Firefox / Mozilla / Thunderbird Multiple Vulnerabilities - Secunia Advisories - Vulnerability Intelligence

Firefox / Mozilla / Thunderbird Multiple Vulnerabilities
Secunia Advisory:	SA14017	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2005-01-31
Popularity:	25,229 views

Critical:	Moderately critical
Impact:	Security Bypass Cross Site Scripting Spoofing Exposure of system information Exposure of sensitive information
Where:	From remote
Solution Status:	Vendor Patch

Software:	Mozilla 0.x Mozilla 1.0 Mozilla 1.1 Mozilla 1.2 Mozilla 1.3 Mozilla 1.4 Mozilla 1.5 Mozilla 1.6 Mozilla 1.7.x Mozilla Firefox 0.x Mozilla Thunderbird 0.x

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2005-0141 CVE-2005-0143 CVE-2005-0144 CVE-2005-0145 CVE-2005-0146 CVE-2005-0147 CVE-2005-0148 CVE-2005-0149 CVE-2005-0150

Description: Details have been released about several vulnerabilities in Firefox, Mozilla and Thunderbird. These can be exploited by malicious people to bypass certain security restrictions, conduct spoofing and script insertion attacks and disclose sensitive and system information. 1) An error in the handling of links with a custom getter and "toString()" function can be exploited to link to local resources by tricking a user into opening a malicious link in a new tab. The vulnerability has been reported in versions prior to Firefox 1.0 and Mozilla 1.7.5. 2) An error in the displaying of the SSL lock icon can be exploited by a malicious web site to force the SSL lock icon to appear by loading a binary file from a secure server. The vulnerability has been reported in versions prior to Firefox 1.0 and Mozilla 1.7.5. 3) A malicious web site can spoof the SSL lock icon via a specially crafted "view-source:" URL. The vulnerability has been reported in versions prior to Firefox 1.0 and Mozilla 1.7.5. 4) Script generated clicks are treated similar as normal clicks and can e.g. be exploited to trigger downloads without user prompts. The vulnerability has been reported in versions prior to Firefox 1.0. 5) An error in the handling of script generated middle-click events can be exploited to disclose the clipboard content on certain systems. The vulnerability has been reported in versions prior to Firefox 1.0 and Mozilla 1.7.5. 6) An error in the handling of "407" proxy authorization requests can be exploited via arbitrary SSL servers to disclose NTLM or SPNEGO credentials. Successful exploitation requires that a proxy has been configured. The vulnerability has been reported in versions prior to Firefox 1.0 and Mozilla 1.7.5. 7) The problem is that "javascript:" URLs are loaded by the operating system's default handler (e.g. Microsoft Internet Explorer) from the mail client. The problem has been reported in versions prior to Thunderbird 0.9. 8) The mail client incorrectly responds to cookie requests over HTTP. The vulnerability has been reported in Thunderbird 0.6 through 0.9 and Mozilla 1.7 through 1.7.3. 9) The problem is that Livefeed bookmarks can contain "javascript:" and "data:" URLs. This can be exploited to inject arbitrary HTML and script code, which will be executed in a user's browser session in context of the currently loaded site when the Livefeed is updated. The vulnerability has been reported in versions prior to Firefox 1.0. Solution: Mozilla: Update to version 1.7.5. http://www.mozilla.org/products/mozilla1.x/ Firefox: Update to version 1.0. http://www.mozilla.org/products/firefox/ Thunderbird: Update to version 1.0. http://www.mozilla.org/products/thunderbird/ Provided and/or discovered by: 1) Jesse Ruderman 2) Kylotan 3) Kohei Yoshino 4) Omar Khan 5) Jesse Ruderman 6) Christopher Nebergall 7) Tom Braun 8) Michiel van Leeuwen 9) Omar Khan Original Advisory: 1) http://www.mozilla.org/security/announce/mfsa2005-01.html 2) http://www.mozilla.org/security/announce/mfsa2005-03.html 3) http://www.mozilla.org/security/announce/mfsa2005-04.html 4) http://www.mozilla.org/security/announce/mfsa2005-07.html 5) http://www.mozilla.org/security/announce/mfsa2005-08.html 6) http://www.mozilla.org/security/announce/mfsa2005-09.html 7) http://www.mozilla.org/security/announce/mfsa2005-10.html 8) http://www.mozilla.org/security/announce/mfsa2005-11.html 9) http://www.mozilla.org/security/announce/mfsa2005-12.html

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	6
New vulnerabilities:	7
Updated advisories:	9

Highly // 106 views

BitDefender Antivirus PDF Processing Memory Corruption Vulnerability

Moderately // 98 views

xt:Commerce SQL Injection Vulnerability

Less // 90 views

Softbiz Classifieds Script "msg" Cross-Site Scripting Vulnerability

Not // 120 views

Checkpoint VPN-1 Information Disclosure Vulnerability

Moderately // 139 views

Avaya CMS Solaris "sadmind" Buffer Overflow Vulnerability

Moderately // 149 views

EMC Control Center SAN Manager Multiple Vulnerabilities

20th Nov, 2008

New advisories:	24
New vulnerabilities:	48
Updated advisories:	33

Highly // 390 views

Alex Multiple Products File Upload Vulnerability

Moderately // 376 views

ClipShare "chid" SQL Injection Vulnerability

Moderately // 367 views

MauryCMS "c" SQL Injection Vulnerability

Less // 404 views

MyTopix "send" SQL Injection Vulnerability

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.