Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 145615 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.1.10.2024.0349
Kategorie:Mageia Linux Local Security Checks
Titel:Mageia: Security Advisory (MGASA-2024-0349)
Zusammenfassung:The remote host is missing an update for the 'firefox, firefox-l10n, nspr, nss, rust' package(s) announced via the MGASA-2024-0349 advisory.
Beschreibung:Summary:
The remote host is missing an update for the 'firefox, firefox-l10n, nspr, nss, rust' package(s) announced via the MGASA-2024-0349 advisory.

Vulnerability Insight:
Permission leak via embed or object elements. (CVE-2024-10458)
Use-after-free in layout with accessibility. (CVE-2024-10459)
Confusing display of origin for external protocol handler prompt.
(CVE-2024-10460)
XSS due to Content-Disposition being ignored in
multipart/x-mixed-replace response. (CVE-2024-10461)
Origin of permission prompt could be spoofed by long URL.
(CVE-2024-10462)
Cross origin video frame leak. (CVE-2024-10463)
History interface could have been used to cause a Denial of Service
condition in the browser. (CVE-2024-10464)
Clipboard 'paste' button persisted across tabs. (CVE-2024-10465)
DOM push subscription message could hang Firefox. (CVE-2024-10466)
Memory safety bugs fixed in Firefox 132, Thunderbird 132, Firefox ESR
128.4, and Thunderbird 128.4. (CVE-2024-10467)

Affected Software/OS:
'firefox, firefox-l10n, nspr, nss, rust' package(s) on Mageia 9.

Solution:
Please install the updated package(s).

CVSS Score:
10.0

CVSS Vector:
AV:N/AC:L/Au:N/C:C/I:C/A:C

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2024-10458
Common Vulnerability Exposure (CVE) ID: CVE-2024-10459
Common Vulnerability Exposure (CVE) ID: CVE-2024-10460
Common Vulnerability Exposure (CVE) ID: CVE-2024-10461
Common Vulnerability Exposure (CVE) ID: CVE-2024-10462
Common Vulnerability Exposure (CVE) ID: CVE-2024-10463
Common Vulnerability Exposure (CVE) ID: CVE-2024-10464
Common Vulnerability Exposure (CVE) ID: CVE-2024-10465
Common Vulnerability Exposure (CVE) ID: CVE-2024-10466
Common Vulnerability Exposure (CVE) ID: CVE-2024-10467
CopyrightCopyright (C) 2024 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.