Updated firefox packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having critical security impact by the Red Hat Security Response Team.

Mozilla Firefox is an open source Web browser.

Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. (CVE-2007-3734, CVE-2007-3735, CVE-2007-3737, CVE-2007-3738)

Several content injection flaws were found in the way Firefox handled certain JavaScript code. A web page containing malicious JavaScript code could inject arbitrary content into other web pages.
(CVE-2007-3736, CVE-2007-3089)

A flaw was found in the way Firefox cached web pages on the local disk. A malicious web page may be able to inject arbitrary HTML into a browsing session if the user reloads a targeted site. (CVE-2007-3656)

Users of Firefox are advised to upgrade to these erratum packages, which contain backported patches that correct these issues.

The remote host is affected by the vulnerability described in GLSA-200708-09 (Mozilla products: Multiple vulnerabilities)

    Mozilla developers fixed several bugs, including an issue with     modifying XPCNativeWrappers (CVE-2007-3738), a problem with event     handlers executing elements outside of the document (CVE-2007-3737),     and a cross-site scripting (XSS) vulnerability (CVE-2007-3736). They     also fixed a problem with promiscuous IFRAME access (CVE-2007-3089) and     an XULRunner URL spoofing issue with the wyciwyg:// URI and HTTP 302     redirects (CVE-2007-3656). Denials of Service involving corrupted     memory were fixed in the browser engine (CVE-2007-3734) and the     JavaScript engine (CVE-2007-3735). Finally, another XSS vulnerability     caused by a regression in the CVE-2007-3089 patch was fixed     (CVE-2007-3844).
  Impact :

    A remote attacker could entice a user to view a specially crafted web     page that will trigger one of the vulnerabilities, possibly leading to     the execution of arbitrary code or a Denial of Service. It is also     possible for an attacker to perform cross-site scripting attacks, which     could result in the exposure of sensitive information such as login     credentials.
  Workaround :

    There is no known workaround at this time.

Several flaws were found in the way Firefox processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause Firefox to crash or potentially execute arbitrary code as the user running Firefox. (CVE-2007-3734, CVE-2007-3735, CVE-2007-3737, CVE-2007-3738)

Several content injection flaws were found in the way Firefox handled certain JavaScript code. A web page containing malicious JavaScript code could inject arbitrary content into other web pages.
(CVE-2007-3736, CVE-2007-3089)

A flaw was found in the way Firefox cached web pages on the local disk. A malicious web page may be able to inject arbitrary HTML into a browsing session if the user reloads a targeted site. (CVE-2007-3656)

A number of security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox program, version 2.0.0.6.

This update provides the latest Firefox to correct these issues. As well, it provides Firefox 2.0.0.6 for older products.

This update brings Mozilla Firefox to security update version 2.0.0.5

Following security problems were fixed :

  - Crashes with evidence of memory corruption The usual     collection of stability fixes for crashes that look     suspicious but haven't been proven to be exploitable.
    (MFSA 2007-18)

    25 were in the browser engine, reported by Mozilla     developers and community members Bernd Mielke, Boris     Zbarsky, David Baron, Daniel Veditz, Jesse Ruderman,     Lukas Loehrer, Martijn Wargers, Mats Palmgren, Olli     Pettay, Paul Nickerson,and Vladimir Sukhoy.
    (CVE-2007-3734)

    7 were in the JavaScript engine reported by Asaf Romano,     Jesse Ruderman, Igor Bukanov. (CVE-2007-3735)

  - XSS using addEventListener and setTimeout. (MFSA 2007-19     / CVE-2007-3736)

    moz_bug_r_a4 reported that scripts could be injected     into another site's context by exploiting a timing issue     using addEventLstener or setTimeout.

  - frame spoofing Ronen Zilberman and Michal Zalewski both     reported that it was possible to exploit a timing issue     to inject content into about:blank frames in a page.
    (MFSA 2007-20 / CVE-2007-3089)

  - Privilege escallation using an event handler attached to     an element not in the document. (MFSA 2007-21 /     CVE-2007-3737)

    Reported by moz_bug_r_a4.

  - File type confusion due to %00 in name. (MFSA 2007-22 /     CVE-2007-3285)

    Ronald van den Heetkamp reported that a filename URL     containing %00 (encoded null) can cause Firefox to     interpret the file extension differently than the     underlying Windows operating system potentially leading     to unsafe actions such as running a program.

  - Remote code execution by launching Firefox from Internet     Explorer. (MFSA 2007-23 / CVE-2007-3670)

    Greg MacManus of iDefense and Billy Rios of Verisign     independently reported that links containing a quote (')     character could be used in Internet Explorer to launch     registered URL Protocol handlers with extra command-line     parameters. Firefox and Thunderbird are among those     which can be launched, and both support a '-chrome'     option that could be used to run malware.

