[ GLSA 201301-01 ] Mozilla Products: Multiple vulnerabilities

[GLSA]

Gentoo Linux Security Advisory

Title: Mozilla Products: Multiple vulnerabilities (GLSA 201301-01)
Severity: high
Exploitable: local, remote
Date: January 08, 2013
Bug(s): #180159, #181361, #207261, #238535, #246602, #251322, #255221, #255234, #255687, #257577, #260062, #261386, #262704, #267234, #273918, #277752, #280226, #280234, #280393, #282549, #284439, #286721, #290892, #292034, #297532, #305689, #307045, #311021, #312361, #312645, #312651, #312675, #312679, #312763, #313003, #324735, #326341, #329279, #336396, #341821, #342847, #348316, #357057, #360055, #360315, #365323, #373595, #379549, #381245, #388045, #390771, #395431, #401701, #403183, #404437, #408161, #413657, #419917, #427224, #433383, #437780, #439586, #439960, #444318
ID: 201301-01

Synopsis

Multiple vulnerabilities have been found in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner, some of which may
allow execution of arbitrary code or local privilege escalation.


Background

Mozilla Firefox is an open-source web browser and Mozilla Thunderbird an
open-source email client, both from the Mozilla Project. The SeaMonkey
project is a community effort to deliver production-quality releases of
code derived from the application formerly known as the ‘Mozilla
Application Suite’. XULRunner is a Mozilla runtime package that can be
used to bootstrap XUL+XPCOM applications such as Firefox and Thunderbird.
NSS is Mozilla’s Network Security Services library that implements PKI
support. IceCat is the GNU version of Firefox.


Affected Packages

Package: www-client/firefox
Vulnerable: < 10.0.11
Unaffected: >= 10.0.11
Architectures: All supported architectures

Package: www-client/firefox-bin
Vulnerable: < 10.0.11
Unaffected: >= 10.0.11
Architectures: All supported architectures

Package: mail-client/thunderbird
Vulnerable: < 10.0.11
Unaffected: >= 10.0.11
Architectures: All supported architectures

Package: mail-client/thunderbird-bin
Vulnerable: < 10.0.11
Unaffected: >= 10.0.11
Architectures: All supported architectures

Package: www-client/seamonkey
Vulnerable: < 2.14-r1
Unaffected: >= 2.14-r1
Architectures: All supported architectures

Package: www-client/seamonkey-bin
Vulnerable: < 2.14
Unaffected: >= 2.14
Architectures: All supported architectures

Package: dev-libs/nss
Vulnerable: < 3.14
Unaffected: >= 3.14
Architectures: All supported architectures

Package: www-client/mozilla-firefox
Vulnerable: <= 3.6.8
Architectures: All supported architectures

Package: www-client/mozilla-firefox-bin
Vulnerable: <= 3.5.6
Architectures: All supported architectures

Package: mail-client/mozilla-thunderbird
Vulnerable: <= 3.0.4-r1
Architectures: All supported architectures

Package: mail-client/mozilla-thunderbird-bin
Vulnerable: <= 3.0
Architectures: All supported architectures

Package: www-client/icecat
Vulnerable: <= 10.0-r1
Architectures: All supported architectures

Package: net-libs/xulrunner
Vulnerable: <= 2.0-r1
Architectures: All supported architectures

Package: net-libs/xulrunner-bin
Vulnerable: <= 1.8.1.19
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Mozilla Firefox,
Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the
CVE identifiers referenced below for details.


Impact

A remote attacker could entice a user to view a specially crafted web
page or email, possibly resulting in execution of arbitrary code or a
Denial of Service condition. Furthermore, a remote attacker may be able
to perform Man-in-the-Middle attacks, obtain sensitive information,
bypass restrictions and protection mechanisms, force file downloads,
conduct XML injection attacks, conduct XSS attacks, bypass the Same
Origin Policy, spoof URL’s for phishing attacks, trigger a vertical
scroll, spoof the location bar, spoof an SSL indicator, modify the
browser’s font, conduct clickjacking attacks, or have other unspecified
impact.
A local attacker could gain escalated privileges, obtain sensitive
information, or replace an arbitrary downloaded file.


Workaround

There is no known workaround at this time.

Resolution

All Mozilla Firefox users should upgrade to the latest version: