ID de Prueba:	1.3.6.1.4.1.25623.1.0.58802
Categoría:	FreeBSD Local Security Checks
Título:	FreeBSD Ports: firefox
Resumen:	The remote host is missing an update to the system; as announced in the referenced advisory.
Descripción:	Summary: The remote host is missing an update to the system as announced in the referenced advisory. Vulnerability Insight: The following packages are affected: firefox linux-firefox seamonkey linux-seamonkey linux-firefox-devel linux-seamonkey-devel firefox-ja linux-mozilla-devel linux-mozilla mozilla CVE-2006-4965 Apple QuickTime 7.1.3 Player and Plug-In allows remote attackers to execute arbitrary JavaScript code and possibly conduct other attacks via a QuickTime Media Link (QTL) file with an embed XML element and a qtnext parameter that identifies resources outside of the original domain. Solution: Update your system with the appropriate patches or software upgrades. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2006-4965 http://lists.apple.com/archives/Security-announce/2007/Mar/msg00000.html BugTraq ID: 20138 http://www.securityfocus.com/bid/20138 Bugtraq: 20060920 Backdooring MP3 files (plus QuickTime issues and Cross-context Scripting) (Google Search) http://www.securityfocus.com/archive/1/446750/100/0/threaded Bugtraq: 20061207 New MySpace worm could be on its way (Google Search) http://www.securityfocus.com/archive/1/453756/100/0/threaded Bugtraq: 20070912 0DAY: QuickTime pwns Firefox (Google Search) http://www.securityfocus.com/archive/1/479179/100/0/threaded CERT/CC vulnerability note: VU#751808 http://www.kb.cert.org/vuls/id/751808 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox http://www.gnucitizen.org/blog/backdooring-mp3-files/ http://www.gnucitizen.org/blog/myspace-quicktime-worm-follow-up http://www.securitytracker.com/id?1018687 http://secunia.com/advisories/22048 http://secunia.com/advisories/27414 http://securityreason.com/securityalert/1631 http://www.vupen.com/english/advisories/2007/3155
Copyright	Copyright (C) 2008 E-Soft Inc.

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.