The host is installed with Mozilla Firefox, Seamonkey or Thunderbird and is prone to multiple vulnerabilities.

Successful exploitation will allow remote attackers to obtain sensitive information or execute arbitrary code in the context of the user running the affected application. Impact Level: Application

Upgrade to Firefox version 3.5.19, 3.6.17, 4.0.1 or later http://www.mozilla.com/en-US/firefox/all.html Upgrade to Seamonkey version 2.0.14 or later http://www.seamonkey-project.org/releases/ Upgrade to Thunderbird version 3.1.10 or later http://www.mozillamessaging.com/en-US/thunderbird/

- An error in the implementation of the 'resource:' protocol can be exploited to perform directory traversal attacks and disclose sensitive information. - Multiple errors in the browser engine can be exploited to corrupt memory and potentially execute arbitrary code.

SeaMonkey versions before 2.0.14. Thunderbird version before 3.1.10 Mozilla Firefox versions 3.5.19 and 3.6.x before 3.6.17.

• http://secunia.com/advisories/44357/
• http://www.mozilla.org/security/announce/2011/mfsa2011-12.html
• http://www.vupen.com/english/advisories/2011/1127

---

Updated on 2015-03-25