Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | |||
Test ID: | 1.3.6.1.4.1.25623.1.0.802153 |
Category: | General |
Title: | Mozilla Products Multiple Vulnerabilities - Sep 11 (Windows) |
Summary: | The host is installed with Mozilla firefox/thunderbird/seamonkey; and is prone to multiple vulnerabilities. |
Description: | Summary: The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to multiple vulnerabilities. Vulnerability Insight: The flaws are due to - An error when using Windows D2D hardware acceleration, allows attacker to obtain sensitive image data from a different domain. - Heap overflow in the Almost Native Graphics Layer Engine(ANGLE) library used in WebGL implementation. - Buffer overflow error in the WebGL shader implementation. - An error in the browser engine, it fails to implement WebGL, JavaScript - An error in the Ogg reader in the browser engine. Vulnerability Impact: Successful exploitation will let attackers to execute arbitrary code in the context of the user running an affected application. Failed exploit attempts will result in a denial-of-service condition. Affected Software/OS: Thunderbird version before 6 SeaMonkey version 2.0 through 2.2 Mozilla Firefox version 4.x through 5 Solution: Upgrade to Mozilla Firefox version 6.0 or later, Upgrade to SeaMonkey version to 2.3 or later, Upgrade to Thunderbird version to 6.0 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C |
Cross-Ref: |
BugTraq ID: 49224 BugTraq ID: 49227 BugTraq ID: 49226 BugTraq ID: 49242 BugTraq ID: 49239 BugTraq ID: 49243 BugTraq ID: 49245 Common Vulnerability Exposure (CVE) ID: CVE-2011-2985 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14440 http://secunia.com/advisories/49055 SuSE Security Announcement: SUSE-SA:2011:037 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-08/msg00023.html Common Vulnerability Exposure (CVE) ID: CVE-2011-2986 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14497 Common Vulnerability Exposure (CVE) ID: CVE-2011-2987 http://www.securityfocus.com/bid/49226 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14285 Common Vulnerability Exposure (CVE) ID: CVE-2011-2988 http://www.securityfocus.com/bid/49242 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14270 Common Vulnerability Exposure (CVE) ID: CVE-2011-2989 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14528 Common Vulnerability Exposure (CVE) ID: CVE-2011-2991 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14303 Common Vulnerability Exposure (CVE) ID: CVE-2011-2992 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14209 |
Copyright | Copyright (C) 2011 Greenbone Networks GmbH |
This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |