Mozilla Thunderbird GIF Image Processing

[Mobo]

Mark Dowd has reported a vulnerability in Thunderbird, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in the GIF image processing of Netscape extension 2 blocks and can be exploited to cause a heap-based buffer overflow via a specially crafted image.

Successful exploitation may allow execution of arbitrary code.

The vulnerability has been reported in versions prior to 1.0.2.

Solution:
Update to version 1.0.2.
http://www.mozilla.org/products/thunderbird/

Provided and/or discovered by:
Mark Dowd, ISS X-Force

Original Advisory:
Mozilla:
http://www.mozilla.org/security/anno...sa2005-30.html