The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The mail component in Mozilla SeaMonkey before 1.1.19 does not properly restrict execution of scriptable plugin content, which allows user-assisted remote attackers to obtain sensitive information via crafted content in an IFRAME element in an HTML e-mail message, as demonstrated by a Flash object that sends arbitrary local files during a reply or forward operation.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Centos_linux | — | Upgrade seamonkey-chatUpgrade seamonkey-nsprUpgrade seamonkey-nss-develUpgrade seamonkey-develUpgrade seamonkey-mailUpgrade seamonkey-dom-inspectorUpgrade seamonkey-nspr-develUpgrade seamonkey-js-debuggerUpgrade seamonkey-nssUpgrade seamonkey | Dec 1, 2016 | Mar 22, 2010 |
| Freebsd | — | Upgrade linux-thunderbirdUpgrade linux-seamonkeyUpgrade seamonkeyUpgrade thunderbird | Dec 10, 2025 | Mar 19, 2010 |
| Mozilla Seamonkey | — | Upgrade to Mozilla SeaMonkey version 1.1.19 | Feb 3, 2012 | Mar 22, 2010 |
| Suse | — | Upgrade mozilla-dom-inspectorUpgrade seamonkey-dom-inspectorUpgrade seamonkey-venkmanUpgrade seamonkeyUpgrade mozillaUpgrade seamonkey-mailUpgrade mozilla-mailUpgrade seamonkey-ircUpgrade seamonkey-spellcheckerUpgrade mozilla-develUpgrade mozilla-venkmanUpgrade mozilla-irc | Feb 17, 2015 | Mar 22, 2010 |
| Ubuntu | — | Upgrade seamonkey | Nov 19, 2024 | Mar 23, 2010 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub