Attackers could remotely execute code on compromised systems
Shaun Nichols in California, vnunet.com28 Feb 2008
ADVERTISEMENT
Users are being urged to update their copies of
Mozilla's
Thunderbird and
SeaMonkey email
applications after the disclosure of a serious security flaw.
The
advisory
warns of a 'critical' flaw in the two applications which could allow an attacker
to remotely execute code on compromised systems.
Mozilla said that the vulnerability lies in the way Thunderbird handles Mime
content in email messages.
By sending a specially crafted message, an attacker could trigger a buffer
overflow error which would leave the user vulnerable to the remote installation
and launch of malware.
Discovery of the flaw was credited to a security researcher using the name
'regenrecht', who reported the vulnerability in January via
iDefense.
Management Accountant - Finance Project, Swindon, £32,469 + Benefits As part of our ongoing modernisation agenda,we are establishing a Shared Services Centre that will deliver considerable efficiency improvements and cost savings.You will implement effective new ... more >
Systems Administrator, £28,290 - £33,780 PA We require a motivated and enthusiastic individual to join our Faculty IT Team, which is responsible for providing IT support to all Faculty staff and postgraduate students. You will ... more >
Solution Architect, Warrington, Salary and Package to attract the best These positions require highly skilled Solution Architects with demonstrable experience of working within a complex enterprise project environment. Working within the Business Solutions Team you ... more >
Communications Centre Operator, £25,133 - £30,615 We're the Secret Intelligence Service. You may know us as MI6. Information is at the heart of everything we do. We operate around the world to gather intelligence which ... more >More job opportunities
Print
Discuss
Send to friend
RSS feeds
An interview with Mozilla discussing present and future developments 06 Jul 2007
del.icio.us
Digg this
reddit!
