CERT mailing list archives

Mozilla Releases Multiple Updates


From: "US-CERT" <US-CERT () public govdelivery com>
Date: Wed, 26 Jun 2013 14:16:34 -0500

US Computer Emergency Readiness Team banner graphic

National Cyber Awareness System:

Mozilla Releases Multiple Updates [ 
https://www.us-cert.gov/ncas/current-activity/2013/06/26/Mozilla-Releases-Multiple-Updates ] 06/26/2013 01:57 PM EDT 
Original release date: June 26, 2013

The Mozilla Foundation has released updates for the following products to address multiple vulnerabilities.


  * Firefox 22.0 
  * Firefox ESR 17.0.7 
  * Thunderbird 17.0.7 
  * Thunderbird ESR 17.0.7 

These vulnerabilities could allow a remote attacker to execute arbitrary code and potentially cause a cross-site 
scripting attack, domain spoofing, denial-of-service condition, local privilege escalation, and information disclosure.

US-CERT encourages users and administrators to review the Mozilla Foundation Advisory for Firefox 22.0 [ 
http://www.mozilla.org/security/known-vulnerabilities/firefox.html ], Firefox ESR 17.0.7 [ 
http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html ], Thunderbird 17.0.7 [ 
http://www.mozilla.org/security/known-vulnerabilities/thunderbird.html ], and Thunderbird ESR 17.0.7 [ 
http://www.mozilla.org/security/known-vulnerabilities/thunderbirdESR.html ] and apply any necessary updates to help 
mitigate the risk.

________________________________________________________________________

This product is provided subject to this Notification [ http://www.us-cert.gov/privacy/notification ] and this Privacy 
& Use [ http://www.us-cert.gov/privacy/ ] policy.

________________________________________________________________________

OTHER RESOURCES: Contact Us [ http://www.us-cert.gov/contact-us/ ] | Security Publications [ 
http://www.us-cert.gov/security-publications ] | Alerts and Tips [ http://www.us-cert.gov/ncas ] | Related Resources [ 
http://www.us-cert.gov/related-resources ] 

STAY CONNECTED: Sign up for email updates [ http://public.govdelivery.com/accounts/USDHSUSCERT/subscriber/new ] 


Current thread: