----------------------------------------------------------------------

Do you have VARM strategy implemented?

(Vulnerability Assessment Remediation Management)  

If not, then implement it through the most reliable vulnerability
intelligence source on the market. 

Implement it through Secunia. 

For more information visit:
http://secunia.com/advisories/business_solutions/

Alternatively request a call from a Secunia representative today to
discuss how we can help you with our capabilities contact us at:
sales@secunia.com

----------------------------------------------------------------------

TITLE:
Mozilla Firefox Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA35331

VERIFY ADVISORY:
http://secunia.com/advisories/35331/

DESCRIPTION:
Some vulnerabilities have been reported in Mozilla Firefox, which can
be exploited by malicious people to disclose sensitive information,
bypass certain security restrictions, or to compromise a vulnerable
system.

1) A race condition exists when accessing the private data of an
NPObject JS wrapper class object if navigating away from a web page
while loading a Java applet. This can be exploited via a specially
crafted web page to use already freed memory.

Successful exploitation may allow execution of arbitrary code.

This vulnerability is confirmed in Firefox 3.0.7, 3.0.8, and 3.0.9
for Windows with Java JRE 6 Update 13 including npjp2.dll version
6.0.130.3. Other versions may also be affected.

2) Multiple errors in the browser engine can be exploited to corrupt
memory and potentially execute arbitrary code.

3) An unspecified error can be exploited to trigger double frame
constructions, which could corrupt memory. This can potentially be
exploited to execute arbitrary code.

4) Multiple errors in the JavaScript engine can be exploited to
corrupt memory and potentially execute arbitrary code.

5) An error in the handling of certain invalid unicode characters,
when used as part of an IDN (internationalized domain name), can be
exploited to spoof the location bar.

6) An error in the handling of "file:" URIs can be exploited to
access any domain's cookies saved on the local machine.

Successful exploitation requires that a user downloads and opens a
specially crafted HTML file.

7) An error in the handling of non-200 responses after a CONNECT
request to a proxy can be exploited to execute arbitrary HTML and
script code in the requested SSL-protected domain.

Successful exploitation requires a MitM (Man-in-the-Middle) attack
and that the victim uses a proxy.

8) The owner document of an element can become null after garbage
collection. This can be exploited via event handlers to execute
arbitrary Javascript code with chrome privileges.

9) An error when loading a "file:" resource via the location bar can
potentially be exploited to access the content of other local files,
which would normally be protected.

Successful exploitation requires that a victim downloads a specially
crafted document, and opens a local file before opening the malicious
document in the same browser window.

10) A security issue exists due to improper checks of content-loading
policies before loading external script files into XUL documents.

11) A vulnerability exists due to an error when a chrome privileged
object (e.g. the browser sidebar or the FeedWriter) interacts with
web content. This can be exploited to execute arbitrary code with an
object's chrome privileges.

SOLUTION:
Update to version 3.0.11.

PROVIDED AND/OR DISCOVERED BY:
1) Jakob Balle and Carsten Eiram, Secunia Research

The vendor credits:
2) Bob Clary, Jesse Ruderman, Alexander Sack, Bret McMillan, Tomeo
Vizoso, Matt McCutchen, and Martijn Wargers
3) Boris Zbarsky
4) Jesse Ruderman, Adam Hauner, and Igor Bukanov
5) Pavel Cvrcek
6) Gregory Fleischer
7) Shuo Chen, Ziqing Mao, Yi-Min Wang, and Ming Zhang
8, 11) moz_bug_r_a4
9) Adam Barth and Collin Jackson
10) Wladimir Palant

ORIGINAL ADVISORY:
Secunia Research:
http://secunia.com/secunia_research/2009-19/

Mozilla Foundation:
http://www.mozilla.org/security/announce/2009/mfsa2009-24.html
http://www.mozilla.org/security/announce/2009/mfsa2009-25.html
http://www.mozilla.org/security/announce/2009/mfsa2009-26.html
http://www.mozilla.org/security/announce/2009/mfsa2009-27.html
http://www.mozilla.org/security/announce/2009/mfsa2009-28.html
http://www.mozilla.org/security/announce/2009/mfsa2009-29.html
http://www.mozilla.org/security/announce/2009/mfsa2009-30.html
http://www.mozilla.org/security/announce/2009/mfsa2009-31.html
http://www.mozilla.org/security/announce/2009/mfsa2009-32.html

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------