Mozilla Foundation Products XPCOM Memory Corruption Vulnerability

Bugtraq ID:	19197
Class:	Design Error
CVE:	CVE-2006-3113
Remote:	Yes
Local:	No
Published:	Jul 26 2006 12:00AM
Updated:	Sep 05 2007 05:12PM
Credit:	Carsten Eiram of Secunia Research has been credited with the discovery of this vulnerability.
Vulnerable:	Ubuntu Ubuntu Linux 5.10 sparc Ubuntu Ubuntu Linux 5.10 powerpc Ubuntu Ubuntu Linux 5.10 i386 Ubuntu Ubuntu Linux 5.10 amd64 Ubuntu Ubuntu Linux 5.0 4 powerpc Ubuntu Ubuntu Linux 5.0 4 i386 Ubuntu Ubuntu Linux 5.0 4 amd64 Ubuntu Ubuntu Linux 6.06 LTS sparc Ubuntu Ubuntu Linux 6.06 LTS powerpc Ubuntu Ubuntu Linux 6.06 LTS i386 Ubuntu Ubuntu Linux 6.06 LTS amd64 SuSE SUSE Linux Enterprise Server 10 SuSE SUSE Linux Enterprise SDK 10 Slackware Linux 10.2 Slackware Linux -current S.u.S.E. Novell Linux Desktop 9.0 S.u.S.E. Linux Professional 10.0 OSS S.u.S.E. Linux Professional 10.0 S.u.S.E. Linux Professional 9.3 x86_64 S.u.S.E. Linux Professional 9.3 S.u.S.E. Linux Professional 9.2 x86_64 S.u.S.E. Linux Professional 9.2 S.u.S.E. Linux Professional 10.1 S.u.S.E. Linux Personal 9.3 x86_64 S.u.S.E. Linux Personal 9.3 S.u.S.E. Linux Personal 9.2 x86_64 S.u.S.E. Linux Personal 9.2 rPath rPath Linux 1 Redhat Enterprise Linux WS 4 Redhat Enterprise Linux WS 3 Redhat Enterprise Linux WS 2.1 IA64 Redhat Enterprise Linux WS 2.1 Redhat Enterprise Linux ES 4 Redhat Enterprise Linux ES 3 Redhat Enterprise Linux ES 2.1 IA64 Redhat Enterprise Linux ES 2.1 Redhat Enterprise Linux AS 4 Redhat Enterprise Linux AS 3 Redhat Enterprise Linux AS 2.1 IA64 Redhat Enterprise Linux AS 2.1 Redhat Desktop 4.0 Redhat Desktop 3.0 Redhat Advanced Workstation for the Itanium Processor 2.1 IA64 Redhat Advanced Workstation for the Itanium Processor 2.1 Mozilla Thunderbird 1.5 beta 2 Mozilla Thunderbird 1.5 Mozilla Thunderbird 1.0.8 Mozilla Thunderbird 1.0.7 Mozilla Thunderbird 1.0.6 Mozilla Thunderbird 1.0.5 Mozilla Thunderbird 1.0.2 Mozilla Thunderbird 1.0.1 Mozilla Thunderbird 1.0 Mozilla Thunderbird 0.9 Mozilla Thunderbird 0.8 Mozilla Thunderbird 0.7.3 Mozilla Thunderbird 0.7.2 Mozilla Thunderbird 0.7.1 Mozilla Thunderbird 0.7 Mozilla Thunderbird 0.6 Mozilla Thunderbird 1.5.0.4 Mozilla Thunderbird 1.5.0.2 Mozilla Thunderbird 1.5.0.1 Mozilla SeaMonkey 1.0.2 Mozilla SeaMonkey 1.0.1 Mozilla SeaMonkey 1.0 dev Mozilla SeaMonkey 1.0 Mozilla Firefox 1.5 beta 2 Mozilla Firefox 1.5 beta 1 Mozilla Firefox 1.5 Mozilla Firefox 1.0.8 Mozilla Firefox 1.0.7 Mozilla Firefox 1.0.6 Mozilla Firefox 1.0.5 Mozilla Firefox 1.0.5 Mozilla Firefox 1.0.4 Mozilla Firefox 1.0.3 + Gentoo Linux Mozilla Firefox 1.0.2 + Mandriva Linux Mandrake 10.2 x86_64 + Mandriva Linux Mandrake 10.2 + Mandriva Linux Mandrake 10.2 + Redhat Desktop 4.0 + Redhat Desktop 4.0 + Redhat Enterprise Linux AS 4 + Redhat Enterprise Linux AS 4 + Redhat Enterprise Linux ES 4 + Redhat Enterprise Linux ES 4 + Redhat Enterprise Linux WS 4 + Redhat Enterprise Linux WS 4 Mozilla Firefox 1.0.1 + Redhat Fedora Core3 Mozilla Firefox 1.0 + Gentoo Linux + Gentoo Linux + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 x86_64 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.2 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 x86_64 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.1 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 x86_64 + S.u.S.E. Linux Personal 9.0 + S.u.S.E. Linux Personal 9.0 + Slackware Linux 10.1 + Slackware Linux 10.0 + Slackware Linux 10.0 + Slackware Linux 9.1 + Slackware Linux 9.1 + Slackware Linux -current + Slackware Linux -current Mozilla Firefox 0.10.1 Mozilla Firefox 0.10 Mozilla Firefox 0.9.3 Mozilla Firefox 0.9.2 Mozilla Firefox 0.9.1 Mozilla Firefox 0.9 rc Mozilla Firefox 0.9 Mozilla Firefox 0.8 Mozilla Firefox Preview Release Mozilla Firefox 1.5.0.4 Mozilla Firefox 1.5.0.3 Mozilla Firefox 1.5.0.2 Mozilla Firefox 1.5.0.2 Mozilla Firefox 1.5.0.1 Mozilla Enigmail 0.94 Mandriva Linux Mandrake 2006.0 x86_64 Mandriva Linux Mandrake 2006.0 HP HP-UX B.11.31 HP HP-UX B.11.23 HP HP-UX B.11.11 Gentoo Linux
Not Vulnerable:	Mozilla Thunderbird 1.5.0.5 Mozilla SeaMonkey 1.0.3 Mozilla Firefox 1.5.0.5

