Anfälligkeitssuche        Suche in 172616 CVE Beschreibungen
und 81291 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:
Kategorie:SuSE Local Security Checks
Titel:SuSE Security Advisory SUSE-SA:2009:012 (MozillaFirefox)
The remote host is missing updates announced in
advisory SUSE-SA:2009:012.

The Mozilla Firefox browser is updated to version 3.0.7 fixing various
security and stability issues.

Updates are provided for openSUSE 11.0 and 11.1 currently, backports
for other Mozilla Firefox browsers and Mozilla Suite programs will

MFSA 2009-07 / CVE-2009-0771 / CVE-2009-0772 / CVE-2009-0773 /
CVE-2009-0774: Mozilla developers identified and fixed several
stability bugs in the browser engine used in Firefox and other
Mozilla-based products. Some of these crashes showed evidence of memory
corruption under certain circumstances and we presume that with enough
effort at least some of these could be exploited to run arbitrary code.

MFSA 2009-08 / CVE-2009-0775: An anonymous researcher, via
TippingPoint's Zero Day Initiative program, reported a vulnerability in
Mozilla's garbage collection process. The vulnerability was caused by
improper memory management of a set of cloned XUL DOM elements which
were linked as a parent and child. After reloading the browser on a
page with such linked elements, the browser would crash when attempting
to access an object which was already destroyed. An attacker could
use this crash to run arbitrary code on the victim's computer.

MFSA 2009-09 / CVE-2009-0776: Mozilla security researcher Georgi
Guninski reported that a website could use nsIRDFService and a
cross-domain redirect to steal arbitrary XML data from another domain,
a violation of the same-origin policy. This vulnerability could be used
by a malicious website to steal private data from users authenticated
to the redirected website.

MFSA 2009-10 / CVE-2009-0040: libpng maintainer Glenn Randers-Pehrson
reported several memory safety hazards in PNG libraries used by
Mozilla. These vulnerabilities could be used by a malicious website
to crash a victim's browser and potentially execute arbitrary code
on their computer. libpng was upgraded to a version which contained
fixes for these flaws.

MFSA 2009-11 / CVE-2009-0777: Mozilla contributor Masahiro Yamada
reported that certain invisible control characters were being decoded
when displayed in the location bar, resulting in fewer visible
characters than were present in the actual location. An attacker
could use this vulnerability to spoof the location bar and display
a misleading URL for their malicious web page.

Update your system with the packages as indicated in
the referenced security advisory.

CVSS Score:

CVSS Vector:

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2009-0040
BugTraq ID: 33827
BugTraq ID: 33990
Bugtraq: 20090312 rPSA-2009-0046-1 libpng (Google Search)
Bugtraq: 20090529 VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues (Google Search)
Bugtraq: 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server (Google Search)
Cert/CC Advisory: TA09-133A
Cert/CC Advisory: TA09-218A
CERT/CC vulnerability note: VU#649212
Debian Security Information: DSA-1750 (Google Search)
Debian Security Information: DSA-1830 (Google Search)
SuSE Security Announcement: SUSE-SA:2009:012 (Google Search)
SuSE Security Announcement: SUSE-SA:2009:023 (Google Search)
SuSE Security Announcement: SUSE-SR:2009:005 (Google Search)
XForce ISS Database: libpng-pointer-arrays-code-execution(48819)
Common Vulnerability Exposure (CVE) ID: CVE-2009-0771
Debian Security Information: DSA-1751 (Google Search)
Common Vulnerability Exposure (CVE) ID: CVE-2009-0772
Common Vulnerability Exposure (CVE) ID: CVE-2009-0773
Common Vulnerability Exposure (CVE) ID: CVE-2009-0774
Common Vulnerability Exposure (CVE) ID: CVE-2009-0775
Common Vulnerability Exposure (CVE) ID: CVE-2009-0776
Common Vulnerability Exposure (CVE) ID: CVE-2009-0777
XForce ISS Database: mozilla-invisible-url-spoofing(49087)
CopyrightCopyright (c) 2009 E-Soft Inc.

Dies ist nur einer von 81291 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.

© 1998-2020 E-Soft Inc. Alle Rechte vorbehalten.