[security-alerts] FW: [SA18703] Mozilla Suite XML Injection and Code Execution Vulnerabilities

["Kazennov, Vladimir" <Vladimir.Kazennov@xxxxxxxxxx>]

> 
> 
> TITLE:
> Mozilla Suite XML Injection and Code Execution Vulnerabilities
> 
> SECUNIA ADVISORY ID:
> SA18703
> 
> VERIFY ADVISORY:
> http://secunia.com/advisories/18703/
> 
> CRITICAL:
> Highly critical
> 
> IMPACT:
> Cross Site Scripting, System access
> 
> WHERE:
> From remote
> 
> SOFTWARE:
> Mozilla 1.7.x
> http://secunia.com/product/3691/
> Mozilla 1.6
> http://secunia.com/product/3101/
> Mozilla 1.5
> http://secunia.com/product/2478/
> Mozilla 1.4
> http://secunia.com/product/1481/
> Mozilla 1.3
> http://secunia.com/product/1480/
> Mozilla 1.2
> http://secunia.com/product/3100/
> Mozilla 1.1
> http://secunia.com/product/98/
> Mozilla 1.0
> http://secunia.com/product/97/
> Mozilla 0.x
> http://secunia.com/product/772/
> 
> DESCRIPTION:
> Two vulnerabilities have been reported in Mozilla Suite, which can be
> exploited by malicious people to conduct cross-site scripting attacks
> and potentially compromise a user's system.
> 
> For more information, see #1 and #4 in:
> SA18700
> 
> SOLUTION:
> Disable JavaScript, except for trusted web sites.
> 
> OTHER REFERENCES:
> SA18700:
> http://secunia.com/advisories/18700/
>