Detections
Analytics
SeaMonkey < 1.1.9 Multiple Vulnerabilities
high Nessus Plugin ID 31653
Synopsis
A web browser on the remote host is affected by multiple vulnerabilities.Description
The installed version of SeaMonkey is affected by various security issues :- A series of vulnerabilities that allow for JavaScript privilege escalation and arbitrary code execution.
- Several stability bugs leading to crashes which, in some cases, show traces of memory corruption.
- An HTTP Referer spoofing issue with malformed URLs.
- A privacy issue with SSL client authentication.
- Web content fetched via the 'jar:' protocol can use Java via LiveConnect to open socket connections to arbitrary ports on the localhost.
- It is possible to have a background tab create a border-less XUL pop-up in front of the active tab in the user's browser.
Solution
Upgrade to SeaMonkey 1.1.9 or later.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2008-14/
https://www.mozilla.org/en-US/security/advisories/mfsa2008-15/
https://www.mozilla.org/en-US/security/advisories/mfsa2008-16/
https://www.mozilla.org/en-US/security/advisories/mfsa2008-17/
https://www.mozilla.org/en-US/security/advisories/mfsa2008-18/
https://www.mozilla.org/en-US/security/advisories/mfsa2008-19/
Plugin Details
Severity: High
ID: 31653
File Name: seamonkey_119.nasl
Version: 1.14
Type: local
Agent: windows
Family: Windows
Published: 3/26/2008
Updated: 7/27/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:mozilla:seamonkey
Required KB Items: SeaMonkey/Version
Exploit Ease: No known exploits are available
Vulnerability Publication Date: 9/8/2007
Reference Information
CVE: CVE-2007-4879, CVE-2008-1195, CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-1236, CVE-2008-1237, CVE-2008-1238, CVE-2008-1240, CVE-2008-1241
BID: 28448