Mozilla Foundation Products XPCOM Memory Corruption Vulnerability

Various Mozilla Foundation products are prone to a memory-corruption vulnerability.

This issue occurs because the applications fail to handle simultaneous XPCOM events that would cause the deletion of the timer object.

An attacker can exploit this issue to execute arbitrary code.

This issue was previously discussed in BID 19181 (Mozilla Multiple Products Remote Vulnerabilities). It has been assigned a separate BID because new information has become available.

Mozilla Foundation Products XPCOM Memory Corruption Vulnerability

Attackers can exploit this issue via a web client.

Mozilla Foundation Products XPCOM Memory Corruption Vulnerability

Solution:
New versions of Firefox, SeaMonkey, Camino, and Thunderbird are available to address this issue. Most Mozilla applications have self-updating features that may be used to download and install fixes.

Please see the referenced advisories for information on obtaining and applying fixes.


Mozilla Firefox 1.5.0.3

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 1.5.0.2

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 1.5.0.1

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Enigmail 0.94

• Ubuntu mozilla-thunderbird-enigmail_0.94-0ubuntu4.2_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/e/enigmail/mozilla-thunder bird-enigmail_0.94-0ubuntu4.2_amd64.deb


• Ubuntu mozilla-thunderbird-enigmail_0.94-0ubuntu4.2_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/e/enigmail/mozilla-thunder bird-enigmail_0.94-0ubuntu4.2_i386.deb


• Ubuntu mozilla-thunderbird-enigmail_0.94-0ubuntu4.2_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/e/enigmail/mozilla-thunder bird-enigmail_0.94-0ubuntu4.2_powerpc.deb


• Ubuntu mozilla-thunderbird-enigmail_0.94-0ubuntu4.2_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/e/enigmail/mozilla-thunder bird-enigmail_0.94-0ubuntu4.2_sparc.deb

