MGASA-2013-0287

Dashboard / Vulnerabilities / MGASA-2013-0287

MGASA-2013-0287

Summary: Updated firefox and thunderbird packages fix security vulnerabilities

Details: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox or Thunderbird (CVE-2013-1718, CVE-2013-1722, CVE-2013-1725, CVE-2013-1730, CVE-2013-1732, CVE-2013-1735, CVE-2013-1736). A flaw was found in the way Firefox and Thunderbird handled certain DOM JavaScript objects. An attacker could use this flaw to make JavaScript client or add-on code make incorrect, security sensitive decisions (CVE-2013-1737).

References: https://advisories.mageia.org/MGASA-2013-0287.html, https://bugs.mageia.org/show_bug.cgi?id=11250, http://www.mozilla.org/security/announce/2013/mfsa2013-76.html, http://www.mozilla.org/security/announce/2013/mfsa2013-79.html, http://www.mozilla.org/security/announce/2013/mfsa2013-82.html, http://www.mozilla.org/security/announce/2013/mfsa2013-83.html, http://www.mozilla.org/security/announce/2013/mfsa2013-88.html, http://www.mozilla.org/security/announce/2013/mfsa2013-89.html, http://www.mozilla.org/security/announce/2013/mfsa2013-90.html, http://www.mozilla.org/security/announce/2013/mfsa2013-91.html, http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html, https://rhn.redhat.com/errata/RHSA-2013-1268.html, https://rhn.redhat.com/errata/RHSA-2013-1269.html