Your submission was sent successfully! Close

USN-717-2: Firefox vulnerabilities

10 February 2009

Firefox vulnerabilities




A flaw was discovered in the browser engine when restoring closed tabs. If a
user were tricked into restoring a tab to a malicious website with form input
controls, an attacker could steal local files on the user's system.

Wladimir Palant discovered that Firefox did not restrict access to cookies in
HTTP response headers. If a user were tricked into opening a malicious web
page, a remote attacker could view sensitive information. (CVE-2009-0357)

Update instructions

The problem can be corrected by updating your system to the following package versions:

Ubuntu 7.10

After a standard system upgrade you need to restart Firefox to effect the
necessary changes.

Related notices