You are here: Security Center > Mozilla Foundation Security Advisories > MFSA 2009-10
Mozilla Foundation Security Advisory 2009-10
Title: Upgrade PNG library to fix memory safety hazards
Impact: Critical
Announced: March 4, 2009
Reporter: Tavis Ormandy
Products: Firefox, Thunderbird, SeaMonkey
Fixed in: Firefox 3.0.7
Thunderbird 2.0.0.21
SeaMonkey 1.1.15
Description
Google security researcher Tavis Ormandy reported
several memory safety hazards to the libpng
project, an
external library used by Mozilla to render PNG images. These vulnerabilities
could be used by a malicious website to crash a victim's browser and
potentially execute arbitrary code on their computer. libpng
was upgraded to version 1.2.35 which containis fixes for these flaws.