ID de Prueba:	1.3.6.1.4.1.25623.1.0.803472
Categoría:	General
Título:	Mozilla SeaMonkey Multiple Vulnerabilities -01 Apr13 (Mac OS X)
Resumen:	This host is installed with Mozilla SeaMonkey and is prone to multiple; vulnerabilities.
Descripción:	Summary: This host is installed with Mozilla SeaMonkey and is prone to multiple vulnerabilities. Vulnerability Insight: - Unspecified vulnerabilities in the browser engine - Buffer overflow in the Mozilla Maintenance Service - Not preventing origin spoofing of tab-modal dialogs - Untrusted search path vulnerability while handling dll files - Improper validation of address bar during history navigation - Integer signedness error in the 'pixman_fill_sse2' function in 'pixman-sse2.c' in Pixman - Error in 'CERT_DecodeCertPackage' function in Mozilla Network Security Services (NSS) - Improper handling of color profiles during PNG rendering in 'gfx.color_management.enablev4' - The System Only Wrapper (SOW) implementation does not prevent use of the cloneNode method for cloning a protected node Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code, memory corruption, bypass certain security restrictions and compromise a user's system. Affected Software/OS: Mozilla SeaMonkey version before 2.17 on Mac OS X Solution: Upgrade to Mozilla SeaMonkey version 2.17 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0788 Debian Security Information: DSA-2699 (Google Search) http://www.debian.org/security/2013/dsa-2699 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16629 RedHat Security Advisories: RHSA-2013:0696 http://rhn.redhat.com/errata/RHSA-2013-0696.html RedHat Security Advisories: RHSA-2013:0697 http://rhn.redhat.com/errata/RHSA-2013-0697.html SuSE Security Announcement: SUSE-SU-2013:0645 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html SuSE Security Announcement: SUSE-SU-2013:0850 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html SuSE Security Announcement: openSUSE-SU-2013:0630 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html SuSE Security Announcement: openSUSE-SU-2013:0631 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html SuSE Security Announcement: openSUSE-SU-2013:0875 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html http://www.ubuntu.com/usn/USN-1791-1 Common Vulnerability Exposure (CVE) ID: CVE-2013-0789 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17079 Common Vulnerability Exposure (CVE) ID: CVE-2013-0791 BugTraq ID: 58826 http://www.securityfocus.com/bid/58826 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17150 RedHat Security Advisories: RHSA-2013:1135 http://rhn.redhat.com/errata/RHSA-2013-1135.html RedHat Security Advisories: RHSA-2013:1144 http://rhn.redhat.com/errata/RHSA-2013-1144.html Common Vulnerability Exposure (CVE) ID: CVE-2013-0792 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17021 Common Vulnerability Exposure (CVE) ID: CVE-2013-0793 BugTraq ID: 58837 http://www.securityfocus.com/bid/58837 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16928 Common Vulnerability Exposure (CVE) ID: CVE-2013-0794 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17065 Common Vulnerability Exposure (CVE) ID: CVE-2013-0795 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16842 Common Vulnerability Exposure (CVE) ID: CVE-2013-0797 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17146 Common Vulnerability Exposure (CVE) ID: CVE-2013-0800 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16909
Copyright	Copyright (C) 2013 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.