Detections
Analytics
SeaMonkey < 1.1.7 Multiple Vulnerabilities
high Nessus Plugin ID 28374
Synopsis
A web browser on the remote host is affected by multiple vulnerabilities.Description
The installed version of SeaMonkey is affected by various security issues :- Three bugs that can result in crashes with traces of memory corruption
- A cross-site scripting vulnerability involving support for the 'jar:' URI scheme
- A timing issue when setting the 'window.location' property that could be leveraged to conduct cross-site request forgery attacks.
Solution
Upgrade to SeaMonkey 1.1.7 or later.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2007-37/
https://www.mozilla.org/en-US/security/advisories/mfsa2007-38/
https://www.mozilla.org/en-US/security/advisories/mfsa2007-39/
Plugin Details
Severity: High
ID: 28374
File Name: seamonkey_117.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows
Published: 12/2/2007
Updated: 7/27/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:mozilla:seamonkey
Required KB Items: SeaMonkey/Version
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 11/9/2007