Today, the SeaMonkey project released a new version of its all-in-one internet suite. SeaMonkey 1.1.14 closes several security vulnerabilities and fixes several smaller problems found in previous versions.
According to their official website, seven vulnerabilities were crushed: 2 low, 2 critical, 1 high and 2 moderate vulnerabilities. Let’s take a look:
- XSS and JavaScript privilege escalation.
- Escaped null characters ignored by CSS parser.
- Errors parsing URLs with leading whitespace and control characters.
- Cross-domain data theft via script redirect error message.
- XMLHttpRequest 302 response disclosure.
- Information stealing via loadBindingDocument.
- Crashes with evidence of memory corruption (rv:1.9.0.5/1.8.1.19).
SeaMonkey 1.1.14 is available for free download from the open source project’s website at www.seamonkey-project.org.
Normally I don’t use SeaMonkey because it’s too heavy. I prefer to use Flock social browser or Firefox. However, just because I’m curious to see what other browser do, I like to keep this browser updated and on the backburner. Good Day.



