Shuichiro Suzuki

**Name of the Vulnerable Software and Affected Versions** Juniper NetScreen Firewall versions 5.4, 6.2, 6.3 **Description** The issue allows remote attackers to cause a denial of service via a crafted packet when the Ping of Death screen is disabled. **Recommendations** For versions 5.4, 6.2, 6.3, enable the Ping of Death screen to prevent the denial of service.

**Name of the Vulnerable Software and Affected Versions** Mozilla Firefox versions prior to 20.0 on Android **Description** The issue allows attackers to modify add-ons before installation by leveraging the time window during which the app tmp directory is used, due to world-writable and world-readable permissions for the app tmp installation directory in the local filesystem. **Recommendations** For versions prior to 20.0 on Android, update to version 20.0 or later to resolve the issue.