07/13/2004: Mozilla Browser Security Patch for Windows XP users UPDATE
To verify that you've correctly installed the available patch, please visit:
If you have any questions, please contact the BOL Help Desk at (310)825-7452, option 1, or at consult@ucla.edu.
There is a security update for users of Mozilla 1.x (up to Mozilla 1.7), Mozilla Firefox (up to 0.9.1), and Mozilla Thunderbird (up to 0.7.1) on Microsoft Windows 2000 and XP operating systems. The patch, called ShellBlock, disables the ability to call the shell protocol from within affected Mozilla programs. This protocol allows applications to call Windows Explorer, and use the protocol to run a specified file on the local machine. Please run ShellBlock from:
Mozilla 1.7.1, Firefox 0.9.2 and Thunderbird 0.7.2 have been released on the Mozilla site with the patch included. You can download Mozilla 1.7.1 from the BOL Website as well at:
We apologize for any inconvenience this may cause. If you have any questions, please contact the BOL Help Desk at (310)825-7452, option 1, or at consult@ucla.edu.