# MA-404.062014: MyCERT Advisory - Mozilla Releases Security Updates for Firefox, Firefox ESR, Thunderbird, and Netscape Portable Runtime

**Date:** 16 Jun 2014  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-404.062014  
**Advisory ID:** MA-404.062014

---

**1.0 Introduction**
Mozilla has released security updates to address multiple vulnerabilities in Firefox, Firefox ESR, Thunderbird, and Netscape Portable Runtime. Exploitation of these vulnerabilities may allow an attackers to execute arbitrary code, cause a denial of service, or conduct clickjacking attacks.
Mozilla users are encouraged to review the Security Advisories for those Mozilla vulnerabilities products (Firefox, Firefox ESR, Thunderbird, and Netscape Portable Runtime) to determine which updates should be applied to mitigate these risks.
**2.0 Impact**
An attacker who successfully exploits these vulnerabilities can obtain sensitive information, cause a denial-of-service condition, execute arbitrary code, conduct phishing attacks, conduct a man-in-the-middle attack, or operate with elevated privileges on an affected system.
**3.0 Affected Products**
The detail list of the Mozilla vulnerable products and versions are as below:
- Firefox 30
- Firefox ESR 24.6
- Thunderbird 24.6
- Netscape Portable Runtime 4.10.6
**4.0 Recommendation**
MyCERT highly recommended users of these applications to upgrade to the latest version of the affected products. The following updates are available:
**4.1 Mozilla Firefox 30**
> Advisories can be referring at:
> <http://www.mozilla.org/security/known-vulnerabilities/firefox.html>
>
> Can be downloaded at:
> <http://www.mozilla.com/firefox/>
**4.2 Mozilla Firefox ESR 24.6**
> Advisories can be referring at:
> <http://www.mozilla.org/security/known-vulnerabilities/firefoxESR.html>
>
> Can be downloaded at:
> <http://www.mozilla.org/en-US/firefox/organizations/all/>
**4.3 Mozilla Thunderbird 24.6**
> Advisories can be referring at:
> <http://www.mozilla.org/security/known-vulnerabilities/thunderbird.html>
>
> Can be downloaded at:
> <http://www.mozilla.org/en-GB/thunderbird/>
**4.4 Netscape Portable Runtime 4.10.6**
> Advisories can be referring at:
> <http://www.mozilla.org/security/announce/2014/mfsa2014-55.html>
>
> Can be downloaded at:
> <https://developer.mozilla.org/en-US/docs/Mozilla/Projects/NSPR>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#593a203b3c2b606060193a203b3c2b2a3c3a2c2b302d20773420) or [[email protected]](/cdn-cgi/l/email-protection#8ce1f5efe9fef8cce1f5efe9fef8a2e3feeba2e1f5)
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : <https://www.mycert.org.my>
Twitter : <http://www.twitter.com/mycert>
**5.0 References**
- [US-CERT: Mozilla Releases Security Updates for Firefox, Firefox ESR, Thunderbird, and Netscape Portable Runtime](https://www.us-cert.gov/ncas/current-activity/2014/06/13/Mozilla-Releases-Security-Updates-Firefox-Firefox-ESR-Thunderbird)
- [Network Information Security and Technology News](http://www.nist.org/nist_plugins/newsfeed/newsfeed.php?show.41)