USN-149-1 fixed some vulnerabilities in the Ubuntu 5.04 (Hoary Hedgehog) version of Firefox. The version shipped with Ubuntu 4.10 (Warty Warthog) is also vulnerable to these flaws, so it needs to be upgraded as well. Please see

http://www.ubuntulinux.org/support/documentation/usn/usn-149-1

for the original advisory.

This update also fixes several older vulnerabilities; Some of them could be exploited to execute arbitrary code with full user privileges if the user visited a malicious website. (MFSA-2005-01 to MFSA-2005-44; please see the following website for details:
http://www.mozilla.org/projects/security/known-vulnerabilities.html)

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The installed version of Firefox is earlier than 1.0.0.  Such versions have multiple vulnerabilities that could result in a denial of service, local file disclosure, or password disclosure.  These vulnerabilities are due to the fact that Firefox does handle the <IMG> tag correctly.

The remote host is using Firefox. The remote version of this software contains a security issue that may allow an attacker to determine existence of local files, cause a DoS and steal passwords (Windows only). The security vulnerability is due to the fact that Firefox does not handle correctly <IMG> tags. 

Versions of Mozilla Firefox prior to 1.7.5 are vulnerable to a heap overflow against its NNTP functionality. This may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it. 

The remote host is using Mozilla.
The remote version of this software is vulnerable to a heap overflow against its NNTP functionality. This may allow an attacker to execute arbitrary code on the remote host. To exploit this flaw, an attacker would need to set up a rogue website and lure a victim on the remote host into visiting it.

ID	Name	Product	Family	Published	Updated	Severity
20546	Ubuntu 4.10 : mozilla-firefox vulnerabilities (USN-149-3)	Nessus	Ubuntu Local Security Checks	1/15/2006	1/19/2021	high
15712	Firefox < 1.0.0 Multiple Vulnerabilities	Nessus	Windows	11/13/2004	7/16/2018	medium
2402	Mozilla Firefox < 1.0.0 IMG Tag Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	Web Clients	11/11/2004	3/6/2019	medium
2481	Mozilla Firefox < 1.7.5 NNTP Remote Heap Overflow	Nessus Network Monitor	Web Clients	12/30/2004	3/6/2019	medium
801363	Mozilla < 1.7.5 Network News Transport Protocol Remote Heap Overflow	Log Correlation Engine	Web Clients			high

Detections

Analytics

Plugins Search

high

medium

medium

medium

high