|
Mozilla Browser Cross-Domain Tab Window Form Field Focus Vulnerability
Solution: Mozilla has released version 1.0.1 of Firefox to address this, and other issues: SGI has released an advisory 20050501-01-U including updated SGI ProPack 3 Service Pack 5 packages to address this BID and other issues. Please see the referenced advisory for more information. Red Hat has released advisory RHSA-2005:384-11 and fixes to address this and other issues on Red Hat Linux Enterprise platforms. Customers who are affected are advised to apply the appropriate updates. Customers subscribed to the Red Hat Network may apply the appropriate fixes using the Red Hat Update Agent (up2date). Please see referenced advisory for additional information. Gentoo has released an advisory (GLSA 200503-10) and updated eBuilds to address this vulnerability. Gentoo users that are running the affected software may apply the update by issuing the following sequence of commands as a superuser: For Firefox users: emerge --sync emerge --ask --oneshot --verbose ">=net-www/mozilla-firefox-1.0.1" For Firefox binary users: emerge --sync emerge --ask --oneshot --verbose ">=net-www/mozilla-firefox-bin-1.0.1" Fedora advisory FEDORA-2005-249 is available to address this issue in Mozilla browser for Fedora Core 3. Please see the referenced advisory for more information. Gentoo has released advisory GLSA 200503-30 to address this issue. Please see the referenced advisory for more information. Gentoo users may carry out the following commands to update their computers: Mozilla Suite users: emerge --sync emerge --ask --oneshot --verbose ">=www-client/mozilla-1.7.6" Mozilla Suite binary users: emerge --sync emerge --ask --oneshot --verbose ">=www-client/mozilla-bin-1.7.6" Fedora advisory FEDORA-2005-248 is available to address this issue in Mozilla browser for Fedora Core 2. Please see the referenced advisory for more information. Fedora advisories FEDORA-2005-251 and FEDORA-2005-253 including updated devhelp and epiphany packages for Fedora Core 2 are available. Users are advised to upgrade as these packages depend on Mozilla browser. Slackware Linux has released advisory SSA:2005-085-01 along with fixes dealing with this issue. Please see the reference section for more information. RedHat Fedora Legacy has released advisory FLSA:152883 addressing this and other issues for RedHat Linux 7.3, 9 and for Fedora Core 1 and Core 2. Please see the referenced advisory for details on obtaining and applying the appropriate updates. Netscape Browser 8.0 has been released to address various security issues. Please see the vendor advisory in Web references for more information. RedHat Fedora Core2
Mozilla Firefox 0.10
Mozilla Firefox 0.10.1
Mozilla Firefox 0.8
Mozilla Firefox 0.9
Mozilla Firefox 0.9 rc
Mozilla Firefox 0.9.1
Mozilla Firefox 0.9.2
Mozilla Firefox 0.9.3
Mozilla Firefox 1.0
Mozilla Browser 1.2.1
Mozilla Browser 1.4
Mozilla Browser 1.4.1
Mozilla Browser 1.6
Mozilla Browser 1.7
Mozilla Browser 1.7.3
|
|
|
Privacy Statement |