Test ID:	1.3.6.1.4.1.25623.1.2.1.2015.09
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2015-09) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: XrayWrapper bypass through DOM objects Mozilla developer Bobby Holley reported that Document Object Model (DOM) objects with some specific properties can bypass XrayWrappers. This can allow web content to confuse privileged code, potentially enabling privilege escalation. Affected Software/OS: Firefox version(s) below 35. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2014-8636 BugTraq ID: 72041 http://www.securityfocus.com/bid/72041 https://security.gentoo.org/glsa/201504-01 http://packetstormsecurity.com/files/130972/Firefox-Proxy-Prototype-Privileged-Javascript-Injection.html https://community.rapid7.com/community/metasploit/blog/2015/03/23/r7-2015-04-disclosure-mozilla-firefox-proxy-prototype-rce-cve-2014-8636 http://www.securitytracker.com/id/1031533 http://secunia.com/advisories/62242 http://secunia.com/advisories/62250 http://secunia.com/advisories/62418 http://secunia.com/advisories/62446 http://secunia.com/advisories/62790 SuSE Security Announcement: SUSE-SU-2015:0171 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00032.html SuSE Security Announcement: SUSE-SU-2015:0173 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00033.html SuSE Security Announcement: SUSE-SU-2015:0180 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00036.html SuSE Security Announcement: openSUSE-SU-2015:0077 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-01/msg00014.html SuSE Security Announcement: openSUSE-SU-2015:0192 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-02/msg00002.html XForce ISS Database: firefox-cve20148636-sec-bypass(99964) https://exchange.xforce.ibmcloud.com/vulnerabilities/99964
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.