Test Kennung:	1.3.6.1.4.1.25623.1.0.801132
Kategorie:	Denial of Service
Titel:	Mozilla Firefox Multiple Memory Corruption Vulnerabilities (Nov 2009) - Windows
Zusammenfassung:	Mozilla Firefox is prone to multiple Memory Corruption vulnerabilities.
Beschreibung:	Summary: Mozilla Firefox is prone to multiple Memory Corruption vulnerabilities. Vulnerability Insight: - An error exists when creating JavaScript web-workers recursively that can be exploited to trigger the use of freed memory. - An error in the embedded 'liboggz' or 'libvorbis' library that can be exploited to cause a crash. - An error exists in the 'oggplay_data_handle_theora_frame' function in media/liboggplay/src/liboggplay/oggplay_data.c in 'liboggplay' library that can be exploited to cause a crash. Vulnerability Impact: Successful exploitation will let attacker to cause Denial of Service or memory corrption on the user's system. Affected Software/OS: Firefox version 3.5 before 3.5.4 on Windows. Solution: Upgrade to Firefox version 3.5.4. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3371 http://www.mandriva.com/security/advisories?name=MDVSA-2009:294 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6464 http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 http://www.vupen.com/english/advisories/2009/3334 Common Vulnerability Exposure (CVE) ID: CVE-2009-3377 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042716.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6375 Common Vulnerability Exposure (CVE) ID: CVE-2009-3378 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6443 Common Vulnerability Exposure (CVE) ID: CVE-2009-3379 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582 http://www.redhat.com/support/errata/RHSA-2009-1561.html http://secunia.com/advisories/37306 http://secunia.com/advisories/37340 http://www.ubuntu.com/usn/USN-861-1 Common Vulnerability Exposure (CVE) ID: CVE-2009-3381 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6495 Common Vulnerability Exposure (CVE) ID: CVE-2009-3383 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5996
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.