- Home
- CVEs with nessus.description==Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey :
- CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog -- which has 'open' as the default action --, while a user presses the ENTER key.
- CVE-2011-2995 Benjamin Smedberg, Bob Clary and Jesse Ruderman discovered crashes in the rendering engine, which could lead to the execution of arbitrary code.
- CVE-2011-2998 Mark Kaplan discovered an integer underflow in the JavaScript engine, which could lead to the execution of arbitrary code.
- CVE-2011-2999 Boris Zbarsky discovered that incorrect handling of the window.location object could lead to bypasses of the same-origin policy.
- CVE-2011-3000 Ian Graham discovered that multiple Location headers might lead to CRLF injection.
The oldstable distribution (lenny) is not affected. The iceape package only provides the XPCOM code.
Max CVSS | 0 |
Min CVSS | 0 |
Total Count | 2 |
| ID | CVSS | Summary | Last (major) update | Published |
Back to Top
Mark selected
Back to Top