Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Debian: DSA-2269-1 Critical Iceape Remote Code Execution Issues

debian
Calendar Grey July 1, 2011
Scroller Debian
Stay informed about critical Iceape updates addressing remote code execution vulnerabilities that could threaten system security and integrity
Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of Seamonkey: CVE-2011-0083 / CVE-2011-2363
Topics%20covered

Topics Covered

security advisory critical issue remote code execution debian iceape

Summary

Several vulnerabilities have been found in the Iceape internet suite, an
unbranded version of Seamonkey:

CVE-2011-0083 / CVE-2011-2363

"regenrecht" discovered two use-after-frees in SVG processing,
which could lead to the execution of arbitrary code.

CVE-2011-0085

"regenrecht" discovered a use-after-free in XUL processing, which
could lead to the execution of arbitrary code.

CVE-2011-2362

David Chan discovered that cookies were insufficiently isolated.

CVE-2011-2371

Chris Rohlf and Yan Ivnitskiy discovered an integer overflow in the
Javascript engine, which could lead to the execution of arbitrary
code.

CVE-2011-2373

Martin Barbella discovered a use-after-free in XUL processing,
which could lead to the execution of arbitrary code.

CVE-2011-2374

Bob Clary, Kevin Brosnan, Nils, Gary Kwong, Jesse Ruderman and
Christian Biesinger discovered memory corruption bugs, which may
lead to the execution of arbitrary code.

CVE-2011-2376

Luke Wagner and Gary Kwong discovered m...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Package: iceape
CVE ID: CVE-2011-0083 CVE-2011-0085 CVE-2011-2362 CVE-2011-2363

Topics%20covered

Topics Covered

security advisory critical issue remote code execution debian iceape

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.