portage-ng / portage / www-client / seamonkey / 2.53.24
version « ‹ 2.53.24 › »
graphs detail deptree gantt
cli --merge --fetchonly --info
security glsa 17 bugs
legacy emerge pmerge
portage-ng glsa
17 advisories reference www-client/seamonkey · none place version 2.53.24 in a vulnerable range
▸ GLSA 202402-24 Seamonkey: Multiple Vulnerabilities this version unaffected normal remote 2024-02-19

Multiple vulnerabilities have been discovered in Seamonkey, the worst of which can lead to remote code execution.

Announced
2024-02-19
Revised
2024-02-19
Access
remote
Bugs
#767400 #828479
Advisory
https://security.gentoo.org/glsa/202402-24

Affected packages

PackageArchVulnerableUnaffected
www-client/seamonkey*< 2.53.10.2>= 2.53.10.2

Background

The Seamonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the ‘Mozilla Application Suite’.

Description

Multiple vulnerabilities have been discovered in Seamonkey. Please review the CVE identifiers referenced below for details.

Impact

Please review the referenced CVE identifiers for details.

Workaround

There is no known workaround at this time.

Resolution

All Seamonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-2.53.10.2"
▸ GLSA 202012-02 SeaMonkey: Multiple vulnerabilities this version unaffected normal local, remote 2020-12-07

Multiple vulnerabilities have been found in SeaMonkey, the worst of which could result in the arbitrary execution of code.

Announced
2020-12-07
Revised
2020-12-07
Access
local, remote
Bugs
#718738 #718746
Advisory
https://security.gentoo.org/glsa/202012-02

Affected packages

PackageArchVulnerableUnaffected
www-client/seamonkey*< 2.53.5.1>= 2.53.5
www-client/seamonkey-bin*<= 2.49.1_rc2—

Background

The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as “Mozilla Application Suite”.

Description

Multiple vulnerabilities have been discovered in SeaMonkey. Please review referenced release notes for more details.

Impact

Please review the referenced release notes for details.

Workaround

There is no known workaround at this time.

Resolution

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-2.53.5.1"

Gentoo has discontinued support for the SeaMonkey binary package. We recommend that users unmerge the SeaMonkey binary package:

# emerge --unmerge “www-client/seamonkey-bin”

NOTE: The Gentoo developer(s) maintaining the SeaMonkey binary package have discontinued support at this time. It may be possible that a new Gentoo developer will update it at a later date. The alternative is using the standard SeaMonkey package.

References

▸ GLSA 201701-35 Mozilla SeaMonkey: Multiple vulnerabilities this version unaffected normal remote 2017-01-13

Multiple vulnerabilities have been found in Mozilla SeaMonkey, the worst of which could lead to the remote execution of arbitrary code.

Announced
2017-01-13
Revised
2017-01-13 (revision 3)
Access
remote
Bugs
#539242 #541506 #574968 #604500
Advisory
https://security.gentoo.org/glsa/201701-35

Affected packages

PackageArchVulnerableUnaffected
www-client/seamonkey*< 2.46-r1>= 2.46-r1
www-client/seamonkey-bin*< 2.46>= 2.46

Background

Mozilla SeaMonkey is a free and open-source Internet suite. It is the continuation of the former Mozilla Application Suite, based on the same source code.

Description

Multiple vulnerabilities have been discovered in Mozilla SeaMonkey. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could possibly execute arbitrary code with the privileges of the process, cause a Denial of Service condition, or obtain sensitive information.

Workaround

There is no known workaround at this time.

Resolution

All Mozilla SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-2.46-r1"

All Mozilla SeaMonkey-bin users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-2.46"

References

▸ GLSA 201504-01 Mozilla Products: Multiple vulnerabilities this version unaffected normal remote 2015-04-07

Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, and SeaMonkey, the worst of which may allow user-assisted execution of arbitrary code.

Announced
2015-04-07
Revised
2015-04-08 (revision 2)
Access
remote
Bugs
#489796 #491234 #493850 #500320 #505072 #509050 #512896 #517876 #522020 #523652 #525474 #531408 #536564 #541316 #544056
Advisory
https://security.gentoo.org/glsa/201504-01

Affected packages

PackageArchVulnerableUnaffected
dev-libs/nspr*< 4.10.6>= 4.10.6
mail-client/thunderbird*< 31.5.0>= 31.5.0
mail-client/thunderbird-bin*< 31.5.0>= 31.5.0
www-client/firefox*< 31.5.3>= 31.5.3
www-client/firefox-bin*< 31.5.3>= 31.5.3
www-client/seamonkey*< 2.33.1>= 2.33.1
www-client/seamonkey-bin*< 2.33.1>= 2.33.1

Background

Mozilla Firefox is an open-source web browser and Mozilla Thunderbird an open-source email client, both from the Mozilla Project. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the ‘Mozilla Application Suite’.

Description

Multiple vulnerabilities have been discovered in Firefox, Thunderbird, and SeaMonkey. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to view a specially crafted web page or email, possibly resulting in execution of arbitrary code or a Denial of Service condition. Furthermore, a remote attacker may be able to perform Man-in-the-Middle attacks, obtain sensitive information, spoof the address bar, conduct clickjacking attacks, bypass security restrictions and protection mechanisms, or have other unspecified impact.

Workaround

There are no known workarounds at this time.