Mozilla Thunderbird 1.5.0.4

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Thunderbird 1.5.0.2

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Thunderbird 1.5.0.1

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

HP HP-UX B.11.23

• HP Firefox v2.0.0.4
  http://www.hp.com/products1/unix/java/firefox/downloads/license_firefo x_2-0-0-4.html


• HP thunderbird_1.5.0.9_ia.depot.gz
  For HP-UX B.11.23 and B.11.31 (IA)
  http://www.hp.com/products1/unix/java/firefox/downloads/license_thunde rbird_1-5-0-8.html


• HP thunderbird_1.5.0.9_pa.depot.gz
  For HP-UX B.11.11, B.11.23, and B.11.31 (PA)
  http://www.hp.com/products1/unix/java/firefox/downloads/license_thunde rbird_1-5-0-8.html

Mozilla SeaMonkey 1.0 dev

• Mozilla SeaMonkey 1.0.3
  http://download.mozilla.org/?product=seamonkey-1.0.3&os=win&lang=en-US

HP HP-UX B.11.11

• HP Firefox v2.0.0.4
  http://www.hp.com/products1/unix/java/firefox/downloads/license_firefo x_2-0-0-4.html


• HP thunderbird_1.5.0.9_pa.depot.gz
  For HP-UX B.11.11, B.11.23, and B.11.31 (PA)
  http://www.hp.com/products1/unix/java/firefox/downloads/license_thunde rbird_1-5-0-8.html

Mozilla SeaMonkey 1.0

• Mozilla SeaMonkey 1.0.3
  http://download.mozilla.org/?product=seamonkey-1.0.3&os=win&lang=en-US

Mozilla Firefox 0.10

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Thunderbird 0.7

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Thunderbird 0.7.2

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Thunderbird 0.7.3

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Firefox 0.8

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Thunderbird 0.8

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Firefox 0.9

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Thunderbird 0.9

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Firefox 0.9.1

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 0.9.2

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 0.9.3

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 1.0

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Thunderbird 1.0

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Firefox 1.0.1

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Thunderbird 1.0.1

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla SeaMonkey 1.0.1

• Mozilla SeaMonkey 1.0.3
  http://download.mozilla.org/?product=seamonkey-1.0.3&os=win&lang=en-US

Mozilla SeaMonkey 1.0.2

• Mozilla SeaMonkey 1.0.3
  http://download.mozilla.org/?product=seamonkey-1.0.3&os=win&lang=en-US

Mozilla Firefox 1.0.2

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Thunderbird 1.0.2

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Firefox 1.0.3

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 1.0.4

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 1.0.5

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 1.0.5

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Thunderbird 1.0.5

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Firefox 1.0.6

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Thunderbird 1.0.6

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Thunderbird 1.0.7

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US

Mozilla Firefox 1.0.7

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 1.0.8

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Firefox 1.5

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US


• Ubuntu devhelp/devhelp_0.10-1ubuntu2.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/devhelp/devhelp_0.10-1ub untu2.1_amd64.deb


• Ubuntu devhelp/devhelp_0.10-1ubuntu2.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/devhelp/devhelp_0.10-1ub untu2.1_powerpc.deb


• Ubuntu devhelp_0.10-1ubuntu2.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/devhelp/devhelp_0.10-1ub untu2.1_i386.deb


• Ubuntu epiphany-browser_1.8.2-0ubuntu1.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/e/epiphany-browser/epiphan y-browser_1.8.2-0ubuntu1.1_amd64.deb


• Ubuntu epiphany-browser_1.8.2-0ubuntu1.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/e/epiphany-browser/epiphan y-browser_1.8.2-0ubuntu1.1_i386.deb


• Ubuntu epiphany-browser_1.8.2-0ubuntu1.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/e/epiphany-browser/epiphan y-browser_1.8.2-0ubuntu1.1_powerpc.deb


• Ubuntu firefox-dev_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dev_1.5. dfsg+1.5.0.7-0ubuntu5.10.3_amd64.deb


• Ubuntu firefox-dev_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dev_1.5. dfsg+1.5.0.7-0ubuntu5.10.3_i386.deb


• Ubuntu firefox-dev_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-dev_1.5. dfsg+1.5.0.7-0ubuntu5.10.3_powerpc.deb


