Fedora 7 : Miro-1.1-3.fc7 / chmsee-1.0.0-1.28.fc7 / devhelp-0.13-13.fc7 / epiphany-2.18.3-6.fc7 / etc (2008-1435)

high Nessus Plugin ID 31060

Synopsis

The remote Fedora host is missing one or more security updates.

Description

Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed web content. A web page containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox.
(CVE-2008-0412, CVE-2008-0413, CVE-2008-0415, CVE-2008-0419) Several flaws were found in the way Firefox displayed malformed web content. A web page containing specially crafted content could trick a user into surrendering sensitive information. (CVE-2008-0591, CVE-2008-0593) A flaw was found in the way Firefox stored password data. If a user saves login information for a malicious website, it could be possible to corrupt the password database, preventing the user from properly accessing saved password data. (CVE-2008-0417) A flaw was found in the way Firefox handles certain chrome URLs. If a user has certain extensions installed, it could allow a malicious website to steal sensitive session data. Note: this flaw does not affect a default installation of Firefox. (CVE-2008-0418) A flaw was found in the way Firefox saves certain text files. If a website offers a file of type 'plain/text', rather than 'text/plain', Firefox will not show future 'text/plain' content to the user in the browser, forcing them to save those files locally to view the content. (CVE-2008-0592) Users of firefox are advised to upgrade to these updated packages, which contain updated packages to resolve these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

See Also

https://bugzilla.redhat.com/show_bug.cgi?id=431732

https://bugzilla.redhat.com/show_bug.cgi?id=431733

https://bugzilla.redhat.com/show_bug.cgi?id=431739

https://bugzilla.redhat.com/show_bug.cgi?id=431742

https://bugzilla.redhat.com/show_bug.cgi?id=431748

https://bugzilla.redhat.com/show_bug.cgi?id=431749

https://bugzilla.redhat.com/show_bug.cgi?id=431751

https://bugzilla.redhat.com/show_bug.cgi?id=431752

https://bugzilla.redhat.com/show_bug.cgi?id=431756

https://bugzilla.redhat.com/show_bug.cgi?id=432036

https://bugzilla.redhat.com/show_bug.cgi?id=432040

http://www.nessus.org/u?63627475

http://www.nessus.org/u?4225307a

http://www.nessus.org/u?5f2dbb08

http://www.nessus.org/u?ded22244

http://www.nessus.org/u?f7f870dd

http://www.nessus.org/u?a24c3429

http://www.nessus.org/u?3bc6d673

http://www.nessus.org/u?d6e3b3b7

http://www.nessus.org/u?e9ddf257

http://www.nessus.org/u?382378d6

http://www.nessus.org/u?86d0cc5c

http://www.nessus.org/u?8fa9b38c

http://www.nessus.org/u?4d5c6865

http://www.nessus.org/u?e6df462e

Plugin Details

Severity: High

ID: 31060

File Name: fedora_2008-1435.nasl

Version: 1.19

Type: local

Agent: unix

Published: 2/14/2008

Updated: 1/11/2021

Supported Sensors: Frictionless Assessment Agent, Nessus Agent, Agentless Assessment, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: High

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:miro, p-cpe:/a:fedoraproject:fedora:chmsee, p-cpe:/a:fedoraproject:fedora:devhelp, p-cpe:/a:fedoraproject:fedora:epiphany, p-cpe:/a:fedoraproject:fedora:epiphany-extensions, p-cpe:/a:fedoraproject:fedora:firefox, p-cpe:/a:fedoraproject:fedora:galeon, p-cpe:/a:fedoraproject:fedora:gnome-python2-extras, p-cpe:/a:fedoraproject:fedora:gtkmozembedmm, p-cpe:/a:fedoraproject:fedora:kazehakase, p-cpe:/a:fedoraproject:fedora:liferea, p-cpe:/a:fedoraproject:fedora:openvrml, p-cpe:/a:fedoraproject:fedora:ruby-gnome2, p-cpe:/a:fedoraproject:fedora:yelp, cpe:/o:fedoraproject:fedora:7

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2/13/2008

Vulnerability Publication Date: 2/8/2008

Reference Information

CVE: CVE-2008-0412, CVE-2008-0413, CVE-2008-0414, CVE-2008-0415, CVE-2008-0417, CVE-2008-0418, CVE-2008-0419, CVE-2008-0591, CVE-2008-0592, CVE-2008-0593, CVE-2008-0594

CWE: 20, 200, 22, 399, 79, 94

FEDORA: 2008-1435