This host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities.

Successful attempt could allow local attackers to bypass security restrictions and gain the privileges. Impact Level: System/Application

Upgrade to Mozilla Firefox version 13.0 or later, For updates refer to http://www.mozilla.com/en-US/firefox/all.html Upgrade to SeaMonkey version to 2.10 or later, http://www.mozilla.org/projects/seamonkey/ Upgrade to Thunderbird version to 13.0 or later, http://www.mozilla.org/en-US/thunderbird/

- Mozilla updater allows to load a local DLL file in a privileged context. - The 'Updater.exe' in the Windows Updater Service allows to load an arbitrary local wsock32.dll file, which can then be run with the same system privileges used by the service.

SeaMonkey version 2.9, Thunderbird version 12.0 and Mozilla Firefox version 12.0 on Windows

• http://secunia.com/advisories/49366
• http://secunia.com/advisories/49368
• http://www.mozilla.org/security/announce/2012/mfsa2012-35.html

---

Updated on 2015-03-25