Detections
Analytics
FreeBSD : mozilla firefox -- multiple vulnerabilities (922d2398-9e2d-11de-a998-0030843d3802)
critical Nessus Plugin ID 40935
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Mozilla Foundation reports :MFSA 2009-51 Chrome privilege escalation with FeedWriter
MFSA 2009-50 Location bar spoofing via tall line-height Unicode characters
MFSA 2009-49 TreeColumns dangling pointer vulnerability
MFSA 2009-48 Insufficient warning for PKCS11 module installation and removal
MFSA 2009-47 Crashes with evidence of memory corruption (rv:1.9.1.3/1.9.0.14)
Solution
Update the affected packages.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2009-49/
https://www.mozilla.org/en-US/security/advisories/mfsa2009-47/
https://www.mozilla.org/en-US/security/advisories/mfsa2009-48/
https://www.mozilla.org/en-US/security/advisories/mfsa2009-50/
https://www.mozilla.org/en-US/security/advisories/mfsa2009-51/
https://secuniaresearch.flexerasoftware.com/advisories/36671/
Plugin Details
Severity: Critical
ID: 40935
File Name: freebsd_pkg_922d23989e2d11dea9980030843d3802.nasl
Version: 1.19
Type: local
Family: FreeBSD Local Security Checks
Published: 9/11/2009
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:firefox, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 9/10/2009
Vulnerability Publication Date: 9/10/2009
Reference Information
CVE: CVE-2009-3069, CVE-2009-3070, CVE-2009-3071, CVE-2009-3072, CVE-2009-3073, CVE-2009-3074, CVE-2009-3075, CVE-2009-3076, CVE-2009-3077, CVE-2009-3078, CVE-2009-3079