Detections
Analytics

Ubuntu 9.10 : firefox-3.5, xulrunner-1.9.1 vulnerabilities (USN-921-1)

critical Nessus Plugin ID 45484

Language:

Synopsis

The remote Ubuntu host is missing one or more security-related patches.

Description

Martijn Wargers, Josh Soref, Jesse Ruderman, and Ehsan Akhgari discovered flaws in the browser engine of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2010-0173, CVE-2010-0174)

It was discovered that Firefox could be made to access previously freed memory. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program.
(CVE-2010-0175, CVE-2010-0176, CVE-2010-0177)

Paul Stone discovered that Firefox could be made to change a mouse click into a drag and drop event. If the user could be tricked into performing this action twice on a crafted website, an attacker could execute arbitrary JavaScript with chrome privileges. (CVE-2010-0178)

It was discovered that the XMLHttpRequestSpy module as used by the Firebug add-on could be used to escalate privileges within the browser. If the user had the Firebug add-on installed and were tricked into viewing a malicious website, an attacker could potentially run arbitrary JavaScript. (CVE-2010-0179)

Henry Sudhof discovered that an image tag could be used as a redirect to a mailto: URL to launch an external mail handler. (CVE-2010-0181)

Wladimir Palant discovered that Firefox did not always perform security checks on XML content. An attacker could exploit this to bypass security policies to load certain resources. (CVE-2010-0182).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

See Also

https://usn.ubuntu.com/921-1/

Plugin Details

Severity: Critical

ID: 45484

File Name: ubuntu_USN-921-1.nasl

Version: 1.12

Type: local

Agent: unix

Published: 4/12/2010

Updated: 9/19/2019

Supported Sensors: Agentless Assessment, Continuous Assessment, Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:canonical:ubuntu_linux:firefox-3.0-dom-inspector, p-cpe:/a:canonical:ubuntu_linux:firefox-3.1-branding, p-cpe:/a:canonical:ubuntu_linux:xulrunner-1.9.1-gnome-support, p-cpe:/a:canonical:ubuntu_linux:firefox-3.1-dev, p-cpe:/a:canonical:ubuntu_linux:abrowser-3.5, p-cpe:/a:canonical:ubuntu_linux:abrowser-3.5-branding, p-cpe:/a:canonical:ubuntu_linux:xulrunner-1.9.1-testsuite, p-cpe:/a:canonical:ubuntu_linux:firefox-3.5-dev, p-cpe:/a:canonical:ubuntu_linux:firefox-gnome-support, cpe:/o:canonical:ubuntu_linux:9.10, p-cpe:/a:canonical:ubuntu_linux:abrowser-3.0, p-cpe:/a:canonical:ubuntu_linux:firefox-3.0-branding, p-cpe:/a:canonical:ubuntu_linux:firefox-3.0, p-cpe:/a:canonical:ubuntu_linux:firefox-3.1-dbg, p-cpe:/a:canonical:ubuntu_linux:xulrunner-1.9.1-dev, p-cpe:/a:canonical:ubuntu_linux:firefox-3.0-gnome-support, p-cpe:/a:canonical:ubuntu_linux:firefox-3.1-gnome-support, p-cpe:/a:canonical:ubuntu_linux:xulrunner-1.9.1-testsuite-dev, p-cpe:/a:canonical:ubuntu_linux:xulrunner-1.9.1-dbg, p-cpe:/a:canonical:ubuntu_linux:firefox-3.5-branding, p-cpe:/a:canonical:ubuntu_linux:firefox-3.0-dev, p-cpe:/a:canonical:ubuntu_linux:firefox-3.5-dbg, p-cpe:/a:canonical:ubuntu_linux:xulrunner-dev, p-cpe:/a:canonical:ubuntu_linux:abrowser-3.0-branding, p-cpe:/a:canonical:ubuntu_linux:abrowser-3.1, p-cpe:/a:canonical:ubuntu_linux:firefox-3.0-venkman, p-cpe:/a:canonical:ubuntu_linux:abrowser-3.1-branding, p-cpe:/a:canonical:ubuntu_linux:abrowser, p-cpe:/a:canonical:ubuntu_linux:firefox-3.5-gnome-support, p-cpe:/a:canonical:ubuntu_linux:firefox-3.1, p-cpe:/a:canonical:ubuntu_linux:firefox-3.5, p-cpe:/a:canonical:ubuntu_linux:firefox, p-cpe:/a:canonical:ubuntu_linux:xulrunner-1.9.1, p-cpe:/a:canonical:ubuntu_linux:firefox-dom-inspector

Required KB Items: Host/cpu, Host/Ubuntu, Host/Ubuntu/release, Host/Debian/dpkg-l

Exploit Ease: No known exploits are available

Patch Publication Date: 4/9/2010

Vulnerability Publication Date: 4/5/2010

Reference Information

CVE: CVE-2010-0173, CVE-2010-0174, CVE-2010-0175, CVE-2010-0176, CVE-2010-0177, CVE-2010-0178, CVE-2010-0179, CVE-2010-0181, CVE-2010-0182

BID: 39122, 39123, 39124, 39125, 39128, 39133, 39137

USN: 921-1