Búsqueda de    
Vulnerabilidad   
    Buscar 324607 Descripciones CVE y
145615 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.882958
Categoría:CentOS Local Security Checks
Título:CentOS Update for firefox CESA-2018:2881 centos6
Resumen:Check the version of firefox
Descripción:Summary:
Check the version of firefox

Vulnerability Insight:
Mozilla Firefox is an open-source web browser,
designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 60.2.2 ESR.

Security Fix(es):

* Mozilla: type confusion in JavaScript (CVE-2018-12386)

* Mozilla: stack out-of-bounds read in Array.prototype.push
(CVE-2018-12387)

For more details about the security issue(s), including the impact, a CVSS
score, and other related information, refer to the CVE page(s) listed in
the References section.

Red Hat would like to thank the Mozilla project for reporting these issues.
The upstream acknowledges Niklas Baumstark, Samuel Gross, and Bruno Keith as
the original reporters, via Beyond Security's SecuriTeam Secure Disclosure
program.

Affected Software/OS:
firefox on CentOS 6

Solution:
Please install the updated packages.

CVSS Score:
6.4

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:P

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2018-12386
BugTraq ID: 105460
http://www.securityfocus.com/bid/105460
Debian Security Information: DSA-4310 (Google Search)
https://www.debian.org/security/2018/dsa-4310
https://security.gentoo.org/glsa/201810-01
RedHat Security Advisories: RHSA-2018:2881
https://access.redhat.com/errata/RHSA-2018:2881
RedHat Security Advisories: RHSA-2018:2884
https://access.redhat.com/errata/RHSA-2018:2884
http://www.securitytracker.com/id/1041770
https://usn.ubuntu.com/3778-1/
Common Vulnerability Exposure (CVE) ID: CVE-2018-12387
CopyrightCopyright (C) 2018 Greenbone Networks GmbH

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2025 E-Soft Inc. Todos los derechos reservados.