Test ID:	1.3.6.1.4.1.25623.1.0.801133
Category:	Denial of Service
Title:	Mozilla Firefox Multiple Memory Corruption Vulnerabilities (Nov 2009) - Linux
Summary:	Mozilla Firefox is prone to multiple memory vorruption vulnerabilities.
Description:	Summary: Mozilla Firefox is prone to multiple memory vorruption vulnerabilities. Vulnerability Insight: - An error exists when creating JavaScript web-workers recursively that can be exploited to trigger the use of freed memory. - An error in the embedded 'liboggz' or 'libvorbis' library that can be exploited to cause a crash. - An error exists in the 'oggplay_data_handle_theora_frame' function in media/liboggplay/src/liboggplay/oggplay_data.c in 'liboggplay' library that can be exploited to cause a crash. Vulnerability Impact: Successful exploitation will let attacker to cause Denial of Service or memory corrption on the user's system. Affected Software/OS: Firefox version 3.5 before 3.5.4 on Linux. Solution: Upgrade to Firefox version 3.5.4. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2009-3371 http://www.mandriva.com/security/advisories?name=MDVSA-2009:294 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6464 http://sunsolve.sun.com/search/document.do?assetkey=1-26-272909-1 http://www.vupen.com/english/advisories/2009/3334 Common Vulnerability Exposure (CVE) ID: CVE-2009-3377 http://lists.fedoraproject.org/pipermail/package-announce/2010-June/042716.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6375 Common Vulnerability Exposure (CVE) ID: CVE-2009-3378 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6443 Common Vulnerability Exposure (CVE) ID: CVE-2009-3379 https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00315.html https://www.redhat.com/archives/fedora-package-announce/2009-November/msg00369.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10993 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6582 http://www.redhat.com/support/errata/RHSA-2009-1561.html http://secunia.com/advisories/37306 http://secunia.com/advisories/37340 http://www.ubuntu.com/usn/USN-861-1 Common Vulnerability Exposure (CVE) ID: CVE-2009-3381 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6495 Common Vulnerability Exposure (CVE) ID: CVE-2009-3383 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5996
Copyright	Copyright (C) 2009 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.