The host is installed with Mozilla firefox/thunderbird and is prone to remote code execution vulnerability.

Successful exploitation will let attackers to execute arbitrary code in the context of the user running an affected application. Impact Level: Application

Upgrade to Mozilla Firefox version 3.6.25 or later, For updates refer to http://www.mozilla.com/en-US/firefox/all.html Upgrade to Thunderbird version to 3.1.17 or later http://www.mozilla.org/en-US/thunderbird/

The flaw is due to not considering '.jar' files to be executable files which allows remote attackers to bypass intended access restrictions via a crafted file.

Thunderbird version prior to 3.1.17 Mozilla Firefox version prior to 3.6.25

• http://www.mozilla.org/security/announce/2011/mfsa2011-59.html
• http://www.securityfocus.com/bid/51139/discuss

---

Updated on 2015-03-25