Detections
Analytics
Firefox 3.6.x < 3.6.23 Multiple Vulnerabilities
high Nessus Plugin ID 56334
Language:
Synopsis
The remote Windows host contains a web browser that is affected by multiple vulnerabilities.Description
The installed version of Firefox 3.6.x is earlier than 3.6.23 and is affected by the following vulnerabilities:- An integer underflow exists when handling a large JavaScript 'RegExp' expression that can allow a potentially exploitable crash. (CVE-2011-2998)
- If an attacker could trick a user into holding down the 'Enter' key, via a malicious game, for example, a malicious application or extension could be downloaded and executed. (CVE-2011-2372)
- Unspecified errors exist that can be exploited to corrupt memory. No additional information is available at this time. (CVE-2011-2995, CVE-2011-2996)
- There is an error in the implementation of the 'window.location' JavaScript object when creating named frames. This can be exploited to bypass the same-origin policy and potentially conduct cross-site scripting attacks. (CVE-2011-2999)
- A weakness exists when handling the 'Location' header. This can lead to response splitting attacks when visiting a vulnerable web server. The same fix has been applied to the headers 'Content-Length' and 'Content-Disposition'. (CVE-2011-3000)
Solution
Upgrade to Firefox 3.6.23 or later.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2011-36/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-37/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-38/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-39/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-40/
Plugin Details
Severity: High
ID: 56334
File Name: mozilla_firefox_3623.nasl
Version: 1.9
Type: local
Agent: windows
Family: Windows
Published: 9/29/2011
Updated: 7/16/2018
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.9
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:mozilla:firefox
Required KB Items: Mozilla/Firefox/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 9/27/2011
Vulnerability Publication Date: 9/27/2011
Reference Information
CVE: CVE-2011-2372, CVE-2011-2995, CVE-2011-2996, CVE-2011-2998, CVE-2011-2999, CVE-2011-3000