Mozilla decided to join the mayhem on Black Tuesday this month and released Firefox and Thunderbird.

This updates to:

• Firefox 21.0
• Firefox ESR 17.0.6
• Thunderbird 17.0.6
• Thunderbird ESR 17.0.6

Release notes:

https://www.mozilla.org/security/known-vulnerabilities/firefox.html

Security content o fthe updates:

• MFSA 2013-48 Memory corruption found using Address Sanitizer
  CVE-2013-1676, CVE-2013-1677, CVE-2013-1678, CVE-2013-1679, CVE-2013-1680 and CVE-2013-1681
• MFSA 2013-47 Uninitialized functions in DOMSVGZoomEvent
  CVE-2013-1675
• MFSA 2013-46 Use-after-free with video and onresize event
  CVE-2013-1674
• MFSA 2013-45 Mozilla Updater fails to update some Windows Registry entries
  CVE-2013-1673 and CVE-2012-1942
• MFSA 2013-44 Local privilege escalation through Mozilla Maintenance Service
  CVE-2013-1672
• MFSA 2013-43 File input control has access to full path
  CVE-2013-1671
• MFSA 2013-42 Privileged access for content level constructor
  CVE-2013-1670
• MFSA 2013-41 Miscellaneous memory safety hazards (rv:21.0 / rv:17.0.6)
  CVE-2013-0801 and CVE-2013-1669

--
Swa Frantzen -- Section 66