Test ID:	1.3.6.1.4.1.25623.1.0.63907
Category:	Red Hat Local Security Checks
Title:	RedHat Security Advisory RHSA-2009:0449
Summary:	The remote host is missing updates announced in;advisory RHSA-2009:0449.;;Mozilla Firefox is an open source Web browser. XULRunner provides the XUL;Runtime environment for Mozilla Firefox.;;A flaw was found in the processing of malformed web content. A web;page containing malicious content could cause Firefox to crash or,;potentially, execute arbitrary code as the user running Firefox.;(CVE-2009-1313);;For technical details regarding this flaw, refer to the Mozilla security;advisory for Firefox 3.0.10. You can find a link to the Mozilla advisories;in the References section of this errata.;;All Firefox users should upgrade to these updated packages, which contain;Firefox version 3.0.10, which corrects this issue. After installing the;update, Firefox must be restarted for the change to take effect.
Description:	Summary: The remote host is missing updates announced in advisory RHSA-2009:0449. Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A flaw was found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1313) For technical details regarding this flaw, refer to the Mozilla security advisory for Firefox 3.0.10. You can find a link to the Mozilla advisories in the References section of this errata. All Firefox users should upgrade to these updated packages, which contain Firefox version 3.0.10, which corrects this issue. After installing the update, Firefox must be restarted for the change to take effect. Solution: Please note that this update is available via Red Hat Network. To use Red Hat Network, launch the Red Hat Update Agent with the following command: up2date CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1313 1022126 http://securitytracker.com/id?1022126 1022127 http://securitytracker.com/id?1022127 34743 http://www.securityfocus.com/bid/34743 34851 http://secunia.com/advisories/34851 34866 http://secunia.com/advisories/34866 34910 http://secunia.com/advisories/34910 34919 http://secunia.com/advisories/34919 ADV-2009-1180 http://www.vupen.com/english/advisories/2009/1180 MDVSA-2009:111 http://www.mandriva.com/security/advisories?name=MDVSA-2009:111 RHSA-2009:0449 https://rhn.redhat.com/errata/RHSA-2009-0449.html SSA:2009-118-01 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.350967 USN-765-1 http://www.ubuntu.com/usn/USN-765-1 http://www.mozilla.org/security/announce/2009/mfsa2009-23.html https://bugzilla.mozilla.org/show_bug.cgi?id=489647 https://bugzilla.mozilla.org/show_bug.cgi?id=489676 https://bugzilla.mozilla.org/show_bug.cgi?id=490233 https://bugzilla.redhat.com/show_bug.cgi?id=497447 oval:org.mitre.oval:def:10446 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10446
Copyright	Copyright (C) 2009 E-Soft Inc.

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.