The host is installed with Mozilla Firefox/Seamonkey/Thunderbird and is prone to insecure library loading vulnerability.

Successful exploitation will allow the attackers to execute arbitrary code and conduct DLL hijacking attacks. Impact Level: Application

Upgrade Thunderbird to 3.1.3 or later Upgrade SeaMonkey to 2.0.7 or later Upgrade Firefox 3.6.9 or later http://www.mozilla.com/en-US/firefox/all.html http://www.mozillamessaging.com/en-US/thunderbird

The flaw is due to the application insecurely loading certain librairies from the current working directory, which could allow attackers to execute arbitrary code by tricking a user into opening a file.

Thunderbird version 3.1.2 SeaMonkey version 2.0.6 Firefox version 3.6.8 and prior on Windows.

• http://secunia.com/advisories/41095
• http://www.exploit-db.com/exploits/14783/
• http://www.securityfocus.com/archive/1/archive/1/513324/100/0/threaded
• http://www.vupen.com/english/advisories/2010/2169

---

Updated on 2015-03-25