Firefox, Thunderbird, and SeaMonkey
The US Computer Emergency Readiness Team (US-CERT) announced the release of new versions of Firefox, Thunderbird, and SeaMonkey which addresses several vulnerabilities. While the impacts of the individual vulnerabilities vary, the most severe could allow a remote, unauthenticated attacker to execute arbitrary code on a vulnerable system. An attacker may also be able to cause a denial of service or execute cross-site scripting attacks.
For a complete description of the security enhancements and affected software, refer to Mozilla Foundation Security Advisories.
AFFECTED SOFTWARE:
- Mozilla Firefox
- Mozilla Thunderbird
- Mozilla SeaMonkey
Other products based on Mozilla components may also be affected.
WHAT YOU NEED TO DO TO PROTECT YOUR SYSTEM:
1. Do NOT take action if you have a Computer Support Coordinator (CSC); they will apply the update for you or assist in instructing you.
2. If you do not have a CSC, updates may be obtained from
ADDITIONAL INFORMATION:
Enterprise Information Security
US Cert – Technical Cyber Security Alert TA08
If you have questions about any of the information provided above, you may send email inquiries to security@ucsf.edu.
Teresa A. Regalia, GCIH
UCSF Enterprise Information Security
Telephone: 415-502-1567
Teresa.Regalia@ucsf.edu
OAAIS Customer Support Service Desk
7 a.m. - 6 p.m., Mon - Fri
(415) 514-4100, Option 2
CustomerSupport@ucsf.edu
http://help.ucsf.edu
