sm-security AT lists.ibiblio.org

Subject: Security bugs are reported here via bugzilla

List archive

[SM-Security] [dveditz AT cruzio.com: [Full-Disclosure] Mozilla Security Advisory 2004-07-08]

From: Seth Alan Woolley <seth AT positivism.org>
To: sm-security AT lists.ibiblio.org, sm-discuss AT lists.ibiblio.org
Cc:
Subject: [SM-Security] [dveditz AT cruzio.com: [Full-Disclosure] Mozilla Security Advisory 2004-07-08]
Date: Thu, 8 Jul 2004 16:05:54 -0700

Not that linux versions are unaffected. Windows is so insecure, even
Mozilla has to be extra careful.

Seth

----- Forwarded message from dveditz AT cruzio.com -----

To: full-disclosure AT lists.netsys.com
From: dveditz AT cruzio.com
X-Mailer: Endymion MailMan Standard Edition v3.0.24
Subject: [Full-Disclosure] Mozilla Security Advisory 2004-07-08
Precedence: bulk
Date: Thu, 8 Jul 2004 22:36:48 GMT
X-Spambayes-Classification: ham; 0.00

Mozilla Security Advisory
July 7, 2004

Summary: Windows shell: scheme exposed in Mozilla
Products: Mozilla (Suite)
Mozilla Firefox
Mozilla Thunderbird
Fixed in: Mozilla (Suite) 1.7.1
Mozilla Firefox 0.9.2
Mozilla Thunderbird 0.7.2

Description:
Windows versions of Mozilla products pass URIs using the shell: scheme
to the OS for handling. The effects depend on the version of windows,
but on Windows XP it is possible to launch executables in known
locations or the default handlers for file extensions. It could be
possible to combine this effect with a known buffer overrun in one
of these programs to create a remote execution exploit, although
at this time we have confirmed only denial-of-service type attacks
(including crashing the system in some cases).

Solution:
We urge people to install the patch available on mozilla.org or
install the latest version of the software.

http://www.mozilla.org/security/shell.html

-Dan Veditz
Mozilla Security Group

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html

----- End forwarded message -----

--
Seth Alan Woolley [seth at positivism.org], SPAM/UCE is unauthorized
Key id EF10E21A = 36AD 8A92 8499 8439 E6A8 3724 D437 AF5D EF10 E21A
http://smgl.positivism.org:11371/pks/lookup?op=get&search=0xEF10E21A
Security Team Leader Source Mage GNU/Linux http://www.sourcemage.org

Attachment: pgpIrwda6PYIm.pgp
Description: PGP signature

[SM-Security] [dveditz AT cruzio.com: [Full-Disclosure] Mozilla Security Advisory 2004-07-08], Seth Alan Woolley, 07/08/2004