Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | |||
Test ID: | 1.3.6.1.4.1.25623.1.0.802151 |
Category: | General |
Title: | Mozilla Products Multiple Vulnerabilities - Sep 11 (Windows) |
Summary: | The host is installed with Mozilla firefox/thunderbird/seamonkey; and is prone to multiple unspecified vulnerabilities. |
Description: | Summary: The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple unspecified vulnerabilities. Vulnerability Insight: The flaws are due to - Unspecified errors in the browser engine in mozilla products. - Improperly handling of the 'RegExp.input' property, which allows remote attackers to bypass the same origin policy and read data from a different domain via a crafted web site. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code in the context of the user running an affected application. Failed exploit attempts will result in a denial-of-service condition. Affected Software/OS: Mozilla Firefox version before 3.6.20 SeaMonkey version 1.x and 2.0 through 2.2 Thunderbird version 2.x and 3.0 through 3.1.11 Solution: Upgrade to Mozilla Firefox version 3.6.20 or later, Upgrade to SeaMonkey version to 2.3 or later, Upgrade to Thunderbird version to 3.1.12 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C |
Cross-Ref: |
BugTraq ID: 49216 BugTraq ID: 49223 Common Vulnerability Exposure (CVE) ID: CVE-2011-2982 Debian Security Information: DSA-2295 (Google Search) http://www.debian.org/security/2011/dsa-2295 Debian Security Information: DSA-2296 (Google Search) http://www.debian.org/security/2011/dsa-2296 Debian Security Information: DSA-2297 (Google Search) http://www.debian.org/security/2011/dsa-2297 http://www.mandriva.com/security/advisories?name=MDVSA-2011:127 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14294 http://www.redhat.com/support/errata/RHSA-2011-1164.html http://www.redhat.com/support/errata/RHSA-2011-1165.html http://www.redhat.com/support/errata/RHSA-2011-1166.html http://www.redhat.com/support/errata/RHSA-2011-1167.html http://www.securitytracker.com/id?1025940 SuSE Security Announcement: SUSE-SA:2011:037 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html SuSE Security Announcement: SUSE-SU-2011:0967 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00027.html Common Vulnerability Exposure (CVE) ID: CVE-2011-2983 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14272 |
Copyright | Copyright (C) 2011 Greenbone Networks GmbH |
This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |