« CyTRAP Labs’ Choice - free tool - protecting yourself against Russian botnets
CyTRAP Labs reminder - 2008-04-03 - update Quicktime (iTunes) »

CyTRAP Labs’ reminder - 2008-03-27 - security update for Mozilla Firefox, Mozilla Thunderbird, and SeakMonkey

The Mozilla Foundation has issued an important security patch for Mozilla Firefox, Mozilla Thunderbird and Seamonkey that fix 7 critical vulnerabilities (Please click on the link, choose Login as guest - click on this link again and voila free access)
If you have chosen the option that the program checks regularly with the Mozilla Foundation’s website for updates , the security update should have been downloaded BY NOW automatically or next time you log onto the internet (for more details see below

This vulnerabilitiy exposes you to a risk that we rate as follows:

CyTRAP Labs security risk barometer - 4 = critical
low elevated moderate-
ly critical		 critical severe
1 2 3 4 5

For more information and explanations about the CyTRAP Labs risk barometer you can visit here:CyTRAP Labs security risk barometer

WHAT CAN YOU DO?

CyTRAP Labs security risk barometer - 4 = critical
operating system affected
affected software
  • Mozilla Firefox - all prior versions to 2.0.0.12,
  • Thunderbird - all prior versions to 2.0.0.12, and
  • SeaMonkey - all prior versions to 1.1.8
risk rating given for these vulnerabilities is a 4 (four)
where is the patch? depending upon the program you run:

To download any of these versions you need admin rights on your PC of course
what should one do? The Software Update preference pane is set to automatically check by default if you have the latest version installed.Hence, once you go onto the internet, the latest version should be downloaded automatically, if you are not sure, read below we tell you how to check and download manually if need be - quick and easy.
how can I check that I do have the latest version installed click Help > About Firefox or About SeaMonkey from the Help menu
this shows which version runs on your machine
or click onHelp > check for updates - if you do not have latest version already installed, Firefox will download it now if you have administrator rights for this PC
not patching the vulnerability could cause what kind of damage to my PC? 2 could be exploited by attackers to execute arbitrary code by tricking a user into opening a malicious file2 bypass security restrictions, cause a denial of service or compromise an affected system.2 being executed on your machine without your authorization.a few more nasty things…
where can one get more details from the vendor? vendor has issued several security bulletins:MFSA 2008-14 through MFSA 2008-19 - March 25, 2008
where can you get more technical information about the vulnerabilities CVE-2008-1241, CVE-2008-1195, CVE-2008-1240, CVE-2008-4879, CVE-2008-1238, CVE-2008-1236.
CVE-2008-1233, CVE-2008-1234, CVE-2008-1235, CVE-2008-0416,
release date from vendor 2008-03-25 (Pacific Standard Time)
why is this a reminder and not an alert? security alert or reminder - that’s the question
did CASEScontact.org release an advisory about this earlier? no - neither exploit code was published nor any details before the vendor issued a patch
did CASEScontact.org release a zero-day advisory nothing was necessary (see above) patched zero-day archive

60% OF OUR READERS SUBSCRIBE

For better risk management, compliance and protection - become a member of the 60% of our READERS THAT HAVE MADE SURE THEY GET A SUBSCRIPTION

- advisory, zero-day exploits and regulatory intell via alert, newsletter or RSS feed

or just make your choices at CyTRAP Labs subscription portal

For a previous reminder please see here:

- CyTRAP Labs reminder - 2008-02-12 - security update for Mozilla Firefox, Mozilla Thunderbird, and SeakMonkey


Technorati , , , , , , , , , , , , , , , , , , , , , ,

This entry was posted on Thursday, March 27th, 2008 at 13:07 and is filed under

WordPress database error: [Can't find file: './Blog/wp_post2cat.frm' (errno: 13)]
SELECT post_id, category_id FROM wp_post2cat WHERE post_id IN (379)

Uncategorized. You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

WordPress database error: [Table './Blog/wp_comments' is marked as crashed and last (automatic?) repair failed]
SELECT * FROM wp_comments WHERE comment_post_ID = '379' AND comment_approved = '1' ORDER BY comment_date

Leave a Reply

WordPress database error: [Table './Blog/wp_comments' is marked as crashed and last (automatic?) repair failed]
DESC wp_comments


Warning: Invalid argument supplied for foreach() in /var/www/hosts/cases/blog/wp-content/plugins/subscribe-to-comments.php on line 676

WordPress database error: [Table './Blog/wp_comments' is marked as crashed and last (automatic?) repair failed]
ALTER TABLE wp_comments ADD COLUMN comment_subscribe enum('Y','N') NOT NULL default 'N'

What's a blog without spam? WP-Hashcash.