----------------------------------------------------------------------

Want a new job?
http://secunia.com/secunia_vacancies/

Secunia is looking for new researchers with a reversing background
and experience in writing exploit code:
http://secunia.com/hardcore_disassembler_and_reverse_engineer/
http://secunia.com/Disassembling_og_Reversing/

----------------------------------------------------------------------

TITLE:
Slackware update for mozilla-firefox

SECUNIA ADVISORY ID:
SA24455

VERIFY ADVISORY:
http://secunia.com/advisories/24455/

CRITICAL:
Highly critical

IMPACT:
Security Bypass, Cross Site Scripting, Spoofing, Exposure of
sensitive information, System access

WHERE:
>From remote

OPERATING SYSTEM:
Slackware Linux 11.0
http://secunia.com/product/13491/

DESCRIPTION:
Slackware has issued an update for mozilla-firefox. This fixes some
vulnerabilities, which can be exploited by malicious people to bypass
certain security restrictions, conduct cross-site scripting and
spoofing attacks, gain knowledge of sensitive information, and
potentially compromise a user's system.

For more information:
SA24205

SOLUTION:
Apply updated packages.

Slackware 10.2 package:
7bec44c44b529880c23af6827b904727 
mozilla-firefox-1.5.0.10-i686-1.tgz

Slackware 11.0 packages:
7bec44c44b529880c23af6827b904727 
mozilla-firefox-1.5.0.10-i686-1.tgz
a330faba1e9aa687c555f33e9fecef5f  mozilla-firefox-2.0.0.2-i686-1.tgz

ORIGINAL ADVISORY:
http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374851

OTHER REFERENCES:
SA24205:
http://secunia.com/advisories/24205/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------