Detections
Analytics
FreeBSD : firefox -- javascript garbage collector vulnerability (67bd39ba-12b5-11dd-bab7-0016179b2dd5)
high Nessus Plugin ID 32064
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Mozilla Foundation reports :Fixes for security problems in the JavaScript engine described in MFSA 2008-15 introduced a stability problem, where some users experienced crashes during JavaScript garbage collection. This is being fixed primarily to address stability concerns. We have no demonstration that this particular crash is exploitable but are issuing this advisory because some crashes of this type have been shown to be exploitable in the past.
Solution
Update the affected packages.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2008-20/
Plugin Details
Severity: High
ID: 32064
File Name: freebsd_pkg_67bd39ba12b511ddbab70016179b2dd5.nasl
Version: 1.20
Type: local
Family: FreeBSD Local Security Checks
Published: 4/28/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:linux-thunderbird, p-cpe:/a:freebsd:freebsd:firefox, p-cpe:/a:freebsd:freebsd:linux-flock, p-cpe:/a:freebsd:freebsd:flock, p-cpe:/a:freebsd:freebsd:thunderbird, p-cpe:/a:freebsd:freebsd:seamonkey, p-cpe:/a:freebsd:freebsd:linux-seamonkey, p-cpe:/a:freebsd:freebsd:linux-seamonkey-devel, p-cpe:/a:freebsd:freebsd:linux-firefox-devel, cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:linux-firefox
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Ease: No known exploits are available
Patch Publication Date: 4/25/2008
Vulnerability Publication Date: 4/16/2008
Reference Information
CVE: CVE-2008-1237, CVE-2008-1380
BID: 28818