Test ID:	1.3.6.1.4.1.25623.1.0.802183
Category:	General
Title:	Mozilla Products Same Origin Policy Bypass Vulnerability - Mac OS X
Summary:	Mozilla Firefox/Thunderbird/Seamonkey is prone to same origin policy bypass vulnerability.
Description:	Summary: Mozilla Firefox/Thunderbird/Seamonkey is prone to same origin policy bypass vulnerability. Vulnerability Insight: The flaw is due to some plugins, which use the value of 'window.location' to determine the page origin this could fool the plugin into granting the plugin content access to another site or the local file system in violation of the Same Origin Policy. Vulnerability Impact: Successful exploitation will let attackers to bypass the same-origin policy, execute arbitrary script code, obtain potentially sensitive information, or launch spoofing attacks against other sites. Affected Software/OS: SeaMonkey version prior to 2.3 Thunderbird version prior to 6.0 Mozilla Firefox before 3.6.23 and 4.x through 5 Solution: Upgrade to Mozilla Firefox version 3.6.23 or 6.0 or later, Upgrade to SeaMonkey version to 2.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-2999 Debian Security Information: DSA-2312 (Google Search) http://www.debian.org/security/2011/dsa-2312 Debian Security Information: DSA-2313 (Google Search) http://www.debian.org/security/2011/dsa-2313 Debian Security Information: DSA-2317 (Google Search) http://www.debian.org/security/2011/dsa-2317 http://www.mandriva.com/security/advisories?name=MDVSA-2011:139 http://www.mandriva.com/security/advisories?name=MDVSA-2011:140 http://www.mandriva.com/security/advisories?name=MDVSA-2011:141 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14252 http://www.redhat.com/support/errata/RHSA-2011-1341.html http://secunia.com/advisories/46315 SuSE Security Announcement: SUSE-SU-2011:1256 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html SuSE Security Announcement: openSUSE-SU-2011:1076 (Google Search) http://lists.opensuse.org/opensuse-updates/2011-10/msg00002.html
Copyright	Copyright (C) 2011 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.