=====================================================================
CERT-Renater
Note d'Information No. 2004/VULN395
_____________________________________________________________________
DATE : 15/09/2004
HARDWARE PLATFORM(S) : /
OPERATING SYSTEM(S) : Systems running Firefox, Mozilla, Thunderbird.
======================================================================
The Mozilla Organization have released new versions of Firefox, Mozilla and
Thunderbird which fix 10 vulnerabilities. These vulnerabilities exist in
varied sections of the source code, ranging from VCard and POP3 handling
to javascript cross-domain scripting and malformed BMP image handling.
The most serious of these flaws could allow a remote malicious user to
execute arbitrary code with the privileges of the user running the
vulnerable software.
Full details of known and fixed vulnerabilities in various Mozilla based
software is available at
http://www.mozilla.org/projects/security/known-vulnerabilities.html
======================================================================
Jeff \--Webmaster@CCM--/