Resolution

All firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-31.5.3"

All firefox-bin users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-bin-31.5.3"

All thunderbird users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/thunderbird-31.5.0"

All thunderbird-bin users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=mail-client/thunderbird-bin-31.5.0"

All seamonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-2.33.1"

All seamonkey-bin users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-2.33.1"

All nspr users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/nspr-4.10.6"

References

▸ GLSA 201309-23 Mozilla Products: Multiple vulnerabilities this version unaffected high remote 2013-09-27

Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, and SeaMonkey, some of which may allow a remote user to execute arbitrary code.

Announced
2013-09-27
Revised
2013-09-27
Access
remote
Bugs
#450940 #458390 #460818 #464226 #469868 #474758 #479968 #485258
Advisory
https://security.gentoo.org/glsa/201309-23

Affected packages

PackageArchVulnerableUnaffected
mail-client/thunderbird*< 17.0.9>= 17.0.9
mail-client/thunderbird-bin*< 17.0.9>= 17.0.9
www-client/firefox*< 17.0.9>= 17.0.9
www-client/firefox-bin*< 17.0.9>= 17.0.9
www-client/seamonkey*< 2.21>= 2.21
www-client/seamonkey-bin*< 2.21>= 2.21

Background

Mozilla Firefox is an open-source web browser and Mozilla Thunderbird an open-source email client, both from the Mozilla Project. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the ‘Mozilla Application Suite’.

Description

Multiple vulnerabilities have been discovered in Mozilla Firefox, Thunderbird, and SeaMonkey. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to view a specially crafted web page or email, possibly resulting in execution of arbitrary code or a Denial of Service condition. Further, a remote attacker could conduct XSS attacks, spoof URLs, bypass address space layout randomization, conduct clickjacking attacks, obtain potentially sensitive information, bypass access restrictions, modify the local filesystem, or conduct other unspecified attacks.

Workaround

There is no known workaround at this time.

Resolution

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-17.0.9"

All users of the Mozilla Firefox binary package should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-bin-17.0.9"

All Mozilla Thunderbird users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/thunderbird-17.0.9"

All users of the Mozilla Thunderbird binary package should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=mail-client/thunderbird-bin-17.0.9"

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-2.21"

All users of the Mozilla SeaMonkey binary package should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-2.21"

References

▸ GLSA 201301-01 Mozilla Products: Multiple vulnerabilities this version unaffected high local, remote 2013-01-08

Multiple vulnerabilities have been found in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may allow execution of arbitrary code or local privilege escalation.

Announced
2013-01-08
Revised
2013-01-08
Access
local, remote
Bugs
#180159 #181361 #207261 #238535 #246602 #251322 #255221 #255234 #255687 #257577 #260062 #261386 #262704 #267234 #273918 #277752 #280226 #280234 #280393 #282549 #284439 #286721 #290892 #292034 #297532 #305689 #307045 #311021 #312361 #312645 #312651 #312675 #312679 #312763 #313003 #324735 #326341 #329279 #336396 #341821 #342847 #348316 #357057 #360055 #360315 #365323 #373595 #379549 #381245 #388045 #390771 #395431 #401701 #403183 #404437 #408161 #413657 #419917 #427224 #433383 #437780 #439586 #439960 #444318
Advisory
https://security.gentoo.org/glsa/201301-01

Affected packages

PackageArchVulnerableUnaffected
dev-libs/nss*< 3.14>= 3.14
mail-client/mozilla-thunderbird*<= 3.0.4-r1—
mail-client/mozilla-thunderbird-bin*<= 3.0—
mail-client/thunderbird*< 10.0.11>= 10.0.11
mail-client/thunderbird-bin*< 10.0.11>= 10.0.11
net-libs/xulrunner*<= 2.0-r1—
net-libs/xulrunner-bin*<= 1.8.1.19—
www-client/firefox*< 10.0.11>= 10.0.11
www-client/firefox-bin*< 10.0.11>= 10.0.11
www-client/icecat*<= 10.0-r1—
www-client/mozilla-firefox*<= 3.6.8—
www-client/mozilla-firefox-bin*<= 3.5.6—
www-client/seamonkey*< 2.14-r1>= 2.14-r1
www-client/seamonkey-bin*< 2.14>= 2.14

Background

Mozilla Firefox is an open-source web browser and Mozilla Thunderbird an open-source email client, both from the Mozilla Project. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the ‘Mozilla Application Suite’. XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XPCOM applications such as Firefox and Thunderbird. NSS is Mozilla’s Network Security Services library that implements PKI support. IceCat is the GNU version of Firefox.

Description

Multiple vulnerabilities have been discovered in Mozilla Firefox, Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the CVE identifiers referenced below for details.

Impact

A remote attacker could entice a user to view a specially crafted web page or email, possibly resulting in execution of arbitrary code or a Denial of Service condition. Furthermore, a remote attacker may be able to perform Man-in-the-Middle attacks, obtain sensitive information, bypass restrictions and protection mechanisms, force file downloads, conduct XML injection attacks, conduct XSS attacks, bypass the Same Origin Policy, spoof URL’s for phishing attacks, trigger a vertical scroll, spoof the location bar, spoof an SSL indicator, modify the browser’s font, conduct clickjacking attacks, or have other unspecified impact.

