Gentoo update for Mozilla Products - Advisories

Software Inspectors

	Scan Online

	Personal (PSI)

	Network (NSI 2.0)

Solutions For

	Security Professionals

	Security Vendors

Free Solutions For

	Open Communities

	Journalists & Media

Secunia Advisories

	Search

	Historic Advisories

	Listed By Product

	Listed By Vendor

	Statistics / Graphs

	Secunia Research

	Report Vulnerability

	About Advisories

Virus Information

	Chronological List

	Last 10 Virus Alerts

	About Virus Information

Secunia Customers

	Customer Area

Gentoo update for Mozilla Products

Secunia Advisory:	SA26460
Release Date:	2007-08-15

Critical:	Highly critical
Impact:	Security Bypass Spoofing Exposure of sensitive information DoS System access
Where:	From remote
Solution Status:	Vendor Patch

OS:	Gentoo Linux 1.x


CVE reference:	CVE-2007-3089 (Secunia mirror) CVE-2007-3656 (Secunia mirror) CVE-2007-3734 (Secunia mirror) CVE-2007-3735 (Secunia mirror) CVE-2007-3736 (Secunia mirror) CVE-2007-3737 (Secunia mirror) CVE-2007-3738 (Secunia mirror) CVE-2007-3844 (Secunia mirror)

	Want to know the next time vulnerabilities are fixed in this product? - Companies can be alerted via email and SMS!

Description: Gentoo has issued an update for Mozilla Products. This fixes some vulnerabilities, which can be exploited by malicious people to disclose potentially sensitive information, conduct spoofing and cross-site scripting attacks, and potentially compromise a user's system. For more information: SA25984 SA26095 SA26288 Solution: Update to the latest versions: "www-client/mozilla-firefox-2.0.0.6" or later "www-client/mozilla-firefox-bin-2.0.0.6" or later "mail-client/mozilla-thunderbird-2.0.0.6" or later "mail-client/mozilla-thunderbird-bin-2.0.0.6" or later "www-client/seamonkey-1.1.4" or later "www-client/seamonkey-bin-1.1.4" or later "net-libs/xulrunner-1.8.1.6" or later Original Advisory: http://www.gentoo.org/security/en/glsa/glsa-200708-09.xml Other References: SA25984: http://secunia.com/advisories/25984/ SA26095: http://secunia.com/advisories/26095/ SA26288: http://secunia.com/advisories/26288/



Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

1425 Related Secunia Security Advisories, displaying 10

1. Gentoo update for postfix

2. Gentoo update for stunnel

3. Gentoo update for clamav

4. Gentoo update for openldap

5. Gentoo update for acroread

6. Gentoo update for uudeview and nzbget

7. Gentoo update for dhcp

8. Gentoo update for libxslt

9. Gentoo update for wireshark

10. Gentoo update for Mozilla products

Show all related advisories

Send Feedback to Secunia

If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	phpJobScheduler "installed_conf ig_file" File Inclusion Vulnerabilities

2.	Subdreamer Light Global Variables SQL Injection Vulnerability

3.	HP TCP/IP Services for OpenVMS Finger Format String Vulnerability

4.	dotProject SQL Injection and Cross-Site Scripting

5.	Caudium "configvar" Insecure Temporary Files

6.	Slackware update for amarok

7.	Adium MSN SLP Message Integer Overflow Vulnerabilities

8.	Blogn Cross-Site Scripting and Cross-Site Request Forgery

9.	Novell eDirectory Multiple Vulnerabilities

10.	Sun Solaris Kernel Covert Channel Security Bypass