• Ubuntu firefox-dom-inspector_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom- inspector_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_amd64.deb


• Ubuntu firefox-dom-inspector_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom- inspector_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_i386.deb


• Ubuntu firefox-dom-inspector_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/f/firefox/firefox-dom- inspector_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_powerpc.deb


• Ubuntu firefox-gnome-support_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-gnome-su pport_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_amd64.deb


• Ubuntu firefox-gnome-support_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-gnome-su pport_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_i386.deb


• Ubuntu firefox-gnome-support_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox-gnome-su pport_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_powerpc.deb


• Ubuntu firefox_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_1.5.dfsg +1.5.0.7-0ubuntu5.10.3_amd64.deb


• Ubuntu firefox_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_1.5.dfsg +1.5.0.7-0ubuntu5.10.3_i386.deb


• Ubuntu firefox_1.5.dfsg+1.5.0.7-0ubuntu5.10.3_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/f/firefox/firefox_1.5.dfsg +1.5.0.7-0ubuntu5.10.3_powerpc.deb


• Ubuntu libdevhelp-1-0_0.10-1ubuntu2.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/devhelp/libdevhelp-1-0_0 .10-1ubuntu2.1_amd64.deb


• Ubuntu libdevhelp-1-0_0.10-1ubuntu2.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/devhelp/libdevhelp-1-0_0 .10-1ubuntu2.1_i386.deb


• Ubuntu libdevhelp-1-0_0.10-1ubuntu2.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/devhelp/libdevhelp-1-0_0 .10-1ubuntu2.1_powerpc.deb


• Ubuntu libdevhelp-1-dev_0.10-1ubuntu2.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/devhelp/libdevhelp-1-dev _0.10-1ubuntu2.1_amd64.deb


• Ubuntu libdevhelp-1-dev_0.10-1ubuntu2.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/devhelp/libdevhelp-1-dev _0.10-1ubuntu2.1_i386.deb


• Ubuntu libdevhelp-1-dev_0.10-1ubuntu2.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/d/devhelp/libdevhelp-1-dev _0.10-1ubuntu2.1_powerpc.deb


• Ubuntu mozilla-firefox-locale-en-gb_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-en-gb_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-es-ar_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-es-ar_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-es-es_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-es-es_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-es_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox-loca le-all/mozilla-firefox-locale-es_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-fi-fi_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-fi-fi_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-fr-fr_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-fr-fr_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-fr_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox-loca le-all/mozilla-firefox-locale-fr_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-ga-ie_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-ga-ie_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-gu-in_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox-loca le-all/mozilla-firefox-locale-gu-in_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-he-il_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-he-il_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-hu-hu_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-hu-hu_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-mk-mk_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox-loca le-all/mozilla-firefox-locale-mk-mk_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-nl-nl_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-nl-nl_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-pa-in_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox-loca le-all/mozilla-firefox-locale-pa-in_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-pl-pl_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-pl-pl_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-pl_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox-loca le-all/mozilla-firefox-locale-pl_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-pt-br_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-pt-br_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-pt-pt_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-pt-pt_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-ro-ro_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-ro-ro_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-ru-ru_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-ru-ru_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-sl-si_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-sl-si_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-sq-al_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox-loca le-all/mozilla-firefox-locale-sq-al_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-sv-se_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-sv-se_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-sv_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/universe/m/mozilla-firefox-loca le-all/mozilla-firefox-locale-sv_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-tr-tr_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-tr-tr_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-xh-za_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-xh-za_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-zh-cn_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-zh-cn_1.5-ubuntu5.10-1_all.deb


• Ubuntu mozilla-firefox-locale-zh-tw_1.5-ubuntu5.10-1_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-firefox-locale-a ll/mozilla-firefox-locale-zh-tw_1.5-ubuntu5.10-1_all.deb


• Ubuntu yelp_2.12.1-0ubuntu1.1_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/y/yelp/yelp_2.12.1-0ubuntu 1.1_amd64.deb


• Ubuntu yelp_2.12.1-0ubuntu1.1_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/y/yelp/yelp_2.12.1-0ubuntu 1.1_i386.deb


