Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security US-CERT-Alerts
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

US-CERT Cyber Security Alert SA04-261A -- Multiple vulnerabilities in Mo

from [US-CERT Alerts] Network Security [Permanent Link]
Subject: US-CERT Cyber Security Alert SA04-261A -- Multiple vulnerabilities in Mozilla products
Date: Fri, 17 Sep 2004 16:06:04 -0400 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

                    Cyber Security Alert SA04-261A
              Multiple vulnerabilities in Mozilla products

   Original release date: September 17, 2004
   Last revised: --
   Source: US-CERT

Systems Affected

     * Mozilla Suite (Mozilla web browser, Mozilla Mail)
     * Firefox web browser
     * Thunderbird email client

Overview

     By taking advantage of one or more vulnerabilities in Mozilla
     products, an attacker may be able to take control of your computer.

Solution

 Upgrade to the latest version

     Mozilla has released updated versions of the affected products. You
     can download the latest versions:
     * Mozilla
     * Firefox
     * Thunderbird

Description

     There are vulnerabilities in various features of Mozilla's web
     browsers and email clients. Some of the vulnerabilities are
     connected to the way the application handles URLs or images. In one
     instance, an attacker could cause an application to crash or could
     take control of your computer by convincing you to view a malicious
     web site or email message.

     For more technical information, see US-CERT Technical Alert
     TA04-261A.

References

     * Known Vulnerabilities in Mozilla -
       <http://www.mozilla.org/projects/security/known-vulnerabilities.ht
       ml>
     * US-CERT Technical Cyber Security Alert TA04-261A -
       <http://www.us-cert.gov/cas/techalerts/TA04-261A.html>
   _________________________________________________________________

   Feedback can be directed to US-CERT.
   _________________________________________________________________
     
   Copyright 2004 Carnegie Mellon University.
     
   Terms of use: <http://www.us-cert.gov/legal.html>

   This document is available from  

   <http://www.us-cert.gov/cas/alerts/SA04-261A.html>

   Revision History

     September 17, 2004: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)

iQEVAwUBQUtC8RhoSezw4YfQAQL4gAf/Wu5pYhSMCOGAjBH+pdAFFTaEGuBsRUne
LqUdj0I1lTdpEPW7ciBbV+C6iBdYM7slcr+k4mlnRD/tL2HWmpg8ebAqo2SYpURB
q2mWTksR7wgCWyw1GLOitfNliwNjLs6jg01aFq4xsBnnBaLCRbwmUktuer8zuqDL
3ANJbMF9LHRFB5uex7TMKuAHuq4KQy6zShoxmC71p4nWSBZ+sK8DYzKdDV90/M34
5Qwyuw9l73STw3wRULm2dKOPp5nRmlSubxD8Ftrhc08ZHssD4373Tv7rBAkVnzus
yu4If21Wq8ISXVSNAUBAmsMWJHR3unqq6XVrcikqSKwDU8i0wVG0WQ==
=XPw9
-----END PGP SIGNATURE-----
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
  • US-CERT Cyber Security Alert SA04-261A -- Multiple vulnerabilities in Mozilla products, US-CERT Alerts <=
Previous by Date:  US-CERT Cyber Security Alert SA04-258A -- Vulnerability in Microsoft Image Processing Component, US-CERT Alerts
Previous by Thread:  US-CERT Cyber Security Alert SA04-258A -- Vulnerability in Microsoft Image Processing Component, US-CERT Alerts
Indexes:  [Date] [Thread] [Top] [All Lists]