Oval Definition:	oval:org.mitre.oval:def:10271
Revision Date: 2013-04-29 Version: 10 Title: The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation. Description: The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation. Family: unix Class: vulnerability Status: ACCEPTED Reference(s): CVE-2009-3385 Platform(s): CentOS Linux 3 CentOS Linux 4 Oracle Linux 4 Red Hat Enterprise Linux 3 Red Hat Enterprise Linux 4 Product(s): Definition Synopsis OS Section: RHEL3, CentOS3 RHEL3 or CentOS3 The operating system installed on the system is Red Hat Enterprise Linux 3 OR CentOS Linux 3.x AND Configuration section seamonkey-nspr is earlier than 0:1.0.9-0.47.el3 OR seamonkey-js-debugger is earlier than 0:1.0.9-0.47.el3 OR seamonkey-nss-devel is earlier than 0:1.0.9-0.47.el3 OR seamonkey is earlier than 0:1.0.9-0.47.el3 OR seamonkey-nspr-devel is earlier than 0:1.0.9-0.47.el3 OR seamonkey-mail is earlier than 0:1.0.9-0.47.el3 OR seamonkey-chat is earlier than 0:1.0.9-0.47.el3 OR seamonkey-devel is earlier than 0:1.0.9-0.47.el3 OR seamonkey-dom-inspector is earlier than 0:1.0.9-0.47.el3 OR seamonkey-nss is earlier than 0:1.0.9-0.47.el3 OR OS Section: RHEL4, CentOS4, Oracle Linux 4 RHEL4, CentOS4 or Oracle Linux 4 The operating system installed on the system is Red Hat Enterprise Linux 4 OR CentOS Linux 4.x OR Oracle Linux 4.x AND Configuration section seamonkey-mail is earlier than 0:1.0.9-50.el4_8 OR seamonkey-js-debugger is earlier than 0:1.0.9-50.el4_8 OR seamonkey-chat is earlier than 0:1.0.9-50.el4_8 OR seamonkey-dom-inspector is earlier than 0:1.0.9-50.el4_8 OR seamonkey-devel is earlier than 0:1.0.9-50.el4_8 OR seamonkey is earlier than 0:1.0.9-50.el4_8
BACK