• Ubuntu yelp_2.12.1-0ubuntu1.1_powerpc.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/y/yelp/yelp_2.12.1-0ubuntu 1.1_powerpc.deb

Mozilla Firefox 1.5 beta 2

• Mozilla Firefox 1.5.0.5
  http://www.mozilla.com/products/download.html?product=firefox-1.5.0.5& os=linux&lang=en-US

Mozilla Thunderbird 1.5

• Mozilla Thunderbird 1.5.0.5
  http://www.mozilla.com/products/download.html?product=thunderbird-1.5. 0.5&os=linux&lang=en-US


• Ubuntu mozilla-thunderbird-dev_1.5.0.5-0ubuntu0.6.06_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-dev_1.5.0.5-0ubuntu0.6.06_i386.deb


• Ubuntu mozilla-thunderbird-dev_1.5.0.5-0ubuntu0.6.06_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-dev_1.5.0.5-0ubuntu0.6.06_powerpc.deb


• Ubuntu mozilla-thunderbird-dev_1.5.0.5-0ubuntu0.6.06_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-dev_1.5.0.5-0ubuntu0.6.06_sparc.deb


• Ubuntu mozilla-thunderbird-dev_1.5.0.7-0ubuntu0.5.10_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-dev_1.5.0.7-0ubuntu0.5.10_amd64.deb


• Ubuntu mozilla-thunderbird-dev_1.5.0.7-0ubuntu0.5.10_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-dev_1.5.0.7-0ubuntu0.5.10_i386.deb


• Ubuntu mozilla-thunderbird-enigmail_0.94-0ubuntu0.5.10_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/e/enigmail/mozilla-thunder bird-enigmail_0.94-0ubuntu0.5.10_amd64.deb


• Ubuntu mozilla-thunderbird-enigmail_0.94-0ubuntu0.5.10_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/e/enigmail/mozilla-thunder bird-enigmail_0.94-0ubuntu0.5.10_i386.deb


• Ubuntu mozilla-thunderbird-inspector_1.5.0.5-0ubuntu0.6.06_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-inspector_1.5.0.5-0ubuntu0.6.06_amd64.deb


• Ubuntu mozilla-thunderbird-inspector_1.5.0.5-0ubuntu0.6.06_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-inspector_1.5.0.5-0ubuntu0.6.06_powerpc.deb


• Ubuntu mozilla-thunderbird-inspector_1.5.0.5-0ubuntu0.6.06_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-inspector_1.5.0.5-0ubuntu0.6.06_sparc.deb


• Ubuntu mozilla-thunderbird-inspector_1.5.0.7-0ubuntu0.5.10_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-inspector_1.5.0.7-0ubuntu0.5.10_i386.deb


• Ubuntu mozilla-thunderbird-locale-ca_1.5-ubuntu5.10_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird-loca le-ca/mozilla-thunderbird-locale-ca_1.5-ubuntu5.10_all.deb


• Ubuntu mozilla-thunderbird-locale-de_1.5-ubuntu5.10_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird-loca le-de/mozilla-thunderbird-locale-de_1.5-ubuntu5.10_all.deb


• Ubuntu mozilla-thunderbird-locale-fr_1.5-ubuntu5.10_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird-loca le-fr/mozilla-thunderbird-locale-fr_1.5-ubuntu5.10_all.deb


• Ubuntu mozilla-thunderbird-locale-it_1.5-ubuntu5.10_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird-loca le-it/mozilla-thunderbird-locale-it_1.5-ubuntu5.10_all.deb


• Ubuntu mozilla-thunderbird-locale-pl_1.5-ubuntu5.10_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird-loca le-pl/mozilla-thunderbird-locale-pl_1.5-ubuntu5.10_all.deb


• Ubuntu mozilla-thunderbird-locale-uk_1.5-ubuntu5.10_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird-loca le-uk/mozilla-thunderbird-locale-uk_1.5-ubuntu5.10_all.deb


• Ubuntu mozilla-thunderbird-typeaheadfind_1.5.0.5-0ubuntu0.6.06_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-typeaheadfind_1.5.0.5-0ubuntu0.6.06_amd64.deb