A local attacker could gain escalated privileges, obtain sensitive information, or replace an arbitrary downloaded file.

Workaround

There is no known workaround at this time.

Resolution

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-10.0.11"

All users of the Mozilla Firefox binary package should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/firefox-bin-10.0.11"

All Mozilla Thunderbird users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/thunderbird-10.0.11"

All users of the Mozilla Thunderbird binary package should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose
">=mail-client/thunderbird-bin-10.0.11"

All Mozilla SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-2.14-r1"

All users of the Mozilla SeaMonkey binary package should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-2.14"

All NSS users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=dev-libs/nss-3.14"

The “www-client/mozilla-firefox” package has been merged into the “www-client/firefox” package. To upgrade, please unmerge “www-client/mozilla-firefox” and then emerge the latest “www-client/firefox” package:

# emerge --sync
# emerge --unmerge "www-client/mozilla-firefox"
# emerge --ask --oneshot --verbose ">=www-client/firefox-10.0.11"

The “www-client/mozilla-firefox-bin” package has been merged into the “www-client/firefox-bin” package. To upgrade, please unmerge “www-client/mozilla-firefox-bin” and then emerge the latest “www-client/firefox-bin” package:

# emerge --sync
# emerge --unmerge "www-client/mozilla-firefox-bin"
# emerge --ask --oneshot --verbose ">=www-client/firefox-bin-10.0.11"

The “mail-client/mozilla-thunderbird” package has been merged into the “mail-client/thunderbird” package. To upgrade, please unmerge “mail-client/mozilla-thunderbird” and then emerge the latest “mail-client/thunderbird” package:

# emerge --sync
# emerge --unmerge "mail-client/mozilla-thunderbird"
# emerge --ask --oneshot --verbose ">=mail-client/thunderbird-10.0.11"

The “mail-client/mozilla-thunderbird-bin” package has been merged into the “mail-client/thunderbird-bin” package. To upgrade, please unmerge “mail-client/mozilla-thunderbird-bin” and then emerge the latest “mail-client/thunderbird-bin” package:

# emerge --sync
# emerge --unmerge "mail-client/mozilla-thunderbird-bin"
# emerge --ask --oneshot --verbose
">=mail-client/thunderbird-bin-10.0.11"

Gentoo discontinued support for GNU IceCat. We recommend that users unmerge GNU IceCat:

# emerge --unmerge "www-client/icecat"

Gentoo discontinued support for XULRunner. We recommend that users unmerge XULRunner:

# emerge --unmerge "net-libs/xulrunner"

Gentoo discontinued support for the XULRunner binary package. We recommend that users unmerge XULRunner:

# emerge --unmerge "net-libs/xulrunner-bin"

References

▸ GLSA 200808-03 Mozilla products: Multiple vulnerabilities this version unaffected normal remote 2008-08-06

Multiple vulnerabilities have been reported in Mozilla Firefox, Thunderbird, SeaMonkey and XULRunner, some of which may allow user-assisted execution of arbitrary code.

Announced
2008-08-06
Revised
2008-08-06
Access
remote
Bugs
#204337 #218065 #230567 #231975
Advisory
https://security.gentoo.org/glsa/200808-03

Affected packages

PackageArchVulnerableUnaffected
mail-client/mozilla-thunderbird*< 2.0.0.16>= 2.0.0.16
mail-client/mozilla-thunderbird-bin*< 2.0.0.16>= 2.0.0.16
net-libs/xulrunner*< 1.8.1.16>= 1.8.1.16
net-libs/xulrunner-bin*< 1.8.1.16>= 1.8.1.16
www-client/mozilla-firefox*< 2.0.0.16>= 2.0.0.16
www-client/mozilla-firefox-bin*< 2.0.0.16>= 2.0.0.16
www-client/seamonkey*< 1.1.11>= 1.1.11
www-client/seamonkey-bin*< 1.1.11>= 1.1.11

Background

Mozilla Firefox is an open-source web browser and Mozilla Thunderbird an open-source email client, both from the Mozilla Project. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the 'Mozilla Application Suite'. XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XPCOM applications like Firefox and Thunderbird.

Description

The following vulnerabilities were reported in all mentioned Mozilla products:

  • TippingPoint's Zero Day Initiative reported that an incorrect integer data type is used as a CSS object reference counter, leading to a counter overflow and a free() of in-use memory (CVE-2008-2785).
  • Igor Bukanov, Jesse Ruderman and Gary Kwong reported crashes in the JavaScript engine, possibly triggering memory corruption (CVE-2008-2799).
  • Devon Hubbard, Jesse Ruderman, and Martijn Wargers reported crashes in the layout engine, possibly triggering memory corruption (CVE-2008-2798).
  • moz_bug_r_a4 reported that XUL documents that include a script from a chrome: URI that points to a fastload file would be executed with the privileges specified in the file (CVE-2008-2802).
  • moz_bug_r_a4 reported that the mozIJSSubScriptLoader.LoadScript() function only apply XPCNativeWrappers to scripts loaded from standard "chrome:" URIs, which could be the case in third-party add-ons (CVE-2008-2803).
  • Astabis reported a crash in the block reflow implementation related to large images (CVE-2008-2811).
  • John G. Myers, Frank Benkstein and Nils Toedtmann reported a weakness in the trust model used by Mozilla, that when a user accepts an SSL server certificate on the basis of the CN domain name in the DN field, the certificate is also regarded as accepted for all domain names in subjectAltName:dNSName fields (CVE-2008-2809).

