The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-nspr-develUpgrade seamonkey-nssUpgrade seamonkeyUpgrade seamonkey-js-debuggerUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade seamonkey-develUpgrade seamonkey-chatUpgrade seamonkey-nsprUpgrade seamonkey-nss-devel | Dec 1, 2016 | Mar 22, 2010 |
| Freebsd | — | Upgrade thunderbirdUpgrade seamonkeyUpgrade linux-thunderbirdUpgrade linux-seamonkey | Dec 10, 2025 | Mar 19, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.19 | Feb 3, 2012 | Mar 22, 2010 |
| Suse | — | Upgrade mozilla-venkmanUpgrade seamonkey-spellcheckerUpgrade seamonkey-ircUpgrade mozilla-develUpgrade mozilla-ircUpgrade mozilla-mailUpgrade mozilla-dom-inspectorUpgrade seamonkey-dom-inspectorUpgrade seamonkeyUpgrade mozillaUpgrade seamonkey-mailUpgrade seamonkey-venkman | Feb 17, 2015 | Mar 22, 2010 |
| Ubuntu | — | Upgrade seamonkey | Nov 19, 2024 | Mar 23, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub