Mozilla, Inc. Affected

Updated:  December 22, 2005

Status

Affected

Vendor Statement

No statement is currently available from the vendor regarding this vulnerability.

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.

Addendum

The Mozilla project has released version 1.0.7 of the Firefox web browser and Thunderbird e-mail client which includes a patch for this issue. Firefox and Thunderbird users are encouraged to upgrade to this version of the software. The Mozilla project has also released version 1.7.12 of the Mozilla Suite product which includes a patch for this issue. Mozilla Suite users are encouraged to upgrade to this version of the software. For more information, please see: http://www.mozilla.org/security/announce/mfsa2005-59.html

Red Hat, Inc. Affected

Updated:  December 22, 2005

Status

Affected

Vendor Statement

The Mozilla packages in Red Hat Enterprise Linux 2.1, 3, and 4 were not vulnerable to this issue. Updated Firefox packages for Red Hat Enterprise Linux 4 to correct this issue are available at the URL below and by using the Red Hat Network 'up2date' tool. http://rhn.redhat.com/errata/RHSA-2005-785.html

Vendor Information

The vendor has not provided us with any further information regarding this vulnerability.