The following vulnerabilities were reported in Firefox, SeaMonkey and XULRunner:

  • moz_bug_r_a4 reported that the Same Origin Policy is not properly enforced on JavaScript (CVE-2008-2800).
  • Collin Jackson and Adam Barth reported that JAR signing is not properly implemented, allowing injection of JavaScript into documents within a JAR archive (CVE-2008-2801).
  • Opera Software reported an error allowing for arbitrary local file upload (CVE-2008-2805).
  • Daniel Glazman reported that an invalid .properties file for an add-on might lead to the usage of uninitialized memory (CVE-2008-2807).
  • Masahiro Yamada reported that HTML in "file://" URLs in directory listings is not properly escaped (CVE-2008-2808).
  • Geoff reported that the context of Windows Internet shortcut files is not correctly identified (CVE-2008-2810).
  • The crash vulnerability (CVE-2008-1380) that was previously announced in GLSA 200805-18 is now also also resolved in Seamonkey binary ebuilds.

The following vulnerability was reported in Firefox only:

  • Billy Rios reported that the Pipe character in a command-line URI is identified as a request to open multiple tabs, allowing to open "chrome" and "file" URIs (CVE-2008-2933).

Impact

A remote attacker could entice a user to view a specially crafted web page or email that will trigger one of the vulnerabilities, possibly leading to the execution of arbitrary code or a Denial of Service. It is also possible for an attacker to trick a user to upload arbitrary files or to accept an invalid certificate for a spoofed web site, to read uninitialized memory, to violate Same Origin Policy, or to conduct Cross-Site Scripting attacks.

Workaround

There is no known workaround at this time.

Resolution

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-2.0.0.16"

All Mozilla Firefox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-bin-2.0.0.16"

All Mozilla Thunderbird users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-2.0.0.16"

All Mozilla Thunderbird binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-bin-2.0.0.16"

All Seamonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.1.11"

All Seamonkey binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-1.1.11"

All XULRunner users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/xulrunner-1.8.1.16"

All XULRunner binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/xulrunner-bin-1.8.1.16"

References

▸ GLSA 200805-18 Mozilla products: Multiple vulnerabilities this version unaffected normal remote 2008-05-20

Multiple vulnerabilities have been reported in Mozilla Firefox, Thunderbird, SeaMonkey and XULRunner, some of which may allow user-assisted execution of arbitrary code.

Announced
2008-05-20
Revised
2008-05-20
Access
remote
Bugs
#208128 #214816 #218065
Advisory
https://security.gentoo.org/glsa/200805-18

Affected packages

PackageArchVulnerableUnaffected
mail-client/mozilla-thunderbird*< 2.0.0.14>= 2.0.0.14
mail-client/mozilla-thunderbird-bin*< 2.0.0.14>= 2.0.0.14
net-libs/xulrunner*< 1.8.1.14>= 1.8.1.14
www-client/mozilla-firefox*< 2.0.0.14>= 2.0.0.14
www-client/mozilla-firefox-bin*< 2.0.0.14>= 2.0.0.14
www-client/seamonkey*< 1.1.9-r1>= 1.1.9-r1
www-client/seamonkey-bin*< 1.1.9>= 1.1.9

Background

Mozilla Firefox is an open-source web browser and Mozilla Thunderbird an open-source email client, both from the Mozilla Project. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the 'Mozilla Application Suite'. XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XPCOM applications like Firefox and Thunderbird.

Description

The following vulnerabilities were reported in all mentioned Mozilla products:

  • Jesse Ruderman, Kai Engert, Martijn Wargers, Mats Palmgren, and Paul Nickerson reported browser crashes related to JavaScript methods, possibly triggering memory corruption (CVE-2008-0412).
  • Carsten Book, Wesley Garland, Igor Bukanov, moz_bug_r_a4, shutdown, Philip Taylor, and tgirmann reported crashes in the JavaScript engine, possibly triggering memory corruption (CVE-2008-0413).
  • David Bloom discovered a vulnerability in the way images are treated by the browser when a user leaves a page, possibly triggering memory corruption (CVE-2008-0419).
  • moz_bug_r_a4, Boris Zbarsky, and Johnny Stenback reported a series of privilege escalation vulnerabilities related to JavaScript (CVE-2008-1233, CVE-2008-1234, CVE-2008-1235).
  • Mozilla developers identified browser crashes caused by the layout and JavaScript engines, possibly triggering memory corruption (CVE-2008-1236, CVE-2008-1237).
  • moz_bug_r_a4 and Boris Zbarsky discovered that pages could escape from its sandboxed context and run with chrome privileges, and inject script content into another site, violating the browser's same origin policy (CVE-2008-0415).
  • Gerry Eisenhaur discovered a directory traversal vulnerability when using "flat" addons (CVE-2008-0418).
  • Alexey Proskuryakov, Yosuke Hasegawa and Simon Montagu reported multiple character handling flaws related to the backspace character, the "0x80" character, involving zero-length non-ASCII sequences in multiple character sets, that could facilitate Cross-Site Scripting attacks (CVE-2008-0416).

