iceape

Several remote vulnerabilities have been discovered in the Iceape internet
suite, an unbranded version of the Seamonkey Internet Suite. The Common
Vulnerabilities and Exposures project identifies the following problems:

• CVE-2007-3844
  moz_bug_r_a4 discovered that a regression in the handling of
  about:blank windows used by addons may lead to an attacker being
  able to modify the content of web sites.
• CVE-2007-3845
  Jesper Johansson discovered that missing sanitising of double-quotes
  and spaces in URIs passed to external programs may allow an attacker
  to pass arbitrary arguments to the helper program if the user is
  tricked into opening a malformed web page.

The Mozilla products in the oldstable distribution (sarge) are no longer
supported with security updates.

For the stable distribution (etch) these problems have been fixed in version
1.0.10~pre070720-0etch3.

For the unstable distribution (sid) these problems have been fixed in version
1.1.3-2.

We recommend that you upgrade your iceape packages.