-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

===========================================================================
             AUSCERT External Security Bulletin Redistribution

                        ESB-2009.0343 -- [Solaris]
                     Firefox: Multiple Vulnerabilities
                               9 April 2009

===========================================================================

        AusCERT Security Bulletin Summary
        ---------------------------------

Product:              Mozilla Firefox
Publisher:            Sun Microsystems
Operating System:     Solaris
                      OpenSolaris
Impact:               Execute Arbitrary Code/Commands
                      Access Privileged Data
                      Cross-site Scripting
                      Modify Arbitrary Files
                      Denial of Service
CVE Names:            CVE-2008-5513 CVE-2008-5512 CVE-2008-5511
                      CVE-2008-5510 CVE-2008-5508 CVE-2008-5507
                      CVE-2008-5506 CVE-2008-5505 CVE-2008-5504
                      CVE-2008-5503 CVE-2008-5502 CVE-2008-5501
                      CVE-2008-5500 CVE-2008-5024 CVE-2008-5023
                      CVE-2008-5022 CVE-2008-5021 CVE-2008-5019
                      CVE-2008-5018 CVE-2008-5017 CVE-2008-5016
                      CVE-2008-5015 CVE-2008-5014 CVE-2008-5013
                      CVE-2008-5012 CVE-2008-4582 CVE-2008-4070
                      CVE-2008-4069 CVE-2008-4068 CVE-2008-4067
                      CVE-2008-4066 CVE-2008-4065 CVE-2008-4064
                      CVE-2008-4063 CVE-2008-4062 CVE-2008-4061
                      CVE-2008-4060 CVE-2008-4059 CVE-2008-4058
                      CVE-2008-3837 CVE-2008-3836 CVE-2008-3835
                      CVE-2008-2934 CVE-2008-2933 CVE-2008-2811
                      CVE-2008-2809 CVE-2008-2808 CVE-2008-2807
                      CVE-2008-2805 CVE-2008-2803 CVE-2008-2802
                      CVE-2008-2801 CVE-2008-2800 CVE-2008-2785
                      CVE-2008-0017 CVE-2008-0016

Ref:                  AA-2008.0148
                      AA-2008.0158
                      AL-2008.0099
                      AL-2008.0114
                      AL-2008.0129
                      AU-2008.0016
                      AU-2008.0019
                      ESB-2008.0665
                      ESB-2008.0694
                      ESB-2008.0710
                      ESB-2008.0727
                      ESB-2008.0728
                      ESB-2008.0730
                      ESB-2008.0743
                      ESB-2008.0908
                      ESB-2008.0910
                      ESB-2008.0937
                      ESB-2008.0955
                      ESB-2008.1045
                      ESB-2008.1046
                      ESB-2008.1061
                      ESB-2008.1063
                      ESB-2008.1069
                      ESB-2008.1136
                      ESB-2009.0007
                      ESB-2009.0014
                      ESB-2009.0015
                      ESB-2009.0050
                      ESB-2009.0062

Original Bulletin:    
  http://sunsolve.sun.com/search/printfriendly.do?assetkey=1-66-256408-1

- --------------------------BEGIN INCLUDED TEXT--------------------

   Solution Type: Sun Alert
   Solution  256408 :   Multiple Security Vulnerabilities in Firefox
   Versions Before 2.0.0.19 May Allow Execution of Arbitrary Code or
   Access to Unauthorized Data          
   Bug ID: 6786624

   Product
   Firefox 2.0
   Solaris 10 Operating System
   OpenSolaris

   Date of Resolved Release: 07-Apr-2009

   SA Document Body
   Multiple Security Vulnerabilities in Firefox Versions Before 2.0.0.19 May 
   Allow Execution of Arbitrary Code or Access to Unauthorized Data

   1. Impact

   Multiple security vulnerabilities in firefox(1) versions prior to
   2.0.0.19 shipped with Solaris 10 may allow an unprivileged remote user
   to execute arbitrary code on the system where firefox(1) is being run,
   gain unauthorized access to sensitive data, perform Cross-Site
   Scripting (XSS) attacks to bypass access controls, read or modify data
   in other web sites, or inject code into web pages to obtain sensitive
   data from the user or information stored in cookies.

