Búsqueda de    
Vulnerabilidad   
    Buscar 219043 Descripciones CVE y
99761 Descripciones de Pruebas,
accesos 10,000+ referencias cruzadas.
Pruebas   CVE   Todos  

ID de Prueba:1.3.6.1.4.1.25623.1.0.812337
Categoría:Red Hat Local Security Checks
Título:RedHat Update for firefox RHSA-2017:3382-01
Resumen:The remote host is missing an update for the 'firefox'; package(s) announced via the referenced advisory.
Descripción:Summary:
The remote host is missing an update for the 'firefox'
package(s) announced via the referenced advisory.

Vulnerability Insight:
Mozilla Firefox is an open source web browser.

This update upgrades Firefox to version 52.5.1 ESR.

Security Fix(es):

* A privacy flaw was discovered in Firefox. In Private Browsing mode, a web
worker could write persistent data to IndexedDB, which was not cleared when
exiting and would persist across multiple sessions. A malicious website
could exploit the flaw to bypass private-browsing protections and uniquely
fingerprint visitors. (CVE-2017-7843)

Red Hat would like to thank the Mozilla project for reporting this issue.
Upstream acknowledges Konark as the original reporter.

Affected Software/OS:
firefox on
Red Hat Enterprise Linux Desktop (v. 6),
Red Hat Enterprise Linux Server (v. 6),
Red Hat Enterprise Linux Server (v. 7),
Red Hat Enterprise Linux Workstation (v. 6)

Solution:
Please Install the Updated Packages.

CVSS Score:
5.0

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:N/A:N

Referencia Cruzada: Common Vulnerability Exposure (CVE) ID: CVE-2017-7843
BugTraq ID: 102039
http://www.securityfocus.com/bid/102039
BugTraq ID: 102112
http://www.securityfocus.com/bid/102112
Debian Security Information: DSA-4062 (Google Search)
https://www.debian.org/security/2017/dsa-4062
https://lists.debian.org/debian-lts-announce/2017/12/msg00003.html
RedHat Security Advisories: RHSA-2017:3382
https://access.redhat.com/errata/RHSA-2017:3382
http://www.securitytracker.com/id/1039954
CopyrightCopyright (C) 2017 Greenbone Networks GmbH

Esta es sólo una de 99761 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa.

Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.




© 1998-2024 E-Soft Inc. Todos los derechos reservados.