Test ID:	1.3.6.1.4.1.25623.1.2.1.2013.42
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2013-42) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: Privileged access for content level constructor Security researcher Cody Crews reported a method to call a content level constructor that allows for this constructor to have chrome privileged access. This affects chrome object wrappers (COW) and allows for write actions on objects when only read actions should be allowed. This can lead to cross-site scripting (XSS) attacks. Affected Software/OS: Firefox version(s) below 21. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2013-1670 BugTraq ID: 59865 http://www.securityfocus.com/bid/59865 Debian Security Information: DSA-2699 (Google Search) http://www.debian.org/security/2013/dsa-2699 http://www.exploit-db.com/exploits/34363 http://www.mandriva.com/security/advisories?name=MDVSA-2013:165 http://www.osvdb.org/93427 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17046 RedHat Security Advisories: RHSA-2013:0820 http://rhn.redhat.com/errata/RHSA-2013-0820.html RedHat Security Advisories: RHSA-2013:0821 http://rhn.redhat.com/errata/RHSA-2013-0821.html SuSE Security Announcement: openSUSE-SU-2013:0825 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00010.html SuSE Security Announcement: openSUSE-SU-2013:0831 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00011.html SuSE Security Announcement: openSUSE-SU-2013:0834 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00012.html SuSE Security Announcement: openSUSE-SU-2013:0929 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00006.html SuSE Security Announcement: openSUSE-SU-2013:0946 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-06/msg00008.html http://www.ubuntu.com/usn/USN-1822-1 http://www.ubuntu.com/usn/USN-1823-1
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.