RHSA-2008:0882 - Security Advisory

Topic

Updated seamonkey packages that fix a security issues are now available for
Red Hat Enterprise Linux 2.1, Red Hat Enterprise Linux 3 and Red Hat
Enterprise Linux 4.

This update has been rated as having critical security impact by the Red
Hat Security Response Team.

Description

SeaMonkey is an open source Web browser, advanced email and newsgroup
client, IRC chat client, and HTML editor.

Several flaws were found in the processing of malformed web content. A web
page containing malicious content could cause SeaMonkey to crash or,
potentially, execute arbitrary code as the user running SeaMonkey.
(CVE-2008-0016, CVE-2008-4058, CVE-2008-4059, CVE-2008-4060, CVE-2008-4061,
CVE-2008-4062)

Several flaws were found in the way malformed web content was displayed. A
web page containing specially crafted content could potentially trick a
SeaMonkey user into surrendering sensitive information. (CVE-2008-3835,
CVE-2008-4067, CVE-2008-4068, CVE-2008-4069)

A flaw was found in the way SeaMonkey handles mouse click events. A web page
containing specially crafted JavaScript code could move the content window
while a mouse-button was pressed, causing any item under the pointer to be
dragged. This could, potentially, cause the user to perform an unsafe
drag-and-drop action. (CVE-2008-3837)

A flaw was found in SeaMonkey that caused certain characters to be stripped
from JavaScript code. This flaw could allow malicious JavaScript to bypass
or evade script filters. (CVE-2008-4065, CVE-2008-4066)

All SeaMonkey users should upgrade to these updated packages, which contain
backported patches to resolve these issues.

Solution

Before applying this update, make sure that all previously-released
errata relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use
the Red Hat Network to apply this update are available at
http://kbase.redhat.com/faq/FAQ_58_10188

Affected Products

• Red Hat Enterprise Linux Server 4 x86_64
• Red Hat Enterprise Linux Server 4 ia64
• Red Hat Enterprise Linux Server 4 i386
• Red Hat Enterprise Linux Server 3 x86_64
• Red Hat Enterprise Linux Server 3 ia64
• Red Hat Enterprise Linux Server 3 i386
• Red Hat Enterprise Linux Server 2 ia64
• Red Hat Enterprise Linux Server 2 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.7 ia64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 4.7 i386
• Red Hat Enterprise Linux Workstation 4 x86_64
• Red Hat Enterprise Linux Workstation 4 ia64
• Red Hat Enterprise Linux Workstation 4 i386
• Red Hat Enterprise Linux Workstation 3 x86_64
• Red Hat Enterprise Linux Workstation 3 ia64
• Red Hat Enterprise Linux Workstation 3 i386
• Red Hat Enterprise Linux Workstation 2 ia64
• Red Hat Enterprise Linux Workstation 2 i386
• Red Hat Enterprise Linux Desktop 4 x86_64
• Red Hat Enterprise Linux Desktop 4 i386
• Red Hat Enterprise Linux Desktop 3 x86_64
• Red Hat Enterprise Linux Desktop 3 i386
• Red Hat Enterprise Linux for IBM z Systems 4 s390x
• Red Hat Enterprise Linux for IBM z Systems 4 s390
• Red Hat Enterprise Linux for IBM z Systems 3 s390x
• Red Hat Enterprise Linux for IBM z Systems 3 s390
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 4.7 s390
• Red Hat Enterprise Linux for Power, big endian 4 ppc
• Red Hat Enterprise Linux for Power, big endian 3 ppc
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 4.7 ppc

Fixes

• BZ - 463181 - CVE-2008-0016 Mozilla UTF-8 stack buffer overflow
• BZ - 463182 - CVE-2008-3835 nsXMLDocument::OnChannelRedirect() same-origin violation
• BZ - 463189 - CVE-2008-3837 Forced mouse drag
• BZ - 463190 - CVE-2008-4058 Mozilla privilege escalation via XPCnativeWrapper pollution
• BZ - 463192 - CVE-2008-4059 Mozilla privilege escalation via XPCnativeWrapper pollution
• BZ - 463198 - CVE-2008-4060 Mozilla privilege escalation via XPCnativeWrapper pollution
• BZ - 463199 - CVE-2008-4061 Mozilla layout engine crash
• BZ - 463201 - CVE-2008-4062 Mozilla crashes with evidence of memory corruption
• BZ - 463234 - CVE-2008-4065 Mozilla BOM characters stripped from JavaScript before execution
• BZ - 463243 - CVE-2008-4066 Mozilla low surrogates stripped from JavaScript before execution
• BZ - 463246 - CVE-2008-4067 Mozilla resource: traversal vulnerability
• BZ - 463248 - CVE-2008-4068 Mozilla local HTML file recource: bypass
• BZ - 463251 - CVE-2008-4069 Mozilla XBM decoder information disclosure

CVEs

• CVE-2008-3835
• CVE-2008-4059
• CVE-2008-4069
• CVE-2008-4066
• CVE-2008-0016
• CVE-2008-3837
• CVE-2008-4058
• CVE-2008-4068
• CVE-2008-4065
• CVE-2008-4067
• CVE-2008-4060
• CVE-2008-4061
• CVE-2008-4062

References

(none)