Mozilla Firefox / Thunderbird / SeaMonkey Multiple Vulnerabilities

Multiple vulnerabilities have been identified in Mozilla Firefox, Thunderbird, and SeaMonkey, which can be exploited by malicious people to conduct cross-site scripting attacks, bypass certain security restrictions, disclose certain sensitive information, and compromise a user's system.

1. A use-after-free error exists within shlwapi.dll when closing a child window that uses the file open dialog, and the "nsSMILTimeValueSpec::ConvertBetweenTimeContainers()" function when handling certain SVG animation.
2. An error when handling certain drag and drop actions and Content Security Policy headers can be exploited to conduct cross-site scripting attacks.
3. An out-of-bounds read error in SVG filters can be exploited to disclose certain data.
4. An error when handling "javascript:" home page can be exploited to execute script code in "about:sessionrestore" context.
5. An unspecified error exists when accessing a keyframe's cssText after dynamic modification.
6. The window.fullScreen property does not properly enforce the mozRequestFullscreen policy, which can be exploited to bypass the policy and spoof certain content.
7. Multiple unspecified errors can be exploited to corrupt memory.

Successful exploitation of vulnerabilities 1, 4, 5 and 7 may allow execution of arbitrary code.