ID de Prueba:	1.3.6.1.4.1.25623.1.0.130053
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0331)
Resumen:	The remote host is missing an update for the 'firefox, firefox-l10n, nspr, nss' package(s) announced via the MGASA-2015-0331 advisory.
Descripción:	Summary: The remote host is missing an update for the 'firefox, firefox-l10n, nspr, nss' package(s) announced via the MGASA-2015-0331 advisory. Vulnerability Insight: Updated firefox packages fix security vulnerabilities: A flaw was found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox (CVE-2015-4497). A flaw was found in the way Firefox handled installation of add-ons. An attacker could use this flaw to bypass the add-on installation prompt, and trick the user into installing an add-on from a malicious source (CVE-2015-4498). Affected Software/OS: 'firefox, firefox-l10n, nspr, nss' package(s) on Mageia 4, Mageia 5. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4497 BugTraq ID: 76502 http://www.securityfocus.com/bid/76502 Debian Security Information: DSA-3345 (Google Search) http://www.debian.org/security/2015/dsa-3345 http://www.zerodayinitiative.com/advisories/ZDI-15-406 RedHat Security Advisories: RHSA-2015:1693 http://rhn.redhat.com/errata/RHSA-2015-1693.html http://www.securitytracker.com/id/1033397 SuSE Security Announcement: SUSE-SU-2015:1504 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00013.html SuSE Security Announcement: SUSE-SU-2015:2081 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00025.html SuSE Security Announcement: openSUSE-SU-2015:1492 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-09/msg00000.html http://www.ubuntu.com/usn/USN-2723-1 Common Vulnerability Exposure (CVE) ID: CVE-2015-4498 BugTraq ID: 76505 http://www.securityfocus.com/bid/76505 http://www.securitytracker.com/id/1033396
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.