Test ID:	1.3.6.1.4.1.25623.1.1.10.2020.0009
Category:	Mageia Linux Local Security Checks
Title:	Mageia: Security Advisory (MGASA-2020-0009)
Summary:	The remote host is missing an update for the 'gjs, mozjs60' package(s) announced via the MGASA-2020-0009 advisory.
Description:	Summary: The remote host is missing an update for the 'gjs, mozjs60' package(s) announced via the MGASA-2020-0009 advisory. Vulnerability Insight: The updated packages fix security vulnerabilities: A type confusion vulnerability can occur when manipulating JavaScript objects due to issues in Array.pop. This can allow for an exploitable crash. We are aware of targeted attacks in the wild abusing this flaw. This vulnerability affects Firefox ESR < 60.7.1, Firefox < 67.0.3, and Thunderbird < 60.7.2. (CVE-2019-11707) Insufficient vetting of parameters passed with the Prompt:Open IPC message between child and parent processes can result in the non-sandboxed parent process opening web content chosen by a compromised child process. When combined with additional vulnerabilities this could result in executing arbitrary code on the user's computer. This vulnerability affects Firefox ESR < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2. (CVE-2019-11708) The mozjs60 package has been updated to version 60.9.0, fixing these issues and other bugs. The gjs package has been rebuilt against the updated mozjs60. Affected Software/OS: 'gjs, mozjs60' package(s) on Mageia 7. Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11707 https://security.gentoo.org/glsa/201908-12 https://bugzilla.mozilla.org/show_bug.cgi?id=1544386 https://www.mozilla.org/security/advisories/mfsa2019-18/ https://www.mozilla.org/security/advisories/mfsa2019-20/ Common Vulnerability Exposure (CVE) ID: CVE-2019-11708 http://packetstormsecurity.com/files/155592/Mozilla-Firefox-Windows-64-Bit-Chain-Exploit.html https://bugzilla.mozilla.org/show_bug.cgi?id=1559858 https://www.mozilla.org/security/advisories/mfsa2019-19/
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.