Secunia
|
|

|
|
|
|
|
|
|
Release Date: 2012-02-01 Views: 3,096
Where:
From remote
Impact:
Exposure of sensitive information, System access,
Solution Status:
Vendor Patch
CVE Reference(s):
A weakness and multiple vulnerabilities have been reported in Mozilla Firefox and Thunderbird, which can be exploited by malicious people to disclose certain sensitive information and compromise a user's system.
For more information:
SA47816
1) The weakness is caused due to an error when handling certain XMLHttpRequest objects generated via a proxy, which can be exploited to disclose certain sensitive information.
Solution:
Update to Firefox version 3.6.26 or Thunderbird version 3.1.18.
Provided and/or discovered by:
1) Gregory Fleischer
Original Advisory:
http://www.mozilla.org/security/announce/2012/mfsa2012-01.html
http://www.mozilla.org/security/announce/2012/mfsa2012-02.html
http://www.mozilla.org/security/announce/2012/mfsa2012-04.html
http://www.mozilla.org/security/announce/2012/mfsa2012-07.html
http://www.mozilla.org/security/announce/2012/mfsa2012-08.html
Deep Links:
Links available to Secunia VIM customers
Please provide information about patches, mitigating factors, new versions, exploits, faulty patches, links, and other relevant data by posting comments to this Advisory. You can also send this information to vuln@secunia.com
Subject: Mozilla Firefox / Thunderbird Multiple Vulnerabilities
|
No posts yet |
|
You must be logged in to post a comment. |
Not a customer already?Learn more about how our market leading Vulnerability Management solutions can help you manage risk and ensure compliance. |