   Certain vulnerabilities may also allow a user to crash the firefox(1)
   application which is a type of Denial of Service (DoS).
   The following URL provides additional details about the
   vulnerabilities addressed in Firefox versions prior to 2.0.0.19:
   http://www.mozilla.org/security/known-vulnerabilities/firefox20.html
   
   The following CVEs correspond to the Mozilla Foundation Security
   Advisories referenced in the above URL for Firefox versions 2.0.0.15
   through 2.0.0.19:

   CVE-2008-2800  CVE-2008-2801  CVE-2008-2802
   CVE-2008-2803  CVE-2008-2805
   CVE-2008-2807  CVE-2008-2808  CVE-2008-2809
   CVE-2008-2811  CVE-2008-2785
   CVE-2008-2933  CVE-2008-2934  CVE-2008-0016
   CVE-2008-3835  CVE-2008-3836
   CVE-2008-3837  CVE-2008-4058  CVE-2008-4059
   CVE-2008-4060  CVE-2008-4061
   CVE-2008-4062  CVE-2008-4063  CVE-2008-4064
   CVE-2008-4065  CVE-2008-4066
   CVE-2008-4067  CVE-2008-4068  CVE-2008-4069
   CVE-2008-4070  CVE-2008-4582
   CVE-2008-5012  CVE-2008-5013  CVE-2008-5014
   CVE-2008-5015  CVE-2008-5016
   CVE-2008-5017  CVE-2008-5018  CVE-2008-5019
   CVE-2008-0017  CVE-2008-5021
   CVE-2008-5022  CVE-2008-5023  CVE-2008-5024
   CVE-2008-5500  CVE-2008-5501
   CVE-2008-5502  CVE-2008-5503  CVE-2008-5504
   CVE-2008-5505  CVE-2008-5506
   CVE-2008-5507  CVE-2008-5508  CVE-2008-5510
   CVE-2008-5511  CVE-2008-5512
   CVE-2008-5513

   2. Contributing Factors

   These issues can occur in the following releases:
   SPARC Platform
     * Firefox 2.0 for Solaris 10 without patch 125539-06
     * OpenSolaris based upon builds snv_89 through snv_94

   x86 Platform
     * Firefox 2.0 for Solaris 10 without patch 125540-06
     * OpenSolaris based upon builds snv_89 through snv_94

   Notes:
   1. Solaris 8 and Solaris 9 do not ship Firefox and therefore are not
   affected by these issues.
   2. Firefox 2.x is no longer shipped with OpenSolaris starting with
   snv_95 which includes Firefox 3.x.

   3. Symptoms

   There are no predictable symptoms that would indicate the described
   issues have been exploited.

   4. Workaround

   For the following Mozilla Foundation Security Advisories there is a
   workaround of disabling Java Script:

   MFSA 2008-22  MFSA 2008-24  MFSA 2008-25  MFSA
   2008-27  MFSA 2008-33
   MFSA 2008-34  MFSA 2008-38  MFSA 2008-39  MFSA
   2008-41  MFSA 2008-42
   MFSA 2008-43  MFSA 2008-47  MFSA 2008-49  MFSA
   2008-50  MFSA 2008-52
   MFSA 2008-53  MFSA 2008-55  MFSA 2008-56  MFSA
   2008-57  MFSA 2008-59
   MFSA 2008-60  MFSA 2008-61  MFSA 2008-62  MFSA
   2008-64  MFSA 2008-65
   MFSA 2008-68  MFSA 2008-69

   For Mozilla Foundation Security Advisory MFSA 2008-35, the following
   is a workaround:
   This attack only works if the user is using another internet-connected
   application with Firefox not running. Using Firefox, or making sure it
   is at least running, prevents this attack.
   For Mozilla Foundation Security Advisory MFSA 2008-40, the following
   is a workaround:

   1. Open Options/Preferences dialog
   2. Go to the "Content" tab
   3. Click the "Advanced..." button on the same line as the "Enable
   JavaScript" checkbox
   4. UN-check the "Move or resize existing windows" box.

