The Mozilla Firefox 3.5.5 release fixes some instability issues caused by the 3.5.4 security upgrade.

The Mozilla Firefox 3.5.5 release fixes some instability issues caused by the 3.5.4 security upgrade.

One crash was assigned a CVE number: CVE-2009-3978: The nsGIFDecoder2::GifWrite function in decoders/gif/nsGIFDecoder2.cpp in libpr0n in Mozilla Firefox before 3.5.5 allows remote attackers to cause a denial of service (NULL pointer dereference and application crash) via an animated GIF file with a large image size.

Also some KDE4 integration bugs were fixed :

  - use mimetype for opening url if known (bnc#556156)

  - fix file dialog resetting icon size (bnc#546490) and     file dialog for multiple files not working (bnc#548267)

  - fix KDE filepicker (bnc#548267,bnc#555438)

  - avoid possible deadlock with KDE integration     (bnc#555202)

The remote host is affected by the vulnerability described in GLSA-201301-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information,       bypass restrictions and protection mechanisms, force file downloads,       conduct XML injection attacks, conduct XSS attacks, bypass the Same       Origin Policy, spoof URL&rsquo;s for phishing attacks, trigger a vertical       scroll, spoof the location bar, spoof an SSL indicator, modify the       browser&rsquo;s font, conduct clickjacking attacks, or have other unspecified       impact.
    A local attacker could gain escalated privileges, obtain sensitive       information, or replace an arbitrary downloaded file.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
42876	SuSE 11 Security Update : Mozilla Firefox (SAT Patch Number 1563)	Nessus	SuSE Local Security Checks	11/24/2009	1/14/2021	medium
42925	openSUSE Security Update : MozillaFirefox (MozillaFirefox-1597)	Nessus	SuSE Local Security Checks	11/30/2009	1/14/2021	medium
63402	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	1/8/2013	12/5/2022	critical

Detections

Analytics

Plugins Search

medium

medium

critical