Detections
Analytics

openSUSE Security Update : MozillaFirefox (MozillaFirefox-1597)

medium Nessus Plugin ID 42925

Synopsis

The remote openSUSE host is missing a security update.

Description

The Mozilla Firefox 3.5.5 release fixes some instability issues caused by the 3.5.4 security upgrade.

One crash was assigned a CVE number: CVE-2009-3978: The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size.

Also some KDE4 integration bugs were fixed :

 - use mimetype for opening url if known (bnc#556156)

 - fix file dialog resetting icon size (bnc#546490) and file dialog for multiple files not working (bnc#548267)

 - fix KDE filepicker (bnc#548267,bnc#555438)

 - avoid possible deadlock with KDE integration (bnc#555202)

Solution

Update the affected MozillaFirefox packages.

See Also

https://bugzilla.novell.com/show_bug.cgi?id=546490

https://bugzilla.novell.com/show_bug.cgi?id=548267

https://bugzilla.novell.com/show_bug.cgi?id=553172

https://bugzilla.novell.com/show_bug.cgi?id=555202

https://bugzilla.novell.com/show_bug.cgi?id=555438

https://bugzilla.novell.com/show_bug.cgi?id=556156

Plugin Details

Severity: Medium

ID: 42925

File Name: suse_11_2_MozillaFirefox-091124.nasl

Version: 1.8

Type: local

Agent: unix

Published: 11/30/2009

Updated: 1/14/2021

Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Low

Score: 3.6

CVSS v2

Risk Factor: Medium

Base Score: 4.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:N/I:N/A:P

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:mozillafirefox, p-cpe:/a:novell:opensuse:mozillafirefox-branding-upstream, p-cpe:/a:novell:opensuse:mozillafirefox-translations-common, p-cpe:/a:novell:opensuse:mozillafirefox-translations-other, p-cpe:/a:novell:opensuse:mozilla-xulrunner191, p-cpe:/a:novell:opensuse:mozilla-xulrunner191-32bit, p-cpe:/a:novell:opensuse:mozilla-xulrunner191-devel, p-cpe:/a:novell:opensuse:mozilla-xulrunner191-gnomevfs, p-cpe:/a:novell:opensuse:mozilla-xulrunner191-gnomevfs-32bit, p-cpe:/a:novell:opensuse:mozilla-xulrunner191-kde4, p-cpe:/a:novell:opensuse:mozilla-xulrunner191-translations-common, p-cpe:/a:novell:opensuse:mozilla-xulrunner191-translations-other, p-cpe:/a:novell:opensuse:python-xpcom191, cpe:/o:novell:opensuse:11.2

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 11/24/2009

Reference Information

CVE: CVE-2009-3978