Mozilla Firefox 3.6.x < 3.6.17 Multiple Vulnerabilities

high Log Correlation Engine Plugin ID 801238

Synopsis

The remote host has a web browser installed that is vulnerable to multiple attack vectors.

Description

Versions of Firefox 3.6.x earlier than 3.6.17 are potentially affected by multiple vulnerabilities :

Multiple memory corruption issues could lead to arbitrary code execution. (MFSA2011-12)

- Multiple dangling pointer vulnerabilities exist. (MFSA2011-13)

- A Java applet could be used to mimic interaction with form autocomplete controls and steal entries from the form history. (MFSA2011-14)

- The Java Embedding Plugin (JEP) shipped with the Mac OS X versions of Firefox could be exploited to obtain elevated access to resources on a user's system. (MFSA2011-15)

- The 'resource: ' protocol could be exploited to allow directory traversal on Windows and the potential loading of resources from non-permitted locations. (MFSA2011-16)

- The XSLT 'generate-id()' function returned a string that revealed a specific valid address of an object on the memory heap. (MFSA2011-18)

Solution

Upgrade to Firefox 3.6.17 or later.

Plugin Details

Severity: High

ID: 801238

Family: Web Clients

Published: 4/29/2011

Nessus ID: 53594

Vulnerability Information

Patch Publication Date: 4/28/2011

Vulnerability Publication Date: 4/28/2011

Exploitable With

CANVAS (White_Phosphorus)

Metasploit (Mozilla Firefox "nsTreeRange" Dangling Pointer Vulnerability)

Reference Information

CVE: CVE-2011-0065, CVE-2011-0066, CVE-2011-0067, CVE-2011-0069, CVE-2011-0070, CVE-2011-0071, CVE-2011-0072, CVE-2011-0073, CVE-2011-0074, CVE-2011-0075, CVE-2011-0076, CVE-2011-0077, CVE-2011-0078, CVE-2011-0080, CVE-2011-0081, CVE-2011-1202

BID: 47668, 47641, 47646, 47647, 47648, 47651, 47653, 47654, 47655, 47656, 47659, 47662, 47663, 47667, 47635, 47657, 47660

Detections

Analytics