Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.831539
Kategorie:Mandrake Local Security Checks
Titel:Mandriva Update for firefox MDVSA-2012:017 (firefox)
Zusammenfassung:The remote host is missing an update for the 'firefox'; package(s) announced via the referenced advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'firefox'
package(s) announced via the referenced advisory.

Vulnerability Insight:
Use-after-free vulnerability in Mozilla Firefox 10.x before 10.0.1,
Thunderbird 10.x before 10.0.1, and SeaMonkey 2.7 allows remote
attackers to cause a denial of service (application crash) or
possibly execute arbitrary code via vectors that trigger failure of
an nsXBLDocumentInfo::ReadPrototypeBindings function call, related
to the cycle collector's access to a hash table containing a stale
XBL binding (CVE-2012-0452).

Affected Software/OS:
firefox on Mandriva Linux 2011.0,
Mandriva Linux 2010.1

Solution:
Please Install the Updated Packages.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2012-0452
BugTraq ID: 51975
http://www.securityfocus.com/bid/51975
http://www.mandriva.com/security/advisories?name=MDVSA-2012:017
http://www.mandriva.com/security/advisories?name=MDVSA-2012:018
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15017
http://secunia.com/advisories/48110
http://secunia.com/advisories/49055
SuSE Security Announcement: SUSE-SU-2012:0261 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00013.html
SuSE Security Announcement: openSUSE-SU-2012:0258 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2012-02/msg00012.html
http://www.ubuntu.com/usn/USN-1360-1
CopyrightCopyright (C) 2012 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.