Detections
Analytics
Firefox 8.x Multiple Vulnerabilities (Mac OS X)
high Nessus Plugin ID 57359
Language:
Synopsis
The remote Mac OS X host contains a web browser that is potentially affected by several vulnerabilities.Description
The installed version of Firefox 8.x is potentially affected by the following security issues :- An out-of-bounds memory access error exists in the 'SVG' implementation and can be triggered when 'SVG' elements are removed during a 'DOMAttrModified' event handler. (CVE-2011-3658)
- Various memory safety errors exist that can lead to memory corruption and possible code execution.
(CVE-2011-3660)
- An error exists in the 'YARR' regular expression library that can cause application crashes when handling certain JavaScript statements. (CVE-2011-3661)
- It is possible to detect keystrokes using 'SVG' animation 'accesskey' events even when JavaScript is disabled. (CVE-2011-3663)
- An error exists related to plugins that can allow a NULL pointer to be dereferenced when a plugin deletes its containing DOM frame during a call from that frame. It may be possible for a non-NULL pointer to be dereferenced thereby opening up the potential for further exploitation. (CVE-2011-3664)
- It is possible to crash the application when 'OGG' 'video' elements are scaled to extreme sizes.
(CVE-2011-3665)
- A use-after-free error exists related to the function 'nsHTMLSelectElement' that can allow arbitrary code execution during operations such as removal of a parent node of an element. (CVE-2011-3671)
Solution
Upgrade to Firefox 9.0 or later.See Also
http://www.zerodayinitiative.com/advisories/ZDI-12-128/
http://www.securityfocus.com/archive/1/523754/30/0/threaded
https://www.mozilla.org/en-US/security/advisories/mfsa2012-41/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-53/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-54/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-55/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-56/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-57/
https://www.mozilla.org/en-US/security/advisories/mfsa2011-58/
Plugin Details
Severity: High
ID: 57359
File Name: macosx_firefox_9_0.nasl
Version: 1.21
Type: local
Agent: macosx
Family: MacOS X Local Security Checks
Published: 12/21/2011
Updated: 7/16/2018
Supported Sensors: Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: High
Score: 8.5
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 8.1
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:mozilla:firefox
Required KB Items: MacOSX/Firefox/Installed
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 12/20/2011
Vulnerability Publication Date: 12/20/2011
Exploitable With
CANVAS (CANVAS)
Metasploit (Firefox nsSVGValue Out-of-Bounds Access Vulnerability)
Reference Information
CVE: CVE-2011-3658, CVE-2011-3660, CVE-2011-3661, CVE-2011-3663, CVE-2011-3664, CVE-2011-3665, CVE-2011-3671