A vulnerability has been reported in Mozilla products, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to an error within the handling of "about:blank" pages loaded by chrome in an addon. This can be exploited to execute script code under chrome privileges by e.g. clicking on a link opened in an "about:blank" window created and populated in certain ways by an addon.

Successful exploitation requires that certain addons are installed.

The vulnerability is reported in the following products and versions:
* Firefox 2.0.0.5
* Thunderbird 2.0.0.5
* Thunderbird 1.5.0.x
* SeaMonkey 1.1.3

Solution
Update to the latest versions:
Further details available to Secunia VIM customers

Provided and/or discovered by
moz_bug_r_a4

Changelog
Further details available to Secunia VIM customers

Original Advisory
http://www.mozilla.org/security/announce/2007/mfsa2007-26.html
http://www.mozilla.org/security/announce/2007/mfsa2007-27.html
https://bugzilla.mozilla.org/show_bug.cgi?id=388121

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers