Firefox ESR 17.x < 17.0.1 Multiple Vulnerabilities

critical Nessus Plugin ID 63549

Synopsis

The remote Windows host contains a web browser that is affected by multiple vulnerabilities.

Description

The installed version of Firefox 17.x is potentially affected by the following security issues :
- An unspecified memory corruption issue exists.
(CVE-2013-0749, CVE-2013-0769)

- Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)

Solution

Upgrade to Firefox 17.0.1 / 17.0.1 ESR or later.

See Also

https://www.mozilla.org/en-US/security/advisories/mfsa2013-01/

https://www.mozilla.org/en-US/security/advisories/mfsa2013-02/

Plugin Details

Severity: Critical

ID: 63549

File Name: mozilla_firefox_1701.nasl

Version: 1.11

Type: local

Agent: windows

Family: Windows

Published: 1/15/2013

Updated: 12/4/2019

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 6.7

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS Score Source: CVE-2013-0769

Vulnerability Information

CPE: cpe:/a:mozilla:firefox

Required KB Items: Mozilla/Firefox/Version

Exploit Ease: No known exploits are available

Patch Publication Date: 1/8/2013

Vulnerability Publication Date: 1/8/2013

Reference Information

CVE: CVE-2013-0749, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0769, CVE-2013-0771

BID: 57193, 57194, 57195, 57196, 57197, 57198, 57203, 57205