seamonkey seamonkey: Security update seamonkey: Securityupdate This update fixed various security problems in Mozilla Seamonkey. Following security problems were fixed: MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI. MFSA 2007-38 / CVE-2007-5959: The Firefox 2.0.0.10 update contains fixes for three bugs that improve the stability of the product. These crashes showed some evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code. MFSA 2007-39 / CVE-2007-5960: Gregory Fleischer demonstrated that it was possible to generate a fake HTTP Referer header by exploiting a timing condition when setting the window.location property. This could be used to conduct a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header as protection against such attacks. Dieses Update behebt mehrere Sicherheitsprobleme in Mozilla Seamonkey. MFSA 2007-37 / CVE-2007-5947: The jar protocol handler in Mozilla Firefox retrieves the inner URL regardless of its MIME type, and considers HTML documents within a jar archive to have the same origin as the inner URL, which allows remote attackers to conduct cross-site scripting (XSS) attacks via a jar: URI. MFSA 2007-38 / CVE-2007-5959: The Firefox 2.0.0.10 update contains fixes for three bugs that improve the stability of the product. These crashes showed some evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code. MFSA 2007-39 / CVE-2007-5960: Gregory Fleischer demonstrated that it was possible to generate a fake HTTP Referer header by exploiting a timing condition when setting the window.location property. This could be used to conduct a Cross-site Request Forgery (CSRF) attack against websites that rely only on the Referer header as protection against such attacks. security seamonkey i586 4a3ce02e16bd260f20ed028811dd4762d71e7fdf seamonkey ppc 21e8aeeddaf1b446120438dab02ba4ba6141136e seamonkey x86_64 132334dd9c893db4e1e81a4dfd6f4233fb0a6bf9 seamonkey-calendar i586 4ae4988d1f14c7fc2c4a4c57bd336fb1e904861b seamonkey-calendar ppc 26366b4e201673f11dc806bda636ad612917cd7e seamonkey-calendar x86_64 39b0e9afd16f44bd56d0253166e5cb6a146aec37 seamonkey-dom-inspector i586 a617df2183d13467787c57d965711402ea17b2b0 seamonkey-dom-inspector ppc 10fea979bbf342a7b68db960dad3bcfc058376da seamonkey-dom-inspector x86_64 b6a4a509db644185a08d5f132c244ee100e2afd1 seamonkey-irc i586 246fb4f91cb6cbd0c634d237b40caca9cda88e5c seamonkey-irc ppc c71b16178fe7731c4102b553d119f6907e505852 seamonkey-irc x86_64 ff163846d917fe00e716ffa5b90bc4ea6575d097 seamonkey-mail i586 e60a9f128436a20ed569d5b866af6fcfd39039d8 seamonkey-mail ppc d45fbd6a7adcd6d041efcda76946770af5fd1739 seamonkey-mail x86_64 e2b45b6e0ff82aab76bac4ab6649985c78f7ff1b seamonkey-spellchecker i586 14a53e68daa84532f45c69aafc7e2e2c5a3a2fdc seamonkey-spellchecker ppc 85fae64af8a00205f080e8e6bf04d50a02778cd9 seamonkey-spellchecker x86_64 12baf0dafe3e97d602b530929adae08d2e4e537e seamonkey-venkman i586 e6052adde4d90e3671ccd01df9bb940cdd23c66a seamonkey-venkman ppc c178c356bd2ec80b0abcd501d12b2fddb3cdbd69 seamonkey-venkman x86_64 312afbc819089454f538bef1ef135c1b70d021e6