# MA-390.042014: MyCERT Alert - Security Updates for Firefox, Thunderbird and Seamonkey

**Date:** 30 Apr 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-390.042014  
**Advisory ID:** MA-390.042014

---

**1.0 Introduction**
The Mozilla Foundation has released security updates to address multiple vulnerabilities in Firefox, Thunderbird, and Seamonkey.
Mozilla users are encouraged to review the Security Advisories for those Mozilla vulnerabilities products (Firefox, Firefox ESR, Thunderbird and Seamonkey) to determine which updates should be applied to mitigate these risks.
**2.0 Impact**
An attacker who successfully exploits these vulnerabilities can obtain sensitive information, cause a denial-of-service condition, execute arbitrary code, conduct phishing attacks, conduct a man-in-the-middle attack, or operate with elevated privileges on an affected system.
**3.0 Affected Products**
The detail list of the Mozilla vulnerable products and versions are as below:
- Firefox 29
- Firefox ESR 24.5
- Thunderbird 24.5
- Seamonkey 2.26
**4.0 Recommendation**
MyCERT highly recommends users of these applications to upgrade to the latest version the affected products. The current latest versions are as below:
4.1 Mozilla Firefox 29
> Advisories can be referring at:
> <http://www.mozilla.org/security/known-vulnerabilities/firefox.html>
>
> Can be downloaded at:
> <http://www.mozilla.com/firefox/>
4.2 Mozilla Firefox ESR 24.5
> Advisories can be referring at:
> <http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html>
>
> Can be downloaded at:
> <https://ftp.mozilla.org/pub/mozilla.org/firefox/releases/latest-esr/>
4.3 Mozilla Thunderbird 24.5
> Advisories can be referring at:
> <http://www.mozilla.org/security/known-vulnerabilities/thunderbird.html>
>
> Can be downloaded at:
> <http://www.mozilla.org/en-GB/thunderbird/>
4.4 Mozilla Seamonkey 2.26
> Advisories can be referring at:
> <http://www.mozilla.org/security/known-vulnerabilities/seamonkey.html>
>
> Can be downloaded at:
> <http://www.seamonkey-project.org/releases/2.26b2>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#680b110a0d1a515151280b110a0d1a1b0d0b1d1a011c11460511) or [[email protected]](/cdn-cgi/l/email-protection#dbb6a2b8bea9af9bb6a2b8bea9aff5b4a9bcf5b6a2)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : <https://www.mycert.org.my>
Twitter : <http://www.twitter.com/mycert>
**5.0 References**
- <https://www.us-cert.gov/ncas/current-activity/2014/04/29/Mozilla-Releases-Security-Updates-Firefox-Thunderbird-and-Seamonkey>
- <http://www.mozilla.org/security/known-vulnerabilities/>
- <https://isc.sans.edu/forums/diary/Security+patches+for+Mozilla+Firefox+Thunderbird+SeaMonkey/1515>