Mozilla SeaMonkey Code Execution and Spoofing Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla SeaMonkey, which could be exploited by attackers to spoof certain information, bypass security restrictions or compromise a vulnerable system.

1. A memory corruption error when parsing certain regular expressions used in Proxy Auto-configuration (PAC) files, which could allow attackers to crash an affected browser or execute arbitrary code on a system where PAC has been configured with specific regular expresssions.

2. A heap overflow error in the GIF image parser, which could be exploited to crash an affected browser or execute arbitrary code.

3. An error when downloading a file with a name containing a right-to-left override character (RTL), which could be exploited to obfuscate the name and extension of a malicious file to be downloaded and opened.