Skip to content
OpenAdvisories
Unscored RHSA-2006:0609 26 CVEs

Red Hat Security Advisory: seamonkey security update

Published Sep 15, 2024 · Updated Jun 26, 2026

Ecosystem: Red Hat

Fixed packages 40

ReleasePackageFixed in
Red Hat · RHEL 4 enterprise_linux:4::as devhelp 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::as devhelp-debuginfo 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::as devhelp-devel 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::as seamonkey 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::as seamonkey-chat 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::as seamonkey-debuginfo 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::as seamonkey-devel 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::as seamonkey-dom-inspector 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::as seamonkey-js-debugger 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::as seamonkey-mail 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop devhelp 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop devhelp-debuginfo 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop devhelp-devel 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::desktop seamonkey 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop seamonkey-chat 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop seamonkey-debuginfo 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop seamonkey-devel 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop seamonkey-dom-inspector 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop seamonkey-js-debugger 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::desktop seamonkey-mail 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::es devhelp 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::es devhelp-debuginfo 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::es devhelp-devel 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::es seamonkey 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::es seamonkey-chat 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::es seamonkey-debuginfo 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::es seamonkey-devel 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::es seamonkey-dom-inspector 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::es seamonkey-js-debugger 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::es seamonkey-mail 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::ws devhelp 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws devhelp-debuginfo 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws devhelp-devel 0:0.10-0.2.el4
Red Hat · RHEL 4 enterprise_linux:4::ws seamonkey 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::ws seamonkey-chat 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::ws seamonkey-debuginfo 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::ws seamonkey-devel 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::ws seamonkey-dom-inspector 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::ws seamonkey-js-debugger 0:1.0.3-0.el4.1
Red Hat · RHEL 4 enterprise_linux:4::ws seamonkey-mail 0:1.0.3-0.el4.1

Vulnerabilities 26

  • Unscored —
    CVE-2006-2776

    Certain privileged UI code in Mozilla Firefox and Thunderbird before 1.5.0.4 calls content-defined setters on an object…

    thunderbird Debian
  • Unscored —
    CVE-2006-2778

    The crypto.signText function in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to execute arbit…

    thunderbird Debian
  • Unscored —
    CVE-2006-2779

    Mozilla Firefox and Thunderbird before 1.5.0.4 allow remote attackers to cause a denial of service (crash) and possibly…

    thunderbird Debian
  • Unscored —
    CVE-2006-2780

    Integer overflow in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to cause a denial of service…

    thunderbird Debian
  • Unscored —
    CVE-2006-2781

    Double free vulnerability in nsVCard.cpp in Mozilla Thunderbird before 1.5.0.4 and SeaMonkey before 1.0.2 allows remote…

    thunderbird Debian
  • Unscored —
    CVE-2006-2782

    Firefox 1.5.0.2 does not fix all test cases associated with CVE-2006-1729, which allows remote attackers to read arbitr…

  • Unscored —
    CVE-2006-2783

    Mozilla Firefox and Thunderbird before 1.5.0.4 strip the Unicode Byte-order-Mark (BOM) from a UTF-8 page before the pag…

    thunderbird Debian
  • Unscored —
    CVE-2006-2784

    The PLUGINSPAGE functionality in Mozilla Firefox before 1.5.0.4 allows remote user-assisted attackers to execute privil…

  • Unscored —
    CVE-2006-2785

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 1.5.0.4 allows user-assisted remote attackers to inj…

  • Unscored —
    CVE-2006-2786

    HTTP response smuggling vulnerability in Mozilla Firefox and Thunderbird before 1.5.0.4, when used with certain proxy s…

    thunderbird Debian
  • Unscored —
    CVE-2006-2787

    EvalInSandbox in Mozilla Firefox and Thunderbird before 1.5.0.4 allows remote attackers to gain privileges via javascri…

    thunderbird Debian
  • Unscored —
    CVE-2006-2788

    Double free vulnerability in the getRawDER function for nsIX509Cert in Firefox allows remote attackers to cause a denia…

  • Unscored —
    CVE-2006-3113

    Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to c…

    thunderbird Debian
  • Unscored —
    CVE-2006-3677 Public exploit EPSS 80%

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to execute arbitrary code by chan…

  • Unscored —
    CVE-2006-3801

    Mozilla Firefox 1.5 before 1.5.0.5 and SeaMonkey before 1.0.3 does not properly clear a JavaScript reference to a frame…

    thunderbird Debian
  • Unscored —
    CVE-2006-3802

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to hijac…

    thunderbird Debian
  • Unscored —
    CVE-2006-3803

    Race condition in the JavaScript garbage collection in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, …

    thunderbird Debian
  • Unscored —
    CVE-2006-3804

    Heap-based buffer overflow in Mozilla Thunderbird before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote attackers to …

    thunderbird Debian
  • Unscored —
    CVE-2006-3805

    The Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 might a…

    thunderbird Debian
  • Unscored —
    CVE-2006-3806

    Multiple integer overflows in the Javascript engine in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and …

    thunderbird Debian
  • Unscored —
    CVE-2006-3807

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to execu…

    thunderbird Debian
  • Unscored —
    CVE-2006-3808

    Mozilla Firefox before 1.5.0.5 and SeaMonkey before 1.0.3 allows remote Proxy AutoConfig (PAC) servers to execute code …

    thunderbird Debian
  • Unscored —
    CVE-2006-3809

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows scripts with the Universa…

    thunderbird Debian
  • Unscored —
    CVE-2006-3810

    Cross-site scripting (XSS) vulnerability in Mozilla Firefox 1.5 before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonk…

    thunderbird Debian
  • Unscored —
    CVE-2006-3811

    Multiple vulnerabilities in Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allo…

    thunderbird Debian
  • Unscored —
    CVE-2006-3812

    Mozilla Firefox before 1.5.0.5, Thunderbird before 1.5.0.5, and SeaMonkey before 1.0.3 allows remote attackers to refer…

    thunderbird Debian

References

  • article
    http://www.redhat.com/security/updates/classification/#critical
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=193906
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=196969
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=200161
  • advisory
    https://security.access.redhat.com/data/csaf/v2/advisories/2006/rhsa-2006_0609.json
  • report
    https://access.redhat.com/security/cve/CVE-2006-2776
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618112
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2776
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2776
  • report
    https://access.redhat.com/security/cve/CVE-2006-2778
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618113
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2778
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2778
  • report
    https://access.redhat.com/security/cve/CVE-2006-2779
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618114
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2779
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2779
  • report
    https://access.redhat.com/security/cve/CVE-2006-2780
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618115
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2780
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2780
  • report
    https://access.redhat.com/security/cve/CVE-2006-2781
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=193963
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2781
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2781
  • report
    https://access.redhat.com/security/cve/CVE-2006-2782
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618116
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2782
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2782
  • report
    https://access.redhat.com/security/cve/CVE-2006-2783
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618117
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2783
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2783
  • report
    https://access.redhat.com/security/cve/CVE-2006-2784
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618118
  • advisory
    https://www.cve.org/CVERecord?id=CVE-2006-2784
  • advisory
    https://nvd.nist.gov/vuln/detail/CVE-2006-2784
  • report
    https://access.redhat.com/security/cve/CVE-2006-2785
  • report
    https://bugzilla.redhat.com/show_bug.cgi?id=1618119