Ubuntu update for mozilla-firefox
Secunia Advisory: SA15528
Release Date: 2005-05-27
Popularity: 6,657 views

Critical:
Highly critical
Impact: Cross Site Scripting
System access
Where: From remote
Solution Status: Vendor Patch

OS:Ubuntu Linux 5.04

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2005-1476
CVE-2005-1477
CVE-2005-1531
CVE-2005-1532


Description:
Ubuntu has issued an update for mozilla-firefox. This fixes two vulnerabilities, which can be exploited by malicious people to conduct cross-site scripting attacks and compromise a user's system.

For more information:
SA15292

Solution:
Apply updated packages.

-- Ubuntu 5.04 (Hoary Hedgehog) --

Source archives:

http://security.ubuntu.com/ubuntu/poo...illa-firefox_1.0.2-0ubuntu5.3.diff.gz
Size/MD5: 844189 0cb2c9138a00d4c8cbe439c96239c019
http://security.ubuntu.com/ubuntu/poo.../mozilla-firefox_1.0.2-0ubuntu5.3.dsc
Size/MD5: 1696 b6f9a2fd0df83ad93436e0a9e0afcafb
http://security.ubuntu.com/ubuntu/poo...fox/mozilla-firefox_1.0.2.orig.tar.gz
Size/MD5: 41023585 7e98ce4aefc5ea9b5f1f35b7a0c58f60

amd64 architecture (Athlon64, Opteron, EM64T Xeon)

http://security.ubuntu.com/ubuntu/poo...irefox-dev_1.0.2-0ubuntu5.3_amd64.deb
Size/MD5: 2630106 6f1e278ee5e205b5ed277e2fedae640e
http://security.ubuntu.com/ubuntu/poo...-inspector_1.0.2-0ubuntu5.3_amd64.deb
Size/MD5: 157070 cbca0d235bc0ed4048afb1ea97fd5912
http://security.ubuntu.com/ubuntu/poo...me-support_1.0.2-0ubuntu5.3_amd64.deb
Size/MD5: 56344 62f0466b21c60e23e360d7a01d129a6b
http://security.ubuntu.com/ubuntu/poo...la-firefox_1.0.2-0ubuntu5.3_amd64.deb
Size/MD5: 9757086 fa6c87f80a2142e0b5a71b3a5a93d4c6

i386 architecture (x86 compatible Intel/AMD)

http://security.ubuntu.com/ubuntu/poo...firefox-dev_1.0.2-0ubuntu5.3_i386.deb
Size/MD5: 2630048 3ec6273947d6770635e3f6187322163d
http://security.ubuntu.com/ubuntu/poo...m-inspector_1.0.2-0ubuntu5.3_i386.deb
Size/MD5: 151962 3621cb9df77851fb9bb20acb67ca762f
http://security.ubuntu.com/ubuntu/poo...ome-support_1.0.2-0ubuntu5.3_i386.deb
Size/MD5: 52944 6cd2ad56c4ca6e21acb772d93f7b3242
http://security.ubuntu.com/ubuntu/poo...lla-firefox_1.0.2-0ubuntu5.3_i386.deb
Size/MD5: 8789122 e1e5baedeb8583af2c0bd83667a00c58

powerpc architecture (Apple Macintosh G3/G4/G5)

http://security.ubuntu.com/ubuntu/poo...efox-dev_1.0.2-0ubuntu5.3_powerpc.deb
Size/MD5: 2630154 91ee224d4231d50c54645d9978faf5d4
http://security.ubuntu.com/ubuntu/poo...nspector_1.0.2-0ubuntu5.3_powerpc.deb
Size/MD5: 150728 ee5a62a980629bfb4ac6fd6f5bbebe6a
http://security.ubuntu.com/ubuntu/poo...-support_1.0.2-0ubuntu5.3_powerpc.deb
Size/MD5: 55580 50cc0fc42ac4da395f416943522be4c9
http://security.ubuntu.com/ubuntu/poo...-firefox_1.0.2-0ubuntu5.3_powerpc.deb
Size/MD5: 8446932 4796ec228c2b08010550bda6f5d366ff

Original Advisory:
http://www.ubuntulinux.org/support/documentation/usn/usn-134-1

Other References:
SA15292:
http://secunia.com/advisories/15292/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. phpJobScheduler "installed_config_file" File Inclusion Vulnerabilities // 56 views
2. Subdreamer Light Global Variables SQL Injection Vulnerability // 38 views
3. PluggedOut Blog "index.php" SQL Injection Vulnerabilities // 27 views
4. Microsoft Word Malformed Object Pointer Vulnerability // 18 views
5. Drupal Content Construction Kit Script Insertion Vulnerabilities // 16 views
6. phpBB Cross Site Scripting and Unspecified Vulnerabilities // 15 views
7. CS-Cart "cs_cookies" SQL Injection Vulnerability // 14 views
8. Netgear WN802T Wireless Access Point Two Vulnerabilities // 14 views
9. Avaya Message Storage Server Input Validation Vulnerabilities // 13 views
10. Sun Java JDK / JRE Multiple Vulnerabilities // 13 views