| Beschreibung: | Description:
The remote host is missing updates announced in
advisory SUSE-SA:2008:008.
The web browser Mozilla Firefox has been brought to security update
version 2.0.0.12.
The Firefox versions was upgraded to 2.0.0.12 on:
- SUSE Linux 10.1, openSUSE 10.2 and 10.3
- SUSE Linux Enterprise Server and Desktop 10
All Firefox fixes were also back ported to the Firefox 1.5.0.14 version
in Novell Linux Desktop 9.
Also released were Mozilla Seamonkey Suite 1.8.1.12 packages for
openSUSE 10.2 and 10.3. All Mozilla Seamonkey fixes were back ported
to the SUSE Linux 10.1 seamonkey 1.8.0 version.
Following security problems were fixed:
- MFSA 2008-11/CVE-2008-0594 Web forgery overwrite with div overlay
- MFSA 2008-10/CVE-2008-0593 URL token stealing via stylesheet redirect
- MFSA 2008-09/CVE-2008-0592 Mishandling of locally-saved plain text files
- MFSA 2008-08/CVE-2008-0591 File action dialog tampering
- MFSA 2008-06/CVE-2008-0419 Web browsing history and forward navigation
stealing
- MFSA 2008-05/CVE-2008-0418 Directory traversal via chrome: URI
- MFSA 2008-04/CVE-2008-0417 Stored password corruption
- MFSA 2008-03/CVE-2008-0415 Privilege escalation, XSS, Remote Code
Execution
- MFSA 2008-02/CVE-2008-0414 Multiple file input focus stealing
vulnerabilities
- MFSA 2008-01/CVE-2008-0412/CVE-2008-0413 Crashes with evidence of
memory corruption (rv:1.8.1.12)
Solution:
Update your system with the packages as indicated in
the referenced security advisory.
http://www.securityspace.com/smysecure/catid.html?in=SUSE-SA:2008:008
Risk factor : Critical
CVSS Score:
9.3
|
