ID de Prueba:	1.3.6.1.4.1.25623.1.0.130074
Categoría:	Mageia Linux Local Security Checks
Título:	Mageia: Security Advisory (MGASA-2015-0305)
Resumen:	The remote host is missing an update for the 'firefox, firefox-l10n' package(s) announced via the MGASA-2015-0305 advisory.
Descripción:	Summary: The remote host is missing an update for the 'firefox, firefox-l10n' package(s) announced via the MGASA-2015-0305 advisory. Vulnerability Insight: Updated firefox packages fix security vulnerability: Security researcher Cody Crews reported on a way to violate the same origin policy and inject script into a non-privileged part of the built-in PDF Viewer in Firefox. This would allow an attacker to read and steal sensitive local files on the victim's computer (CVE-2015-4495). Affected Software/OS: 'firefox, firefox-l10n' package(s) on Mageia 4, Mageia 5. Solution: Please install the updated package(s). CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:N/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-4495 BugTraq ID: 76249 http://www.securityfocus.com/bid/76249 https://www.exploit-db.com/exploits/37772/ https://security.gentoo.org/glsa/201512-10 RedHat Security Advisories: RHSA-2015:1581 http://rhn.redhat.com/errata/RHSA-2015-1581.html http://www.securitytracker.com/id/1033216 SuSE Security Announcement: SUSE-SU-2015:1379 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00009.html SuSE Security Announcement: SUSE-SU-2015:1380 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00010.html SuSE Security Announcement: SUSE-SU-2015:1449 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00021.html SuSE Security Announcement: SUSE-SU-2015:1528 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-09/msg00016.html SuSE Security Announcement: openSUSE-SU-2015:1389 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00014.html SuSE Security Announcement: openSUSE-SU-2015:1390 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-08/msg00015.html http://www.ubuntu.com/usn/USN-2707-1
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.