Test ID:	1.3.6.1.4.1.25623.1.0.801471
Category:	General
Title:	Mozilla Products Multiple Cross-site Scripting Vulnerabilities - Windows
Summary:	Mozilla Firefox/Seamonkey is prone to multiple vulnerabilities.
Description:	Summary: Mozilla Firefox/Seamonkey is prone to multiple vulnerabilities. Vulnerability Insight: The flaw is due to an error in functions used by the 'Gopher parser' to convert text to HTML tags, could be exploited to turn text into executable JavaScript. Vulnerability Impact: Successful exploitation will let attackers to inject arbitrary web script or HTML via a crafted name of a file or directory on a Gopher server. Affected Software/OS: SeaMonkey version before 2.0.9 Firefox version before 3.5.14 and 3.6.x before 3.6.11 Solution: Upgrade to Firefox version 3.6.11 or 3.5.14 or later Upgrade to Seamonkey version 2.0.9 or later CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2010-3177 Debian Security Information: DSA-2124 (Google Search) http://www.debian.org/security/2010/dsa-2124 http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050154.html http://lists.fedoraproject.org/pipermail/package-announce/2010-October/050077.html http://www.mandriva.com/security/advisories?name=MDVSA-2010:210 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12202 http://www.redhat.com/support/errata/RHSA-2010-0781.html http://www.redhat.com/support/errata/RHSA-2010-0782.html http://www.redhat.com/support/errata/RHSA-2010-0861.html http://secunia.com/advisories/42867 http://www.ubuntu.com/usn/USN-997-1 http://www.vupen.com/english/advisories/2011/0061
Copyright	Copyright (C) 2010 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.