   5. Resolution
   These issues are addressed in the following releases:
   SPARC Platform
     * Firefox 2.0 for Solaris 10 with patch 125539-06 or later
     * OpenSolaris based upon builds snv_95 or later

   x86 Platform
     * Firefox 2.0 for Solaris 10 with patch 125540-06 or later
     * OpenSolaris based upon builds snv_95 or later

   For more information on Security Sun Alerts, see Technical
   Instruction ID 213557.

   This Sun Alert notification is being provided to you on an "AS IS"
   basis. This Sun Alert notification may contain information provided by
   third parties. The issues described in this Sun Alert notification may
   or may not impact your system(s). Sun makes no representations,
   warranties, or guarantees as to the information contained herein. ANY
   AND ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING WITHOUT LIMITATION
   WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, OR
   NON-INFRINGEMENT, ARE HEREBY DISCLAIMED. BY ACCESSING THIS DOCUMENT
   YOU ACKNOWLEDGE THAT SUN SHALL IN NO EVENT BE LIABLE FOR ANY DIRECT,
   INDIRECT, INCIDENTAL, PUNITIVE, OR CONSEQUENTIAL DAMAGES THAT ARISE
   OUT OF YOUR USE OR FAILURE TO USE THE INFORMATION CONTAINED HEREIN.
   This Sun Alert notification contains Sun proprietary and confidential
   information. It is being provided to you pursuant to the provisions of
   your agreement to purchase services from Sun, or, if you do not have
   such an agreement, the Sun.com Terms of Use. This Sun Alert
   notification may only be used for the purposes contemplated by these
   agreements.

   Copyright 2000-2009 Sun Microsystems, Inc., 4150 Network Circle, Santa
   Clara, CA 95054 U.S.A. All rights reserved

- --------------------------END INCLUDED TEXT--------------------

You have received this e-mail bulletin as a result of your organisation's
registration with AusCERT. The mailing list you are subscribed to is
maintained within your organisation, so if you do not wish to continue
receiving these bulletins you should contact your local IT manager. If
you do not know who that is, please send an email to auscert@auscert.org.au
and we will forward your request to the appropriate person.

NOTE: Third Party Rights
This security bulletin is provided as a service to AusCERT's members.  As
AusCERT did not write the document quoted above, AusCERT has had no control
over its content. The decision to follow or act on information or advice
contained in this security bulletin is the responsibility of each user or
organisation, and should be considered in accordance with your organisation's
site policies and procedures. AusCERT takes no responsibility for consequences
which may arise from following or acting on information or advice contained in
this security bulletin.

NOTE: This is only the original release of the security bulletin.  It may
not be updated when updates to the original are made.  If downloading at
a later date, it is recommended that the bulletin is retrieved directly
from the author's website to ensure that the information is still current.

Contact information for the authors of the original document is included
in the Security Bulletin above.  If you have any questions or need further
information, please contact them directly.

Previous advisories and external security bulletins can be retrieved from:

        http://www.auscert.org.au/render.html?cid=1980

If you believe that your computer system has been compromised or attacked in 
any way, we encourage you to let us know by completing the secure National IT 
Incident Reporting Form at:

        http://www.auscert.org.au/render.html?it=3192

===========================================================================
Australian Computer Emergency Response Team
The University of Queensland
Brisbane
Qld 4072

Internet Email: auscert@auscert.org.au
Facsimile:      (07) 3365 7031
Telephone:      (07) 3365 4417 (International: +61 7 3365 4417)
                AusCERT personnel answer during Queensland business hours
                which are GMT+10:00 (AEST).
                On call after hours for member emergencies only.
===========================================================================

-----BEGIN PGP SIGNATURE-----
Comment: http://www.auscert.org.au/render.html?it=1967

iD8DBQFJ3X7bNVH5XJJInbgRAoo2AJ0de461t5hocwUv03PjdWzffOOA8ACfYXTQ
QM6IVcxRpoGbISleTfjqDnE=
=0DzN
-----END PGP SIGNATURE-----