Detections
Analytics
SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 5218)
high Nessus Plugin ID 32113
Synopsis
The remote SuSE 10 host is missing a security-related patch.Description
This update brings Mozilla Firefox to security update version 2.0.0.14- Fixes for security problems in the JavaScript engine described in MFSA 2008-15 (CVE-2008-1237) introduced a stability problem, where some users experienced frequent crashes during JavaScript garbage collection. These crashes may be exploitable if someone finds a reliable way to trigger the crash. (MFSA 2008-20 / CVE-2008-1380)
Solution
Apply ZYPP patch number 5218.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2008-15/
https://www.mozilla.org/en-US/security/advisories/mfsa2008-20/
Plugin Details
Severity: High
ID: 32113
File Name: suse_MozillaFirefox-5218.nasl
Version: 1.20
Type: local
Agent: unix
Family: SuSE Local Security Checks
Published: 5/1/2008
Updated: 1/14/2021
Supported Sensors: Continuous Assessment, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Low
Score: 3.6
CVSS v2
Risk Factor: High
Base Score: 9.3
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/o:suse:suse_linux
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list
Patch Publication Date: 4/27/2008
Vulnerability Publication Date: 3/27/2008
Reference Information
CVE: CVE-2008-1380
CWE: 399