Secunia Logo
 
Slackware update for mozilla-firefox
Secunia Advisory: SA29594
Release Date: 2008-03-31
Popularity: 2,309 views

Critical:
Highly critical
Impact: Cross Site Scripting
Spoofing
Exposure of sensitive information
System access
Security Bypass
Where: From remote
Solution Status: Vendor Patch

OS:Slackware Linux 11.0

Subscribe: Instant alerts on relevant vulnerabilities

CVE reference:CVE-2007-4879
CVE-2008-1195
CVE-2008-1233
CVE-2008-1234
CVE-2008-1235
CVE-2008-1236
CVE-2008-1237
CVE-2008-1238
CVE-2008-1240
CVE-2008-1241


Description:
Slackware has issued an update for mozilla-firefox. This fixes some vulnerabilities, which can be exploited by malicious people to bypass certain security restrictions, disclose potentially sensitive information, conduct cross-site scripting and phishing attacks, and potentially compromise a user's system.

For more information:
SA29526

Solution:
Apply updated packages.

Slackware 10.2:
ftp://ftp.slackware.com/pub/slackware...s/mozilla-firefox-2.0.0.13-i686-1.tgz

Slackware 11.0:
ftp://ftp.slackware.com/pub/slackware...s/mozilla-firefox-2.0.0.13-i686-1.tgz

Slackware 12.0:
ftp://ftp.slackware.com/pub/slackware...s/mozilla-firefox-2.0.0.13-i686-1.tgz

Slackware -current:
ftp://ftp.slackware.com/pub/slackware...p/mozilla-firefox-2.0.0.13-i686-1.tgz

Original Advisory:
http://www.slackware.org/security/vie...=2008&m=slackware-security.380784

Other References:
SA29526:
http://secunia.com/advisories/29526/


Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.

Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.

Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
  
Latest Advisories

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.

Ideas, suggestions, and other feedback are most welcome.

Most Popular - 3 Hours

1. Sun Java JDK / JRE Multiple Vulnerabilities // 536 views
2. Adobe Flash Player Multiple Security Issues and Vulnerabilities // 156 views
3. PHP ZipArchive::extractTo() Directory Traversal Vulnerability // 110 views
4. Nagios Unspecified CGI Vulnerability // 110 views
5. RadAsm ".rap" Processing Buffer Overflow Vulnerability // 75 views
6. Apple QuickTime Multiple Vulnerabilities // 70 views
7. Drupal Storm Module SQL Injection Vulnerabilities // 70 views
8. RSyslog "AllowedSender" Security Bypass Vulnerability // 70 views
9. PowerDNS CH HINFO Denial of Service Vulnerability // 64 views
10. Check Up System for Thai Healthcare "search" SQL Injection // 63 views