Mozilla Firefox / Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities were identified in Mozilla Firefox / Thunderbird. A remote user can cause arbitrary code to be executed on the target user's system. A remote user can conduct clickjacking attacks.

1. A remote user can create specially crafted content that, when loaded by the target user, will trigger a buffer overflow, use-after-free, memory corruption or boundary error and execute arbitrary code on the target system. The code will run with the privileges of the target user.
2. On Windows 8 systems with a gamepad or virtual gamepad installed, a user can trigger a buffer overflow in the Gamepad API to execute arbitrary code.
3. A remote user can create a specially crafted embedded flash object that, when loaded by the target user, will cause the cursor to be made invisible, facilitating clickjacking attacks.