The following vulnerability was reported in Thunderbird and SeaMonkey:

  • regenrecht (via iDefense) reported a heap-based buffer overflow when rendering an email message with an external MIME body (CVE-2008-0304).

The following vulnerabilities were reported in Firefox, SeaMonkey and XULRunner:

  • The fix for CVE-2008-1237 in Firefox 2.0.0.13 and SeaMonkey 1.1.9 introduced a new crash vulnerability (CVE-2008-1380).
  • hong and Gregory Fleischer each reported a variant on earlier reported bugs regarding focus shifting in file input controls (CVE-2008-0414).
  • Gynvael Coldwind (Vexillium) discovered that BMP images could be used to reveal uninitialized memory, and that this data could be extracted using a "canvas" feature (CVE-2008-0420).
  • Chris Thomas reported that background tabs could create a borderless XUL pop-up in front of pages in other tabs (CVE-2008-1241).
  • oo.rio.oo discovered that a plain text file with a "Content-Disposition: attachment" prevents Firefox from rendering future plain text files within the browser (CVE-2008-0592).
  • Martin Straka reported that the ".href" property of stylesheet DOM nodes is modified to the final URI of a 302 redirect, bypassing the same origin policy (CVE-2008-0593).
  • Gregory Fleischer discovered that under certain circumstances, leading characters from the hostname part of the "Referer:" HTTP header are removed (CVE-2008-1238).
  • Peter Brodersen and Alexander Klink reported that the browser automatically selected and sent a client certificate when SSL Client Authentication is requested by a server (CVE-2007-4879).
  • Gregory Fleischer reported that web content fetched via the "jar:" protocol was not subject to network access restrictions (CVE-2008-1240).

The following vulnerabilities were reported in Firefox:

  • Justin Dolske discovered a CRLF injection vulnerability when storing passwords (CVE-2008-0417).
  • Michal Zalewski discovered that Firefox does not properly manage a delay timer used in confirmation dialogs (CVE-2008-0591).
  • Emil Ljungdahl and Lars-Olof Moilanen discovered that a web forgery warning dialog is not displayed if the entire contents of a web page are in a DIV tag that uses absolute positioning (CVE-2008-0594).

Impact

A remote attacker could entice a user to view a specially crafted web page or email that will trigger one of the vulnerabilities, possibly leading to the execution of arbitrary code or a Denial of Service. It is also possible for an attacker to trick a user to upload arbitrary files when submitting a form, to corrupt saved passwords for other sites, to steal login credentials, or to conduct Cross-Site Scripting and Cross-Site Request Forgery attacks.

Workaround

There is no known workaround at this time.

Resolution

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-2.0.0.14"

All Mozilla Firefox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-bin-2.0.0.14"

All Mozilla Thunderbird users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-2.0.0.14"

All Mozilla Thunderbird binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-bin-2.0.0.14"

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.1.9-r1"

All SeaMonkey binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-1.1.9"

All XULRunner users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/xulrunner-1.8.1.14"

NOTE: The crash vulnerability (CVE-2008-1380) is currently unfixed in the SeaMonkey binary ebuild, as no precompiled packages have been released. Until an update is available, we recommend all SeaMonkey users to disable JavaScript, use Firefox for JavaScript-enabled browsing, or switch to the SeaMonkey source ebuild.

References

▸ GLSA 200712-21 Mozilla Firefox, SeaMonkey: Multiple vulnerabilities this version unaffected normal remote 2007-12-29

Multiple vulnerabilities have been discovered in Mozilla Firefox and Mozilla Seamonkey.

Announced
2007-12-29
Revised
2007-12-29
Access
remote
Bugs
#198965 #200909
Advisory
https://security.gentoo.org/glsa/200712-21

Affected packages

PackageArchVulnerableUnaffected
www-client/mozilla-firefox*< 2.0.0.11>= 2.0.0.11
www-client/mozilla-firefox-bin*< 2.0.0.11>= 2.0.0.11
www-client/seamonkey*< 1.1.7>= 1.1.7
www-client/seamonkey-bin*< 1.1.7>= 1.1.7

Background

Mozilla Firefox is a cross-platform web browser from Mozilla. SeaMonkey is a free, cross-platform Internet suite.

Description

Jesse Ruderman and Petko D. Petkov reported that the jar protocol handler in Mozilla Firefox and Seamonkey does not properly check MIME types (CVE-2007-5947). Gregory Fleischer reported that the window.location property can be used to generate a fake HTTP Referer (CVE-2007-5960). Multiple memory errors have also been reported (CVE-2007-5959).

Impact

A remote attacker could possibly exploit these vulnerabilities to execute arbitrary code in the context of the browser and conduct Cross-Site-Scripting or Cross-Site Request Forgery attacks.

Workaround

There is no known workaround at this time.

Resolution

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-2.0.0.11"

All Mozilla Firefox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-bin-2.0.0.11"

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.1.7"

All SeaMonkey binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-1.1.7"

References

▸ GLSA 200711-14 Mozilla Firefox, SeaMonkey, XULRunner: Multiple vulnerabilities this version unaffected normal remote 2007-11-12

Multiple vulnerabilities have been discovered in Mozilla Firefox, SeaMonkey and XULRunner, potentially allowing to compromise a user's system.

