkey-nspr-devel is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey-nspr-devel is signed with Red Hat master key
  • seamonkey-dom-inspector is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey-dom-inspector is signed with Red Hat master key
  • seamonkey-devel is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey-devel is signed with Red Hat master key
  • seamonkey is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey is signed with Red Hat master key
  • seamonkey-nss is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey-nss is signed with Red Hat master key
  • seamonkey-nss-devel is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey-nss-devel is signed with Red Hat master key
  • seamonkey-js-debugger is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey-js-debugger is signed with Red Hat master key
  • seamonkey-nspr is earlier than 0:1.0.9-0.60.el3
  • AND seamonkey-nspr is signed with Red Hat master key
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • seamonkey-js-debugger is earlier than 0:1.0.9-63.el4
  • AND seamonkey-js-debugger is signed with Red Hat master key
  • seamonkey-devel is earlier than 0:1.0.9-63.el4
  • AND seamonkey-devel is signed with Red Hat master key
  • seamonkey-dom-inspector is earlier than 0:1.0.9-63.el4
  • AND seamonkey-dom-inspector is signed with Red Hat master key
  • seamonkey-mail is earlier than 0:1.0.9-63.el4
  • AND seamonkey-mail is signed with Red Hat master key
  • seamonkey is earlier than 0:1.0.9-63.el4
  • AND seamonkey is signed with Red Hat master key
  • seamonkey-chat is earlier than 0:1.0.9-63.el4
  • AND seamonkey-chat is signed with Red Hat master key
  • Definition Synopsis
  • Red Hat Enterprise Linux must be installed
  • OR Package Information
  • Red Hat Enterprise Linux 4 is installed
  • AND
  • seamonkey is earlier than 0:1.0.9-63.el4
  • AND seamonkey is signed with Red Hat redhatrelease2 key
  • seamonkey-chat is earlier than 0:1.0.9-63.el4
  • AND seamonkey-chat is signed with Red Hat redhatrelease2 key
  • seamonkey-devel is earlier than 0:1.0.9-63.el4
  • AND seamonkey-devel is signed with Red Hat redhatrelease2 key
  • seamonkey-dom-inspector is earlier than 0:1.0.9-63.el4
  • AND seamonkey-dom-inspector is signed with Red Hat redhatrelease2 key
  • seamonkey-js-debugger is earlier than 0:1.0.9-63.el4
  • AND seamonkey-js-debugger is signed with Red Hat redhatrelease2 key
  • seamonkey-mail is earlier than 0:1.0.9-63.el4
  • AND seamonkey-mail is signed with Red Hat redhatrelease2 key
  • BACK