Bug 200455 – Seamonkey multiple vulnerabilities: CVE-2006-{3113,3677,3801-3812}

Bugzilla will be upgraded to version 5.0 on a still to be determined date in the near future. The original upgrade date has been delayed.

Bug 200455 - (CVE-2006-3812) Seamonkey multiple vulnerabilities: CVE-2006-{3113,3677,3801-3812}

Summary:	Seamonkey multiple vulnerabilities: CVE-2006-{3113,3677,3801-3812}

Status:	CLOSED ERRATA

Aliases:	CVE-2006-3812

Product:	Security Response
Classification:	Other
Component:	vulnerability (Show other bugs)
Sub Component:
Version:	unspecified
Hardware:	All Linux

Priority	high Severity high
Target Milestone:	---
Target Release:	---
Assigned To:	Kai Engert (:kaie) (inactive account)
QA Contact:	Fedora Extras Quality Assurance
Docs Contact:

URL:
Whiteboard:	impact=important,public=20060726,repo...
Keywords:	Security

Depends On:
Blocks:
	Show dependency tree / graph

Reported:	2006-07-27 15:49 EDT by Ville Skyttä
Modified:	2018-08-15 18:46 EDT (History)
CC List:	2 users (show)

See Also:
Fixed In Version:	1.0.4
Doc Type:	Bug Fix
Doc Text:
Story Points:	---
Clone Of:
Environment:
Last Closed:	2006-08-07 15:21:16 EDT
Type:	---
Regression:	---
Mount Type:	---
Documentation:	---
CRM:
Verified Versions:
Category:	---
oVirt Team:	---
RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---

Attachments	(Terms of Use)
Add an attachment (proposed patch, testcase, etc.)

Groups: None (edit)

Description Ville Skyttä 2006-07-27 15:49:47 EDT

Arbitrary code execution:
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3677
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3803
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3806
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3807

Denial of service:
http://nvd.nist.gov/nvd.cfm?cvename=CVE-2006-3804

All these are reported against seamonkey < 1.0.3.  FE[45] and devel affected.

Comment 1 Ville Skyttä 2006-07-28 11:35:41 EDT

There's more: CVE-2006-3113, CVE-2006-3801, CVE-2006-3802, CVE-2006-3805,
CVE-2006-3808, CVE-2006-3809, CVE-2006-3810, CVE-2006-3811

Comment 2 Ville Skyttä 2006-07-29 05:23:42 EDT

...and CVE-2006-3812

Comment 3 Matthew Miller 2006-07-29 06:43:39 EDT

See also related Firefox bug #200357

Comment 4 Ville Skyttä 2006-08-07 15:21:16 EDT

Fixed in 1.0.3+ according to upstream.

Note You need to log in before you can comment on or make changes to this bug.