Detections
Analytics
Firefox ESR 17.x < 17.0.1 Multiple Vulnerabilities
critical Nessus Plugin ID 63549
Language:
Synopsis
The remote Windows host contains a web browser that is affected by multiple vulnerabilities.Description
The installed version of Firefox 17.x is potentially affected by the following security issues :- An unspecified memory corruption issue exists.
(CVE-2013-0749, CVE-2013-0769)
- Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)
Solution
Upgrade to Firefox 17.0.1 / 17.0.1 ESR or later.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2013-01/
https://www.mozilla.org/en-US/security/advisories/mfsa2013-02/
Plugin Details
Severity: Critical
ID: 63549
File Name: mozilla_firefox_1701.nasl
Version: 1.11
Type: local
Agent: windows
Family: Windows
Published: 1/15/2013
Updated: 12/4/2019
Supported Sensors: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.7
CVSS v2
Risk Factor: Critical
Base Score: 10
Temporal Score: 7.4
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
CVSS Score Source: CVE-2013-0769
Vulnerability Information
CPE: cpe:/a:mozilla:firefox
Required KB Items: Mozilla/Firefox/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 1/8/2013
Vulnerability Publication Date: 1/8/2013
Reference Information
CVE: CVE-2013-0749, CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0769, CVE-2013-0771