Fedora Core 3: FEDORA-2005-872 Critical: firefox HTML Exploit

Mozilla Firefox is an open-source web browser, designed for standards

compliance, performance and portability.

An updated firefox package that fixes as security bug is now

available for Fedora Core 3 and Fedora Core 4.

This update has been rated as having critical security

impact by the Fedora Security Response Team.

Mozilla Firefox is an open source Web browser.

A bug was found in the way Firefox processes certain

international domain names. An attacker could create a

specially crafted HTML file, which when viewed by the victim

would cause Firefox to crash or possibly execute arbitrary

code. The Common Vulnerabilities and Exposures project

(cve.mitre.org) has assigned the name CAN-2005-2871 to this

issue.

Users of Firefox are advised to upgrade to this updated

package that contains a backported patch and is not

vulnerable to this issue.

- Fix for CAN-2005-2871

6eaa113f4341531a82c3acdb38a8ce63 SRPMS/firefox-1.0.6-1.2.fc3.src.rpm

b3d5af88b33c7e160c897bc88f3d405e x86_64/firefox-1.0.6-1.2.fc3.x86_64.rpm

f2a098f972ca7f274d779c65bcc2bfe9 x86_64/debug/firefox-debuginfo-1.0.6-1.2.fc3.x86_64.rpm

597068a88783d1b0687cd4789a215267 i386/firefox-1.0.6-1.2.fc3.i386.rpm

820745933f8f81270e4981657432454b i386/debug/firefox-debuginfo-1.0.6-1.2.fc3.i386.rpm

This update can also be installed with the Update Agent; you can

launch the Update Agent with the 'up2date' command.

fedora-announce-list mailing list

fedora-announce-list@redhat.com