ID de Prueba:	1.3.6.1.4.1.25623.1.0.805514
Categoría:	Privilege escalation
Título:	Mozilla Firefox SVG Navigation Privilege Escalation Vulnerability (Mar 2015) - Windows
Resumen:	Mozilla Firefox is prone to a privilege escalation vulnerability.
Descripción:	Summary: Mozilla Firefox is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists due to an error in docshell/base/nsDocShell.cpp within the SVG format content navigation functionality. Vulnerability Impact: Successful exploitation will allow remote attackers to gain elevated privileges and execute arbitrary scripts with the elevated privileges. Affected Software/OS: Mozilla Firefox before version 36.0.4 on Windows Solution: Upgrade to Mozilla Firefox version 36.0.4 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0818 BugTraq ID: 73265 http://www.securityfocus.com/bid/73265 Debian Security Information: DSA-3201 (Google Search) http://www.debian.org/security/2015/dsa-3201 https://security.gentoo.org/glsa/201504-01 RedHat Security Advisories: RHSA-2015:0718 http://rhn.redhat.com/errata/RHSA-2015-0718.html http://www.securitytracker.com/id/1031959 SuSE Security Announcement: SUSE-SU-2015:0593 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html SuSE Security Announcement: SUSE-SU-2015:0630 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html SuSE Security Announcement: openSUSE-SU-2015:0567 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html SuSE Security Announcement: openSUSE-SU-2015:0636 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html http://www.ubuntu.com/usn/USN-2538-1
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.