Announced
2007-11-12
Revised
2007-11-12
Access
remote
Bugs
#196480
Advisory
https://security.gentoo.org/glsa/200711-14

Affected packages

PackageArchVulnerableUnaffected
net-libs/xulrunner*< 1.8.1.9>= 1.8.1.9
www-client/mozilla-firefox*< 2.0.0.9>= 2.0.0.9
www-client/mozilla-firefox-bin*< 2.0.0.9>= 2.0.0.9
www-client/seamonkey*< 1.1.6>= 1.1.6
www-client/seamonkey-bin*< 1.1.6>= 1.1.6

Background

Mozilla Firefox is a cross-platform web browser from Mozilla. SeaMonkey is a free, cross-platform Internet suite.

Description

Multiple vulnerabilities have been reported in Mozilla Firefox and SeaMonkey. Various errors in the browser engine and the Javascript engine can be exploited to cause a memory corruption (CVE-2007-5339 and CVE-2007-5340). Before being used in a request, input passed to the user ID when making an HTTP request with digest authentication is not properly sanitised (CVE-2007-2292). The titlebar can be hidden by a XUL markup language document (CVE-2007-5334). Additionally, an error exists in the handling of "smb:" and "sftp:" URI schemes on systems with gnome-vfs support (CVE-2007-5337). An unspecified error in the handling of "XPCNativeWrappers" and not properly implementing JavaScript onUnload() handlers may allow the execution of arbitrary Javascript code (CVE-2007-5338 and CVE-2007-1095). Another error is triggered by using the addMicrosummaryGenerator sidebar method to access file: URIs (CVE-2007-5335).

Impact

A remote attacker could exploit these issues to execute arbitrary code, gain the privileges of the user running the application, disclose sensitive information, conduct phishing attacks, and read and manipulate certain data.

Workaround

There is no known workaround at this time.

Resolution

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-2.0.0.9"

All Mozilla Firefox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-bin-2.0.0.9"

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.1.6"

All SeaMonkey binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-1.1.6"

All XULRunner users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/xulrunner-1.8.1.9"

References

▸ GLSA 200708-09 Mozilla products: Multiple vulnerabilities this version unaffected normal remote 2007-08-14

Multiple vulnerabilities have been reported in Mozilla Firefox, Thunderbird, SeaMonkey and XULRunner, some of which may allow user-assisted arbitrary remote code execution.

Announced
2007-08-14
Revised
2007-08-14
Access
remote
Bugs
#185737 #187205
Advisory
https://security.gentoo.org/glsa/200708-09

Affected packages

PackageArchVulnerableUnaffected
mail-client/mozilla-thunderbird*< 2.0.0.6>= 2.0.0.6
mail-client/mozilla-thunderbird-bin*< 2.0.0.6>= 2.0.0.6
net-libs/xulrunner*< 1.8.1.6>= 1.8.1.6
www-client/mozilla-firefox*< 2.0.0.6>= 2.0.0.6
www-client/mozilla-firefox-bin*< 2.0.0.6>= 2.0.0.6
www-client/seamonkey*< 1.1.4>= 1.1.4
www-client/seamonkey-bin*< 1.1.4>= 1.1.4

Background

Mozilla Firefox is an open-source web browser from the Mozilla Project, and Mozilla Thunderbird an email client. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the 'Mozilla Application Suite'. XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XPCOM applications like Firefox and Thunderbird.

Description

Mozilla developers fixed several bugs, including an issue with modifying XPCNativeWrappers (CVE-2007-3738), a problem with event handlers executing elements outside of the document (CVE-2007-3737), and a cross-site scripting (XSS) vulnerability (CVE-2007-3736). They also fixed a problem with promiscuous IFRAME access (CVE-2007-3089) and an XULRunner URL spoofing issue with the wyciwyg:// URI and HTTP 302 redirects (CVE-2007-3656). Denials of Service involving corrupted memory were fixed in the browser engine (CVE-2007-3734) and the JavaScript engine (CVE-2007-3735). Finally, another XSS vulnerability caused by a regression in the CVE-2007-3089 patch was fixed (CVE-2007-3844).

Impact

A remote attacker could entice a user to view a specially crafted web page that will trigger one of the vulnerabilities, possibly leading to the execution of arbitrary code or a Denial of Service. It is also possible for an attacker to perform cross-site scripting attacks, which could result in the exposure of sensitive information such as login credentials.

Workaround

There is no known workaround at this time.

Resolution

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-2.0.0.6"

All Mozilla Firefox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-bin-2.0.0.6"

All Mozilla Thunderbird users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-2.0.0.6"

All Mozilla Thunderbird binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-bin-2.0.0.6"

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.1.4"

All SeaMonkey binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-1.1.4"

All XULRunner users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/xulrunner-1.8.1.6"

References

▸ GLSA 200706-06 Mozilla products: Multiple vulnerabilities this version unaffected normal remote 2007-06-19

Multiple vulnerabilities have been reported in Mozilla Firefox, Thunderbird, SeaMonkey and XULRunner, some of which may allow user-assisted arbitrary remote code execution.

