OS/Platform/Application:

Mozilla Firefox all versions older than 2.0.0.15
Firefox version 3*

Category: ALERT
Severity: HIGH
Attention: Firefox users, System Administrators, Desktop Support Personnel.

Summary: On July 15 2008 the Mozilla Foundation released two security bulletins (MFSA 2008-34 and 2008-35).  Each of the bulletins detail a newly-discovered critical vulnerability in the Firefox browser.  According to the bulletins, updating to the latest version of Firefox* will fix these vulnerabilities.

Recommended Actions:  Users of Firefox version 2.0.0.15 or earlier should upgrade to version 2.0.0.16 as soon as possible.

*NOTE FOR USERS OF FIREFOX 3: Security bulletins MFSA 2008-34 and 2008-35 both state that Firefox version 3.0.1 fixes these vulnerabilities but at the time of this writing (8:00 AM 7/16/08) version 3.0.1 is not yet available for download on the Firefox website.  Users of Firefox 3 should check the download website for availability of Firefox 3 and/or anticipate the need to update their browsers to 3.0.1 shortly.  When Firefox 3.0.1 is available users should install it as soon as possible.

Readers are encouraged to share this alert with family, friends, and associates.

ITS Actions: N/A

Resources:

Security Bulletin MFSA 2008-34:
http://www.mozilla.org/security/announce/2008/mfsa2008-34.html

Security Bulletin MFSA 2008-35:
http://www.mozilla.org/security/announce/2008/mfsa2008-35.html

Firefox download page:
http://www.mozilla.com/en-US/firefox/all.html