Mozilla has released updates for its Firefox browser, Thunderbird e-mail application and the SeaMonkey application suite to fix "critical" security vulnerabilities.
The vulnerabilities affect 1.5 versions of Firefox and Thunderbird as well as version 1 of the SeaMonkey suite, Mozilla said in its security advisories. The bugs , the latest version of the browser .
Security monitoring companies Secunia and the French Security Incident Response Team, or FrSIRT, deem the issues "highly critical" and "critical," respectively. People who use vulnerable versions of the Mozilla products are urged to upgrade to the fixed versions, both companies said.
"The security vulnerabilities could be exploited by malicious people to bypass security restrictions, conduct cross-site scripting attacks and potentially compromise a vulnerable system," Secunia said in its alert.
Mozilla plans to support Firefox 1.5 until April 24, 2007, six months after it shipped Firefox 2. The security flaws are fixed in Firefox 220.127.116.11, Thunderbird 18.104.22.168 and SeaMonkey 1.0.6. Thewas released in September.