• Ubuntu mozilla-thunderbird-typeaheadfind_1.5.0.5-0ubuntu0.6.06_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-typeaheadfind_1.5.0.5-0ubuntu0.6.06_i386.deb


• Ubuntu mozilla-thunderbird-typeaheadfind_1.5.0.5-0ubuntu0.6.06_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-typeaheadfind_1.5.0.5-0ubuntu0.6.06_powerpc.deb


• Ubuntu mozilla-thunderbird-typeaheadfind_1.5.0.5-0ubuntu0.6.06_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-typeaheadfind_1.5.0.5-0ubuntu0.6.06_sparc.deb


• Ubuntu mozilla-thunderbird-typeaheadfind_1.5.0.7-0ubuntu0.5.10_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-typeaheadfind_1.5.0.7-0ubuntu0.5.10_amd64.deb


• Ubuntu mozilla-thunderbird-typeaheadfind_1.5.0.7-0ubuntu0.5.10_i386.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-typeaheadfind_1.5.0.7-0ubuntu0.5.10_i386.deb


• Ubuntu mozilla-thunderbird_1.5.0.5-0ubuntu0.6.06_amd64.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird_1.5.0.5-0ubuntu0.6.06_amd64.deb


• Ubuntu mozilla-thunderbird_1.5.0.5-0ubuntu0.6.06_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird_1.5.0.5-0ubuntu0.6.06_i386.deb


• Ubuntu mozilla-thunderbird_1.5.0.5-0ubuntu0.6.06_powerpc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird_1.5.0.5-0ubuntu0.6.06_powerpc.deb


• Ubuntu mozilla-thunderbird_1.5.0.5-0ubuntu0.6.06_sparc.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird_1.5.0.5-0ubuntu0.6.06_sparc.deb


• Ubuntu mozilla-thunderbird_1.5.0.7-0ubuntu0.5.10_amd64.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird_1.5.0.7-0ubuntu0.5.10_amd64.deb


• Ubuntu thunderbird-inspector_1.5.0.5-0ubuntu0.6.06_i386.deb
  Ubuntu 6.06 LTS:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird/mozi lla-thunderbird-inspector_1.5.0.5-0ubuntu0.6.06_i386.deb


• Ubuntu thunderbird-locale-nl_1.5-ubuntu5.10_all.deb
  Ubuntu 5.10:
  http://security.ubuntu.com/ubuntu/pool/main/m/mozilla-thunderbird-loca le-nl/mozilla-thunderbird-locale-nl_1.5-ubuntu5.10_all.deb

Mozilla Foundation Products XPCOM Memory Corruption Vulnerability

References:

• HPSBUX02153 SSRT061181 rev.1 - HP-UX Running Firefox, Remote Unauthorized Access (Hewlett-Packard )
  
• HPSBUX02156 SSRT061236 rev.1 - HP-UX Running Thunderbird, Remote Unauthorized Ac (Hewlett-Packard )
  
• Mozilla Firefox XPCOM Event Handling Memory Corruption (Secunia Research)
  
• Mozilla Foundation Security Advisory 2006-46 (Mozilla)
  
• RedHat Security Advisory RHSA-2006:06082006:0608-6 (RedHat)
  
• RHSA-2006:0594-9 - seamonkey security update (was mozilla) (Red Hat)
  
• RHSA-2006:0609-9 - seamonkey security update (Red Hat)
  
• RHSA-2006:0610-4 - firefox security update (RedHat)
  
• RHSA-2006:0611-3 - thunderbird security update (RedHat)
  
• rPath Security Advisory: rPSA-2006-0138-1 thunderbird (rPath)
  
• Technical Cyber Security Alert TA06-208A: Mozilla Products Contain Multiple Vuln (IT-ISAC, LLC )
  
• HPSBUX02153 SSRT061181 rev.5 - HP-UX Running Firefox, Remote Unauthorized Access (HP)
  
• HPSBUX02156 SSRT061236 rev.3 - HP-UX Running Thunderbird, Remote Unauthorized Ac (HP)