-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
National Cyber Alert System
Cyber Security Alert SA06-038A
Multiple Vulnerabilities in Mozilla Products
Original release date: February 7, 2006
Last revised: --
Source: US-CERT
Systems Affected
* Mozilla web browser
* Mozilla mail client
* Firefox web browser
* Thunderbird mail client
Overview
By taking advantage of one or more vulnerabilities in Mozilla
products, an attacker may be able to take control of your computer.
Solution
Upgrade to the latest version of Firefox
Mozilla has released an updated version of Firefox to correct these
problems.
Description
There are vulnerabilities in various features of the Mozilla web
browser, Mozilla email client, Firefox web browser, and Thunderbird
email client. Some of the vulnerabilities are connected to the way
the application handles URLs or images. In one instance, an
attacker could cause an application to crash or could take control
of your computer by convincing you to view a malicious web site or
email message.
For more technical information, see US-CERT Technical Alert
TA06-038A.
References
* Mozilla Foundation Security Advisory 2006-04 -
<http://www.mozilla.org/security/announce/mfsa206-04.html>
* US-CERT Technical Cyber Security Alert TA06-038A -
<http://www.us-cert.gov/cas/techalerts/TA05-038A.html>
* US-CERT Vulnerability Note VU#592425 -
<http://www.kb.cert.org/vuls/id/592425>
* US-CERT Vulnerability Note VU#759273 -
<http://www.kb.cert.org/vuls/id/759273>
____________________________________________________________________
The most recent version of this document can be found at:
<http://www.us-cert.gov/cas/alerts/SA06-038A.html>
____________________________________________________________________
Feedback can be directed to US-CERT. Please send email to
<cert@cert.org> with "SA06-038A Feedback VU#592425" in the subject.
____________________________________________________________________
Mailing list information:
<http://www.us-cert.gov/cas/>
____________________________________________________________________
Produced 2006 by US-CERT, a government organization.
Terms of use:
<http://www.us-cert.gov/legal.html>
____________________________________________________________________
Revision History
February 7, 2006: Initial release
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.1 (GNU/Linux)
iQEVAwUBQ+jrUH0pj593lg50AQKaXwf/T+952fhKRtLMs8hrrfAO/ZVqqgxObDjQ
6bSgtnXq2SznygUEYE++PjojtkwodRa8m3aUtvtuRDq2GKhk16A2kaevHeZVrxOT
2m743SBeeDUR8OzDirQc86dy8jRVXxZaMLY8hhlT9WftA4BtsLP5JdhxwTrVr6Q6
9cCPF28bkjcpB3Wiyx+nhN8UJE4dtrxUZJ1jI/z9vqzpKUGrwIh2lRxb/TB0N5Cx
6AUbzuBsuZEH/7i7MjstSQxVBD+ZrlaKd+hyxgotI83+GPiVfPau8OCs1PkBNYBj
pGGxEkaIXLjHx4MreszfCkmMYbXC5Tn5dja6qeA2RbpRFscZSr5stA==
=Fh0f
-----END PGP SIGNATURE-----
