Alert GCSA-06075 - Vulnerabilita' nei prodotti Mozilla

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


******************************************************************

     Alert ID : GCSA-06075
         Data : 20 Settembre 2006
       Titolo : Vulnerabilita' nei prodotti Mozilla

******************************************************************

- - Descrizione del problema

   Mozilla Foundation ha pubblicato vari avvisi di sicurezza
   relativi a vulnerabilita' scoperte nei prodotti Firefox,
   Thunderbird e SeaMonkey. Per un elenco completo consultare
   il seguente link:

   http://www.mozilla.org/projects/security/known-vulnerabilities.html


- - Piattaforme, software o moduli interessati

   Mozilla Firefox 1.5.0.6 e precedenti
   Mozilla Thunderbird 1.5.0.5 e precedenti
   Mozilla SeaMonkey 1.0.3 e precedenti


- - Impatto

   Le vulnerabilita' individuate potrebbero consentire ad un attaccante di:

   * eseguire codice arbitrario
   * provocare il blocco dell'applicazione
   * eseguire codice scripting e JavaScript arbitrario
   * fornire dati dannosi attraverso gli aggiornamenti
   * portare attacchi di tipo cross-site scripting


- - Soluzioni

   Aggiornare i prodotti alle ultime versioni:

   Mozilla Firefox version 1.5.0.7
   Mozilla Thunderbird version 1.5.0.7
   Mozilla SeaMonkey version 1.0.5

   http://www.mozilla.com/firefox/all.html


- - Riferimenti

   Mozilla Foundation Security Advisories
   http://www.mozilla.org/security/announce/

   SecurityFocus BID
   http://www.securityfocus.com/bid/20042
   http://www.securityfocus.com/bid/19181

   Debian Security Advisory
   http://www.debian.org/security/2006/dsa-1160

   Mitre's CVE ID:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4340
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4253
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4565
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4566
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4567
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4568
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4569
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4570
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-4571

   Red Hat Security Advisory
   https://rhn.redhat.com/errata/RHSA-2006-0675.html
   https://rhn.redhat.com/errata/RHSA-2006-0676.html
   https://rhn.redhat.com/errata/RHSA-2006-0677.html

-----BEGIN PGP SIGNATURE-----

iQCVAwUBRREozPOB+SpikaiRAQI8VAQAlbxrx+jelQDnJ3vCFOtHVGUxPYtJ43uC
dD42bnFCOt/mNtkFGktQv58N25D2zS1GeUZlHC4fgxYu1FLqkS4+BRDKrCKn5nPu
DJC5m+OuZiW89JTKiwn6lstnnZPQjukvZ2OH9SGLsArRzgrvNDz9VlYfZAUDZOxC
IRmJhBkp9SM=
=B918
-----END PGP SIGNATURE-----