Debian Security Advisory DSA 775-1 – A vulnerability has been discovered in Mozilla and Mozilla Firefox that allows remote attackers to inject arbitrary Javascript from one page into the frameset of another site. Thunderbird is not affected by this and Galeon will be automatically fixed as it uses Mozilla components.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/39414/dsa-775-1.txt
Source: https://packetstormsecurity.com/files/39414/Debian-Linux-Security-Advisory-775-1.html