Multiple security vulnerabilities fixed in Firefox and Thunderbird
The releases of Firefox 13 and Thunderbird 13 close a number of critical security holes in the open source browser and email client. Mozilla has also ported most of these fixes to the Extended Support Release (ESR) versions of both products.
Firefox 13 includes seven security fixes in total, four of them for critically rated vulnerabilities. Six of these security problems also affect Firefox ESR. The corrections fix a buffer overflow and a use-after-free problem both found using the Address Sanitizer tool and several other memory safety issues. A critical privilege escalation vulnerability in the Mozilla Updater only affects the current edition of Firefox; the ESR edition is unaffected.
The vulnerabilities and their fixes are mirrored in the Thunderbird 13 and Thunderbird ESR updates as the browser and email client share a large amount of rendering code.
Firefox 13 (release notes), Firefox ESR 10.0.5 (release notes), Thunderbird 13 (release notes) and Thunderbird ESR 10.0.5 (release notes) are available from Mozilla's web site for Windows, Mac OS X and Linux.
(fab)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/6/7/2/comingin310_4_kicker-4977194bfb0de0d7.png)
![Kernel Log: Coming in 3.10 (Part 3) [--] Infrastructure](/imgs/43/1/0/4/2/3/2/3/comingin310_3_kicker-151cd7b9e9660f05.png)
