Test ID:	1.3.6.1.4.1.25623.1.0.801387
Category:	General
Title:	Mozilla Products Multiple Vulnerabilities (MFSA2010-38, MFSA2010-43, MFSA2010-44) - Windows
Summary:	Mozilla Firefox/Thunderbird are prone to multiple vulnerabilities.
Description:	Summary: Mozilla Firefox/Thunderbird are prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to: - An error in the handling of 'SJOW()' and 'fast()' native function, when content script which is running in a chrome context accesses a content object via SJOW. - An error in the handling of canvas element, can be used to read data from another site, violating the same-origin policy.The read restriction placed on a canvas element which has had cross-origin data rendered into it can be bypassed by retaining a reference to the canvas element's context and deleting the associated canvas node from the DOM. - Undefined positions within various 8 bit character encoding's are mapped to the sequence U+FFFD which when displayed causes the immediately following character to disappear from the text run. Vulnerability Impact: Successful exploitation will let attackers to cause a denial of service or execute arbitrary code or XSS problems. Affected Software/OS: Firefox version 3.5.x before 3.5.11 and 3.6.x before 3.6.7 Thunderbird version 3.1.x before 3.1.1 Solution: Upgrade to Firefox version 3.5.11 or 3.6.7 Upgrade to Thunderbird version 3.0.6 or 3.1.1 CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-1215 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11527 Common Vulnerability Exposure (CVE) ID: CVE-2010-1207 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11887 Common Vulnerability Exposure (CVE) ID: CVE-2010-1210 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11863
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.