ID de Prueba:	1.3.6.1.4.1.25623.1.0.805517
Categoría:	Privilege escalation
Título:	Mozilla Firefox ESR SVG Privilege Escalation Vulnerability (Mar 2015) - Mac OS X
Resumen:	Mozilla Firefox ESR is prone to a privilege escalation vulnerability.
Descripción:	Summary: Mozilla Firefox ESR is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists due to an error in docshell/base/nsDocShell.cpp within the SVG format content navigation functionality. Vulnerability Impact: Successful exploitation will allow remote attackers to gain elevated privileges and execute arbitrary scripts with the elevated privileges. Affected Software/OS: Mozilla Firefox ESR 31.x before 31.5.3 on Mac OS X Solution: Upgrade to Mozilla Firefox ESR version 31.5.3 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0818 BugTraq ID: 73265 http://www.securityfocus.com/bid/73265 Debian Security Information: DSA-3201 (Google Search) http://www.debian.org/security/2015/dsa-3201 https://security.gentoo.org/glsa/201504-01 RedHat Security Advisories: RHSA-2015:0718 http://rhn.redhat.com/errata/RHSA-2015-0718.html http://www.securitytracker.com/id/1031959 SuSE Security Announcement: SUSE-SU-2015:0593 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html SuSE Security Announcement: SUSE-SU-2015:0630 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html SuSE Security Announcement: openSUSE-SU-2015:0567 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html SuSE Security Announcement: openSUSE-SU-2015:0636 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html http://www.ubuntu.com/usn/USN-2538-1
Copyright	Copyright (C) 2015 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.