![]() |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
Test ID: | 1.3.6.1.4.1.25623.1.2.1.2014.50 |
Category: | General |
Title: | Mozilla Firefox Security Advisory (MFSA2014-50) - Linux |
Summary: | This host is missing a security update for Mozilla Firefox. |
Description: | Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: Clickjacking through cursor invisibility after Flash interaction Security researcher Jordi Chancel reported a mechanism where the cursor can be rendered invisible after it has been used on an embedded flash object when used outside of the object. This flaw can be in used in combination with an image of the cursor manipulated through JavaScript, leading to clickjacking during interactions with HTML content subsequently. This issue only affects OS X and is not present on Windows or Linux systems. Affected Software/OS: Firefox version(s) below 30. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 5.0 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N |
Cross-Ref: |
Common Vulnerability Exposure (CVE) ID: CVE-2014-1539 BugTraq ID: 67967 http://www.securityfocus.com/bid/67967 https://security.gentoo.org/glsa/201504-01 http://www.securitytracker.com/id/1030388 http://secunia.com/advisories/59171 http://secunia.com/advisories/59387 http://secunia.com/advisories/59486 SuSE Security Announcement: openSUSE-SU-2014:0819 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-06/msg00040.html SuSE Security Announcement: openSUSE-SU-2014:0855 (Google Search) http://lists.opensuse.org/opensuse-updates/2014-07/msg00001.html |
Copyright | Copyright (C) 2021 Greenbone Networks GmbH |
This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below. |