November 2008

ID: 3712
Date: 13/11/2008

---

Title: 3712 - Mozilla Releases Updates to Address Vulnerabilities in Multiple Products
Platform level affected:Net Application - Client
Specific operating systems components affected: 32-bit Windows
Other software: Web Browser
Remediation Summary:Update your copy of the software with the download available from the supplier.
Vendors affected:Mozilla
Applications affected:Firefox, SeaMonkey
Adversity source: Unknown
Attack Vector: Vulnerability exploitation
Virulence: Unknown
Warning Status: Unknown
Potential Damage: Remote execution/modification
Possible Duration: Unknown
Availability of fix: Available
Type of fix: Automated Patch
Source: Mozilla
Reliability of source: Known
Source URL: http://www.mozilla.org/security/announce/
Abstract: Mozilla has released updates for a number of vulnerabilities.

Mozilla has released versions Firefox 2.0.0.18, Firefox 3.0.4, and SeaMonkey 1.1.13 to address various vulnerabilities. The impact of these vulnerabilities include arbitrary code execution, privilege escalation, security bypass, cross-site scripting, denial of service, and information disclosure. As described in the Mozilla Foundation security advisories, some of these vulnerabilities may also affect Thunderbird.

CSIRTUK encourages users to review the Mozilla Foundation security advisories and apply any necessary updates to help mitigate the risks.