Test ID:	1.3.6.1.4.1.25623.1.0.856530
Category:	openSUSE Local Security Checks
Title:	openSUSE Security Advisory (SUSE-SU-2024:3519-1)
Summary:	The remote host is missing an update for the 'MozillaFirefox' package(s) announced via the SUSE-SU-2024:3519-1 advisory.
Description:	Summary: The remote host is missing an update for the 'MozillaFirefox' package(s) announced via the SUSE-SU-2024:3519-1 advisory. Vulnerability Insight: This update for MozillaFirefox fixes the following issues: Update to Firefox Extended Support Release 128.3.0 ESR (MFSA-2024-47, bsc#1230979): - CVE-2024-8900: Clipboard write permission bypass - CVE-2024-9392: Compromised content process can bypass site isolation - CVE-2024-9393: Cross-origin access to PDF contents through multipart responses - CVE-2024-9394: Cross-origin access to JSON contents through multipart responses - CVE-2024-9396: Potential memory corruption may occur when cloning certain objects - CVE-2024-9397: Potential directory upload bypass via clickjacking - CVE-2024-9398: External protocol handlers could be enumerated via popups - CVE-2024-9399: Specially crafted WebTransport requests could lead to denial of service - CVE-2024-9400: Potential memory corruption during JIT compilation - CVE-2024-9401: Memory safety bugs fixed in Firefox 131, Firefox ESR 115.16, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 - CVE-2024-9402: Memory safety bugs fixed in Firefox 131, Firefox ESR 128.3, Thunderbird 131, and Thunderbird 128.3 Affected Software/OS: 'MozillaFirefox' package(s) on openSUSE Leap 15.5, openSUSE Leap 15.6. Solution: Please install the updated package(s). CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2024-8900 Common Vulnerability Exposure (CVE) ID: CVE-2024-9392 Common Vulnerability Exposure (CVE) ID: CVE-2024-9393 Common Vulnerability Exposure (CVE) ID: CVE-2024-9394 Common Vulnerability Exposure (CVE) ID: CVE-2024-9396 Common Vulnerability Exposure (CVE) ID: CVE-2024-9397 Common Vulnerability Exposure (CVE) ID: CVE-2024-9398 Common Vulnerability Exposure (CVE) ID: CVE-2024-9399 Common Vulnerability Exposure (CVE) ID: CVE-2024-9400 Common Vulnerability Exposure (CVE) ID: CVE-2024-9401 Common Vulnerability Exposure (CVE) ID: CVE-2024-9402
Copyright	Copyright (C) 2024 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.