    This problem does not affect Linux.

  - unauthorized access to wyciwyg:// documents. (MFSA     2007-24 / CVE-2007-3656)

    Michal Zalewski reported that it was possible to bypass     the same-origin checks and read from cached (wyciwyg)     documents

  - XPCNativeWrapper pollution shutdown and moz_bug_r_a4     reported two separate ways to modify an XPCNativeWrapper     such that subsequent access by the browser would result     in executing user-supplied code. (MFSA 2007-25 /     CVE-2007-3738)

Updated thunderbird packages that fix several security bugs are now available for Red Hat Enterprise Linux 4 and 5.

This update has been rated as having moderate security impact by the Red Hat Security Response Team.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the way Thunderbird processed certain malformed JavaScript code. A malicious HTML email message containing JavaScript code could cause Thunderbird to crash or potentially execute arbitrary code as the user running Thunderbird. JavaScript support is disabled by default in Thunderbird; these issues are not exploitable unless the user has enabled JavaScript. (CVE-2007-3089, CVE-2007-3734, CVE-2007-3735, CVE-2007-3736, CVE-2007-3737, CVE-2007-3738)

Users of Thunderbird are advised to upgrade to these erratum packages, which contain backported patches that correct these issues.

Several flaws were found in the way SeaMonkey processed certain malformed JavaScript code. A web page containing malicious JavaScript code could cause SeaMonkey to crash or potentially execute arbitrary code as the user running SeaMonkey. (CVE-2007-3734, CVE-2007-3735, CVE-2007-3737, CVE-2007-3738)

Several content injection flaws were found in the way SeaMonkey handled certain JavaScript code. A web page containing malicious JavaScript code could inject arbitrary content into other web pages.
(CVE-2007-3736, CVE-2007-3089)

A flaw was found in the way SeaMonkey cached web pages on the local disk. A malicious web page may be able to inject arbitrary HTML into a browsingsession if the user reloads a targeted site. (CVE-2007-3656)

Several remote vulnerabilities have been discovered in the Icedove mail client, an unbranded version of the Thunderbird client. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2007-3734     Bernd Mielke, Boris Zbarsky, David Baron, Daniel Veditz,     Jesse Ruderman, Lukas Loehrer, Martijn Wargers, Mats     Palmgren, Olli Pettay, Paul Nickerson and Vladimir     Sukhoy discovered crashes in the layout engine, which     might allow the execution of arbitrary code.

  - CVE-2007-3735     Asaf Romano, Jesse Ruderman and Igor Bukanov discovered     crashes in the JavaScript engine, which might allow the     execution of arbitrary code.

  - CVE-2007-3844     'moz_bug_r_a4' discovered that a regression in the     handling of'about:blank' windows used by addons may lead     to an attacker being able to modify the content of     websites.

  - CVE-2007-3845     Jesper Johansson discovered that missing sanitising of     double-quotes and spaces in URIs passed to external     programs may allow an attacker to pass arbitrary     arguments to the helper program if the user is tricked     into opening a malformed web page.

  - CVE-2007-5339     L. David Baron, Boris Zbarsky, Georgi Guninski, Paul     Nickerson, Olli Pettay, Jesse Ruderman, Vladimir Sukhoy,     Daniel Veditz, and Martijn Wargers discovered crashes in     the layout engine, which might allow the execution of     arbitrary code.

  - CVE-2007-5340     Igor Bukanov, Eli Friedman, and Jesse Ruderman     discovered crashes in the JavaScript engine, which might     allow the execution of arbitrary code. Generally,     enabling JavaScript in Icedove is not recommended.

The Mozilla products in the oldstable distribution (sarge) are no longer supported with security updates.

ID	Name	Product	Family	Published	Updated	Severity
25753	RHEL 4 / 5 : firefox (RHSA-2007:0724)	Nessus	Red Hat Local Security Checks	7/23/2007	1/14/2021	high
25888	GLSA-200708-09 : Mozilla products: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	8/15/2007	1/6/2021	high
60228	Scientific Linux Security Update : firefox on SL5.x, SL4.x, SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	high
25836	Mandrake Linux Security Advisory : mozilla-firefox (MDKSA-2007:152)	Nessus	Mandriva Local Security Checks	8/2/2007	1/6/2021	high
29361	SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 3932)	Nessus	SuSE Local Security Checks	12/13/2007	1/14/2021	high
25740	CentOS 4 / 5 : thunderbird (CESA-2007:0723)	Nessus	CentOS Local Security Checks	7/23/2007	1/4/2021	high
60229	Scientific Linux Security Update : seamonkey on SL4.x, SL3.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	8/1/2012	1/14/2021	high
27546	Debian DSA-1391-1 : icedove - several vulnerabilities	Nessus	Debian Local Security Checks	10/25/2007	1/4/2021	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high