Announced
2007-06-19
Revised
2007-06-19
Access
remote
Bugs
#180436
Advisory
https://security.gentoo.org/glsa/200706-06

Affected packages

PackageArchVulnerableUnaffected
mail-client/mozilla-thunderbird*< 2.0.0.4>= 2.0.0.4, >= 1.5.0.12 (revision)
mail-client/mozilla-thunderbird-bin*< 2.0.0.4>= 2.0.0.4, >= 1.5.0.12 (revision)
net-libs/xulrunner*< 1.8.1.4>= 1.8.1.4
www-client/mozilla-firefox*< 2.0.0.4>= 2.0.0.4
www-client/mozilla-firefox-bin*< 2.0.0.4>= 2.0.0.4
www-client/seamonkey*< 1.1.2>= 1.1.2
www-client/seamonkey-bin*< 1.1.2>= 1.1.2

Background

Mozilla Firefox is an open-source web browser from the Mozilla Project, and Mozilla Thunderbird an email client. The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the 'Mozilla Application Suite'. XULRunner is a Mozilla runtime package that can be used to bootstrap XUL+XPCOM applications like Firefox and Thunderbird.

Description

Mozilla developers fixed several bugs involving memory corruption through various vectors (CVE-2007-2867, CVE-2007-2868). Additionally, several errors leading to crash, memory exhaustion or CPU consumption were fixed (CVE-2007-1362, CVE-2007-2869). Finally, errors related to the APOP protocol (CVE-2007-1558), XSS prevention (CVE-2007-2870) and spoofing prevention (CVE-2007-2871) were fixed.

Impact

A remote attacker could entice a user to view a specially crafted web page that will trigger one of the vulnerabilities, possibly leading to the execution of arbitrary code or a Denial of Service. It is also possible for an attacker to spoof the address bar or other browser elements, obtain sensitive APOP information, or perform cross-site scripting attacks, leading to the exposure of sensitive information, like user credentials.

Workaround

There is no known workaround at this time.

Resolution

All Mozilla Firefox users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-2.0.0.4"

All Mozilla Firefox binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/mozilla-firefox-bin-2.0.0.4"

All Mozilla Thunderbird users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-2.0.0.4"

All Mozilla Thunderbird binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=mail-client/mozilla-thunderbird-bin-2.0.0.4"

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.1.2"

All SeaMonkey binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-1.1.2"

All XULRunner users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=net-libs/xulrunner-1.8.1.4"

References

▸ GLSA 200703-08 SeaMonkey: Multiple vulnerabilities this version unaffected normal remote 2007-03-09

Multiple vulnerabilities have been reported in SeaMonkey, some of which may allow user-assisted arbitrary remote code execution.

Announced
2007-03-09
Revised
2007-03-09
Access
remote
Bugs
#165555
Advisory
https://security.gentoo.org/glsa/200703-08

Affected packages

PackageArchVulnerableUnaffected
www-client/seamonkey*< 1.1.1>= 1.1.1
www-client/seamonkey-bin*< 1.1.1>= 1.1.1

Background

The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the 'Mozilla Application Suite'.

Description

Tom Ferris reported a heap-based buffer overflow involving wide SVG stroke widths that affects SeaMonkey. Various researchers reported some errors in the JavaScript engine potentially leading to memory corruption. SeaMonkey also contains minor vulnerabilities involving cache collision and unsafe pop-up restrictions, filtering or CSS rendering under certain conditions. All those vulnerabilities are the same as in GLSA 200703-04 affecting Mozilla Firefox.

Impact

An attacker could entice a user to view a specially crafted web page or to read a specially crafted email that will trigger one of the vulnerabilities, possibly leading to the execution of arbitrary code. It is also possible for an attacker to spoof the address bar, steal information through cache collision, bypass the local file protection mechanism with pop-ups, or perform cross-site scripting attacks, leading to the exposure of sensitive information, such as user credentials.

Workaround

There is no known workaround at this time for all of these issues, but most of them can be avoided by disabling JavaScript. Note that the execution of JavaScript is disabled by default in the SeaMonkey email client, and enabling it is strongly discouraged.

Resolution

Users upgrading to the following release of SeaMonkey should note that the corresponding Mozilla Firefox upgrade has been found to lose the saved passwords file in some cases. The saved passwords are encrypted and stored in the 'signons.txt' file of ~/.mozilla/ and we advise our users to save that file before performing the upgrade.

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.1.1"

All SeaMonkey binary users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-bin-1.1.1"

References

▸ GLSA 200701-04 SeaMonkey: Multiple vulnerabilities this version unaffected high remote 2007-01-10

Multiple vulnerabilities have been reported in the SeaMonkey project, some of which may allow the remote execution of arbitrary code.

Announced
2007-01-10
Revised
2007-01-10
Access
remote
Bugs
#158576
Advisory
https://security.gentoo.org/glsa/200701-04

Affected packages

PackageArchVulnerableUnaffected
www-client/seamonkey*< 1.0.7>= 1.0.7

Background

The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as the 'Mozilla Application Suite'.

Description

An anonymous researcher found evidence of memory corruption in the way SeaMonkey handles certain types of SVG comment DOM nodes. Georgi Guninski and David Bienvenu discovered buffer overflows in the processing of long "Content-Type:" and long non-ASCII MIME email headers. Additionally, Frederik Reiss discovered a heap-based buffer overflow in the conversion of a CSS cursor. Several other issues with memory corruption were also fixed. SeaMonkey also contains less severe vulnerabilities involving JavaScript and Java.

