Vulnérabilités dans Mozilla

=====================================================================
                                 CERT-Renater

                      Note d'Information No. 2004/VULN395
_____________________________________________________________________

DATE                      : 15/09/2004

HARDWARE PLATFORM(S)      : /

OPERATING SYSTEM(S)       : Systems running Firefox, Mozilla, Thunderbird.

======================================================================

The Mozilla Organization have released new versions of Firefox, Mozilla and
Thunderbird which fix 10 vulnerabilities.  These vulnerabilities exist in
varied sections of the source code, ranging from VCard and POP3 handling
to javascript cross-domain scripting and malformed BMP image handling.

The most serious of these flaws could allow a remote malicious user to
execute arbitrary code with the privileges of the user running the
vulnerable software.

Full details of known and fixed vulnerabilities in various Mozilla based
software is available at

    http://www.mozilla.org/projects/security/known-vulnerabilities.html

======================================================================

                                   
Jeff  \--Webmaster@CCM--/