Detections
Analytics
Fedora Core 3 : firefox-1.0.6-1.2.fc3 (2005-872)
high Nessus Plugin ID 19734
Synopsis
The remote Fedora Core host is missing a security update.Description
An updated firefox package that fixes as security bug is now available for Fedora Core 3 and Fedora Core 4.This update has been rated as having critical security impact by the Fedora Security Response Team.
Mozilla Firefox is an open source Web browser.
A bug was found in the way Firefox processes certain international domain names. An attacker could create a specially crafted HTML file, which when viewed by the victim would cause Firefox to crash or possibly execute arbitrary code. The Common Vulnerabilities and Exposures project (cve.mitre.org) has assigned the name CVE-2005-2871 to this issue.
Users of Firefox are advised to upgrade to this updated package that contains a backported patch and is not vulnerable to this issue.
Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
Solution
Update the affected firefox and / or firefox-debuginfo packages.See Also
Plugin Details
Severity: High
ID: 19734
File Name: fedora_2005-872.nasl
Version: 1.15
Type: local
Agent: unix
Family: Fedora Local Security Checks
Published: 9/17/2005
Updated: 1/11/2021
Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.9
CVSS v2
Risk Factor: High
Base Score: 7.5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: p-cpe:/a:fedoraproject:fedora:firefox-debuginfo, p-cpe:/a:fedoraproject:fedora:firefox, cpe:/o:fedoraproject:fedora_core:3
Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list
Patch Publication Date: 9/10/2005
Reference Information
CVE: CVE-2005-2871
FEDORA: 2005-872