Vulnerability   
Search   
    Search 324607 CVE descriptions
and 145615 test descriptions,
access 10,000+ cross references.
Tests   CVE   All  

Test ID:1.3.6.1.4.1.25623.1.0.56719
Category:Debian Local Security Checks
Title:Debian: Security Advisory (DSA-1055-1)
Summary:The remote host is missing an update for the Debian 'mozilla-firefox' package(s) announced via the DSA-1055-1 advisory.
Description:Summary:
The remote host is missing an update for the Debian 'mozilla-firefox' package(s) announced via the DSA-1055-1 advisory.

Vulnerability Insight:
Martijn Wargers and Nick Mott described crashes of Mozilla due to the use of a deleted controller context. In theory this could be abused to execute malicious code. Since Mozilla and Firefox share the same codebase, Firefox may be vulnerable as well.

For the stable distribution (sarge) this problem has been fixed in version 1.0.4-2sarge7.

For the unstable distribution (sid) this problem has been fixed in version 1.5.dfsg+1.5.0.3-1.

We recommend that you upgrade your Mozilla Firefox packages.

Affected Software/OS:
'mozilla-firefox' package(s) on Debian 3.1.

Solution:
Please install the updated package(s).

CVSS Score:
5.1

CVSS Vector:
AV:N/AC:H/Au:N/C:P/I:P/A:P

Cross-Ref: Common Vulnerability Exposure (CVE) ID: CVE-2006-1993
BugTraq ID: 17671
http://www.securityfocus.com/bid/17671
Bugtraq: 20060424 Firefox Remote Code Execution and DoS 1.5.0.2 (Google Search)
http://www.securityfocus.com/archive/1/431878/100/0/threaded
CERT/CC vulnerability note: VU#866300
http://www.kb.cert.org/vuls/id/866300
Debian Security Information: DSA-1053 (Google Search)
http://www.debian.org/security/2006/dsa-1053
Debian Security Information: DSA-1055 (Google Search)
http://www.debian.org/security/2006/dsa-1055
http://www.gentoo.org/security/en/glsa/glsa-200605-06.xml
HPdes Security Advisory: HPSBTU02118
http://www.securityfocus.com/archive/1/434524/100/0/threaded
HPdes Security Advisory: HPSBUX02153
http://www.securityfocus.com/archive/1/446658/100/200/threaded
HPdes Security Advisory: SSRT061145
HPdes Security Advisory: SSRT061181
http://www.securident.com/vuln/ff.txt
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1790
http://securitytracker.com/id?1015981
http://secunia.com/advisories/19802
http://secunia.com/advisories/20015
http://secunia.com/advisories/20019
http://secunia.com/advisories/20070
http://secunia.com/advisories/20214
http://secunia.com/advisories/22066
http://securityreason.com/securityalert/780
http://www.vupen.com/english/advisories/2006/1614
http://www.vupen.com/english/advisories/2006/1922
http://www.vupen.com/english/advisories/2006/3748
http://www.vupen.com/english/advisories/2008/0083
XForce ISS Database: firefox-iframe-contentwindowfocus-bo(25994)
https://exchange.xforce.ibmcloud.com/vulnerabilities/25994
CopyrightCopyright (C) 2008 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.

To run a free test of this vulnerability against your system, register below.




© 1998-2025 E-Soft Inc. All rights reserved.