Detections
Analytics
SeaMonkey < 1.1.18 Multiple Vulnerabilities
high Nessus Plugin ID 40874
Synopsis
A web browser on the remote host is affected by multiple vulnerabilities.Description
The installed version of SeaMonkey is earlier than 1.1.18. Such versions are potentially affected by the following security issues :- The browser can be fooled into trusting a malicious SSL server certificate with a null character in the host name.
(MFSA 2009-42)
- A heap overflow in the code that handles regular expressions in certificate names can lead to arbitrary code execution. (MFSA 2009-43)
Solution
Upgrade to SeaMonkey 1.1.18 or later.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2009-42/
https://www.mozilla.org/en-US/security/advisories/mfsa2009-43/
Plugin Details
Severity: High
ID: 40874
File Name: seamonkey_1118.nasl
Version: 1.15
Type: local
Agent: windows
Family: Windows
Published: 9/4/2009
Updated: 7/27/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:mozilla:seamonkey
Required KB Items: SeaMonkey/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 9/3/2009
Vulnerability Publication Date: 7/30/2009
Reference Information
CVE: CVE-2009-2404, CVE-2009-2408