Test ID:	1.3.6.1.4.1.25623.1.2.1.2011.55
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2011-55) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: nsSVGValue out-of-bounds access Security researcher regenrecht reported via TippingPoint's Zero Day Initiative that a flaw in the Mozilla SVG implementation could result in an out-of-bounds memory access if SVG elements were removed during a DOMAttrModified event handler. Affected Software/OS: Firefox version(s) below 3.6.28 and below 9. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-3658 http://www.mandriva.com/security/advisories?name=MDVSA-2011:192 http://www.mandriva.com/security/advisories?name=MDVSA-2012:031 http://osvdb.org/77953 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14664 http://www.securitytracker.com/id?1026445 http://www.securitytracker.com/id?1026446 http://www.securitytracker.com/id?1026447 http://secunia.com/advisories/47302 http://secunia.com/advisories/47334 http://secunia.com/advisories/48495 http://secunia.com/advisories/48553 http://secunia.com/advisories/48823 http://secunia.com/advisories/49055 SuSE Security Announcement: openSUSE-SU-2012:0007 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00001.html SuSE Security Announcement: openSUSE-SU-2012:0039 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-01/msg00009.html SuSE Security Announcement: openSUSE-SU-2012:0417 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-03/msg00042.html http://www.ubuntu.com/usn/USN-1401-1 XForce ISS Database: firefox-domattrmodified-code-exec(71910) https://exchange.xforce.ibmcloud.com/vulnerabilities/71910
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.