Firefox & Thunderbird released - SANS Internet Storm Center

SANS ISC InfoSec Forums

Firefox & Thunderbird released
Mozilla decided to join the mayhem on Black Tuesday this month and released Firefox and Thunderbird. This updates to: Firefox 21.0 Firefox ESR 17.0.6 Thunderbird 17.0.6 Thunderbird ESR 17.0.6 Release notes: https://www.mozilla.org/security/known-vulnerabilities/firefox.html Security content o fthe updates: MFSA 2013-48 Memory corruption found using Address Sanitizer CVE-2013-1676, CVE-2013-1677, CVE-2013-1678, CVE-2013-1679, CVE-2013-1680 and CVE-2013-1681 MFSA 2013-47 Uninitialized functions in DOMSVGZoomEvent CVE-2013-1675 MFSA 2013-46 Use-after-free with video and onresize event CVE-2013-1674 MFSA 2013-45 Mozilla Updater fails to update some Windows Registry entries CVE-2013-1673 and CVE-2012-1942 MFSA 2013-44 Local privilege escalation through Mozilla Maintenance Service CVE-2013-1672 MFSA 2013-43 File input control has access to full path CVE-2013-1671 MFSA 2013-42 Privileged access for content level constructor CVE-2013-1670 MFSA 2013-41 Miscellaneous memory safety hazards (rv:21.0 / rv:17.0.6) CVE-2013-0801 and CVE-2013-1669 -- Swa Frantzen -- Section 66	Swa 760 Posts May 14th 2013
Thread locked Subscribe	May 14th 2013 9 years ago