Mozilla Firefox / Thunderbird Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox and Thunderbird. A remote user can cause arbitrary code to be executed on the target user's system, conduct cross-site request forgery attacks, and obtain potentially sensitive information.

1. A remote user can create specially crafted HTML that, when loaded by the target user, will execute arbitrary code on the target system.
2. The navigator.sendBeacon() function does not honour the cross-origin resource sharing (CORS) specification. A remote user can exploit this to conduct cross-site request forgery attacks.
3. A remote Web Proxy can return an HTTP 407 Proxy Authentication response with a specially crafted Set-Cookie header value to inject cookies and conduct session-fixation attacks.