Impact

An attacker could entice a user to load malicious JavaScript or a malicious web page with a SeaMonkey application, possibly leading to the execution of arbitrary code with the rights of the user running those products. An attacker could also perform cross-site scripting attacks, leading to the exposure of sensitive information, like user credentials. Note that the execution of JavaScript or Java applets is disabled by default in the SeaMonkey email client, and enabling it is strongly discouraged.

Workaround

There are no known workarounds for all the issues at this time.

Resolution

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.0.7"

References

▸ GLSA 200612-08 SeaMonkey: Multiple vulnerabilities this version unaffected high remote 2006-12-10

Multiple vulnerabilities have been identified in the SeaMonkey project.

Announced
2006-12-10
Revised
2006-12-10
Access
remote
Bugs
#154449
Advisory
https://security.gentoo.org/glsa/200612-08

Affected packages

PackageArchVulnerableUnaffected
www-client/seamonkey*< 1.0.6>= 1.0.6

Background

The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as 'Mozilla Application Suite'.

Description

The SeaMonkey project is vulnerable to arbitrary JavaScript bytecode execution and arbitrary code execution.

Impact

An attacker could entice a user to load malicious JavaScript or a malicious web page with a SeaMonkey application and execute arbitrary code with the rights of the user running those products. It is important to note that in the SeaMonkey email client, JavaScript is disabled by default.

Workaround

There is no known workaround at this time.

Resolution

All SeaMonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.0.6"

References

▸ GLSA 200610-04 Seamonkey: Multiple vulnerabilities this version unaffected normal remote 2006-10-16

The Seamonkey project has reported multiple security vulnerabilities in the application.

Announced
2006-10-16
Revised
2006-10-16
Access
remote
Bugs
#147651
Advisory
https://security.gentoo.org/glsa/200610-04

Affected packages

PackageArchVulnerableUnaffected
www-client/seamonkey*< 1.0.5>= 1.0.5

Background

The SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as 'Mozilla Application Suite'.

Description

A number of vulnerabilities have been found and fixed in Seamonkey. For details please consult the references below.

Impact

The most severe vulnerability involves enticing a user to visit a malicious website, crashing the application and executing arbitrary code with the rights of the user running Seamonkey.

Workaround

There is no known workaround at this time.

Resolution

All Seamonkey users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.0.5"

References

▸ GLSA 200608-02 Mozilla SeaMonkey: Multiple vulnerabilities this version unaffected normal remote 2006-08-03

The Mozilla Foundation has reported numerous security vulnerabilities related to Mozilla SeaMonkey.

Announced
2006-08-03
Revised
2006-08-03
Access
remote
Bugs
#141842
Advisory
https://security.gentoo.org/glsa/200608-02

Affected packages

PackageArchVulnerableUnaffected
www-client/seamonkey*< 1.0.3>= 1.0.3

Background

The Mozilla SeaMonkey project is a community effort to deliver production-quality releases of code derived from the application formerly known as "Mozilla Application Suite".

Description

The following vulnerabilities have been reported:

  • Benjamin Smedberg discovered that chrome URL's could be made to reference remote files.
  • Developers in the Mozilla community looked for and fixed several crash bugs to improve the stability of Mozilla clients, which could lead to the execution of arbitrary code by a remote attacker.
  • "shutdown" reports that cross-site scripting (XSS) attacks could be performed using the construct XPCNativeWrapper(window).Function(...), which created a function that appeared to belong to the window in question even after it had been navigated to the target site.
  • "shutdown" reports that scripts granting the UniversalBrowserRead privilege can leverage that into the equivalent of the far more powerful UniversalXPConnect since they are allowed to "read" into a privileged context.
  • "moz_bug_r_a4" reports that A malicious Proxy AutoConfig (PAC) server could serve a PAC script that can execute code with elevated privileges by setting the required FindProxyForURL function to the eval method on a privileged object that leaked into the PAC sandbox.
  • "moz_bug_r_a4" discovered that Named JavaScript functions have a parent object created using the standard Object() constructor (ECMA-specified behavior) and that this constructor can be redefined by script (also ECMA-specified behavior).
  • Igor Bukanov and shutdown found additional places where an untimely garbage collection could delete a temporary object that was in active use.
  • Georgi Guninski found potential integer overflow issues with long strings in the toSource() methods of the Object, Array and String objects as well as string function arguments.
  • H. D. Moore reported a testcase that was able to trigger a race condition where JavaScript garbage collection deleted a temporary variable still being used in the creation of a new Function object.
  • A malicious page can hijack native DOM methods on a document object in another domain, which will run the attacker's script when called by the victim page.
  • Secunia Research has discovered a vulnerability which is caused due to an memory corruption error within the handling of simultaneously happening XPCOM events. This leads to use of a deleted timer object.
  • An anonymous researcher for TippingPoint and the Zero Day Initiative showed that when used in a web page Java would reference properties of the window.navigator object as it started up.
  • Thilo Girmann discovered that in certain circumstances a JavaScript reference to a frame or window was not properly cleared when the referenced content went away.

Impact

A user can be enticed to open specially crafted URLs, visit webpages containing malicious JavaScript or execute a specially crafted script. These events could lead to the execution of arbitrary code, or the installation of malware on the user's computer.

Workaround

There is no known workaround at this time.

Resolution

All Thunderbird users should upgrade to the latest version:

# emerge --sync
# emerge --ask --oneshot --verbose ">=www-client/seamonkey-1.0.3"

References