Detections
Analytics
FreeBSD : mozilla -- multiple vulnerabilities (f82c85d8-1c6e-11df-abb2-000f20797ede)
critical Nessus Plugin ID 44661
Language:
Synopsis
The remote FreeBSD host is missing one or more security-related updates.Description
Mozilla Project reports :MFSA 2010-05 XSS hazard using SVG document and binary Content-Type
MFSA 2010-04 XSS due to window.dialogArguments being readable cross-domain
MFSA 2010-03 Use-after-free crash in HTML parser
MFSA 2010-02 Web Worker Array Handling Heap Corruption Vulnerability
MFSA 2010-01 Crashes with evidence of memory corruption (rv:1.9.1.8/ 1.9.0.18)
Solution
Update the affected packages.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2010-01/
https://www.mozilla.org/en-US/security/advisories/mfsa2010-02/
https://www.mozilla.org/en-US/security/advisories/mfsa2010-03/
https://www.mozilla.org/en-US/security/advisories/mfsa2010-04/
https://www.mozilla.org/en-US/security/advisories/mfsa2010-05/
Plugin Details
Severity: Critical
ID: 44661
File Name: freebsd_pkg_f82c85d81c6e11dfabb2000f20797ede.nasl
Version: 1.18
Type: local
Family: FreeBSD Local Security Checks
Published: 2/19/2010
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:firefox, p-cpe:/a:freebsd:freebsd:linux-firefox, p-cpe:/a:freebsd:freebsd:linux-firefox-devel, p-cpe:/a:freebsd:freebsd:seamonkey, p-cpe:/a:freebsd:freebsd:thunderbird, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Patch Publication Date: 2/18/2010
Vulnerability Publication Date: 2/17/2010
Reference Information
CVE: CVE-2009-1571, CVE-2009-3988, CVE-2010-0159, CVE-2010-0160, CVE-2010-0162