Test Kennung:	1.3.6.1.4.1.25623.1.1.10.2024.0189
Kategorie:	Mageia Linux Local Security Checks
Titel:	Mageia: Security Advisory (MGASA-2024-0189)
Zusammenfassung:	The remote host is missing an update for the 'firefox, firefox-l10n, nss' package(s) announced via the MGASA-2024-0189 advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'firefox, firefox-l10n, nss' package(s) announced via the MGASA-2024-0189 advisory. Vulnerability Insight: Arbitrary JavaScript execution in PDF.js. (CVE-2024-4367) IndexedDB files retained in private browsing mode. (CVE-2024-4767) Potential permissions request bypass via clickjacking. (CVE-2024-4768) Cross-origin responses could be distinguished between script and non-script content-types. (CVE-2024-4769) Use-after-free could occur when printing to PDF. (CVE-2024-4770) Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11. (CVE-2024-4777) Affected Software/OS: 'firefox, firefox-l10n, nss' package(s) on Mageia 9. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2024-4367 https://bugzilla.mozilla.org/show_bug.cgi?id=1893645 https://www.mozilla.org/security/advisories/mfsa2024-21/ https://www.mozilla.org/security/advisories/mfsa2024-22/ https://www.mozilla.org/security/advisories/mfsa2024-23/ https://lists.debian.org/debian-lts-announce/2024/05/msg00010.html https://lists.debian.org/debian-lts-announce/2024/05/msg00012.html Common Vulnerability Exposure (CVE) ID: CVE-2024-4767 https://bugzilla.mozilla.org/show_bug.cgi?id=1878577 Common Vulnerability Exposure (CVE) ID: CVE-2024-4768 https://bugzilla.mozilla.org/show_bug.cgi?id=1886082 Common Vulnerability Exposure (CVE) ID: CVE-2024-4769 https://bugzilla.mozilla.org/show_bug.cgi?id=1886108 Common Vulnerability Exposure (CVE) ID: CVE-2024-4770 https://bugzilla.mozilla.org/show_bug.cgi?id=1893270 Common Vulnerability Exposure (CVE) ID: CVE-2024-4777 Memory safety bugs fixed in Firefox 126, Firefox ESR 115.11, and Thunderbird 115.11 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1878199%2C1893340
Copyright	Copyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.