[PCWorks] Mozilla SeaMonkey Multiple Vulnerabilities

  • From: "Clint Hamilton-PCWorks Admin" <PCWorks@xxxxxxxxxxxxxxxxxxxxxxxx>
  • To: "PCWorks@xxxxxxxxxxxxx" <pcworks@xxxxxxxxxxxxx>
  • Date: Thu, 23 Apr 2009 07:29:10 -0500

TITLE:
Mozilla SeaMonkey Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA34835

VERIFY ADVISORY:
http://secunia.com/advisories/34835/

DESCRIPTION:
Some vulnerabilities have been reported in Mozilla SeaMonkey, 
which
can be exploited by malicious people to disclose potentially
sensitive information, bypass certain security restrictions, 
conduct
cross-site scripting and cross-site request forgery attacks, and
potentially compromise a user's system.

For more information see vulnerability #3 through #6, #8, and #9 
in:
SA34758

SOLUTION:
The vendor recommends to disable Javascript until a fixed version 
is
available. Do not browse untrusted web sites or open mails from
untrusted sources.

ORIGINAL ADVISORY:
Mozilla Foundation:
http://www.mozilla.org/security/announce/2009/mfsa2009-16.html
http://www.mozilla.org/security/announce/2009/mfsa2009-17.html
http://www.mozilla.org/security/announce/2009/mfsa2009-18.html
http://www.mozilla.org/security/announce/2009/mfsa2009-19.html
http://www.mozilla.org/security/announce/2009/mfsa2009-21.html
http://www.mozilla.org/security/announce/2009/mfsa2009-22.html

OTHER REFERENCES:
SA34758:
http://secunia.com/advisories/34758/


=========================
The list's FAQ's can be seen by sending an email to 
PCWorks-request@xxxxxxxxxxxxx with FAQ in the subject line.

To unsubscribe, subscribe, set Digest or Vacation to on or off, go to 
//www.freelists.org/list/pcworks .  You can also send an email to 
PCWorks-request@xxxxxxxxxxxxx with Unsubscribe in the subject line.  Your 
member list settings can be found at 
//www.freelists.org/cgi-bin/lsg2.cgi/l=pcworks .  Once logged in, you have 
access to numerous other email options.  

The list archives are located at //www.freelists.org/archives/pcworks/ .  
All email posted to the list will be placed there in the event anyone needs to 
look for previous posts.
-zxdjhu-

Other related posts: