|
Red Hat has issued an update for Sea Monkey and Thunderbird and this update addresses several vulnerabilities. The vulnerabilities can be exploited by remote attackers to bypass certain security measures and take full control of the vulnerable systems. The update fixes the following vulnerabilities:
- Sea Monkey is vulnerable in the way frame objects with certain names are handled.
- An integer overflow error exists in the way Sea Monkey and Thunderbird handled large JavaScript regular expressions.
- Several flaws were found in the processing of malformed HTML content.
- An error was found in the way Thunderbird processed the “Enter” keypress event.
- An integer error arises when “Location” headers in redirect responses is handled by Thunderbird.
The updated package is available on the Red Hat Network:
https://access.redhat.com/kb/docs/DOC-11259
Source:
Secunia
http://secunia.com/advisories/46194/
Thunderbird Security Update
https://rhn.redhat.com/errata/RHSA-2011-1342.html
SeaMonkey Security Update
https://rhn.redhat.com/errata/RHSA-2011-1344.html
Disclaimer The information provided herein is on "as is" basis, without warranty of any kind.
|
