Summary
The remote host is missing an update to iceape
announced via advisory DSA 1562-1.
Solution
https://secure1.securityspace.com/smysecure/catid.html?in=DSA%201562-1
Insight
It was discovered that crashes in the Javascript engine of Iceape, an unbranded version of the Seamonkey internet suite could potentially lead to the execution of arbitrary code.
For the stable distribution (etch), this problem has been fixed in version 1.0.13~pre080323b-0etch3.
For the unstable distribution (sid), this problem has been fixed in version 1.1.9-2.
We recommend that you upgrade your iceape packages.
Severity
Classification
-
CVE CVE-2008-1380 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities