Test Kennung:	1.3.6.1.4.1.25623.1.0.802183
Kategorie:	General
Titel:	Mozilla Products Same Origin Policy Bypass Vulnerability (MAC OS X)
Zusammenfassung:	The host is installed with Mozilla firefox/thunderbird/seamonkey; and is prone to same origin policy bypass vulnerability.
Beschreibung:	Summary: The host is installed with Mozilla firefox/thunderbird/seamonkey and is prone to same origin policy bypass vulnerability. Vulnerability Insight: The flaw is due to some plugins, which use the value of 'window.location' to determine the page origin this could fool the plugin into granting the plugin content access to another site or the local file system in violation of the Same Origin Policy. Vulnerability Impact: Successful exploitation will let attackers to bypass the same-origin policy, execute arbitrary script code, obtain potentially sensitive information, or launch spoofing attacks against other sites. Affected Software/OS: SeaMonkey version prior to 2.3 Thunderbird version prior to 6.0 Mozilla Firefox before 3.6.23 and 4.x through 5 Solution: Upgrade to Mozilla Firefox version 3.6.23 or 6.0 or later, Upgrade to SeaMonkey version to 2.3 or later. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	BugTraq ID: 49848 Common Vulnerability Exposure (CVE) ID: CVE-2011-2999 Debian Security Information: DSA-2312 (Google Search) http://www.debian.org/security/2011/dsa-2312 Debian Security Information: DSA-2313 (Google Search) http://www.debian.org/security/2011/dsa-2313 Debian Security Information: DSA-2317 (Google Search) http://www.debian.org/security/2011/dsa-2317 http://www.mandriva.com/security/advisories?name=MDVSA-2011:139 http://www.mandriva.com/security/advisories?name=MDVSA-2011:140 http://www.mandriva.com/security/advisories?name=MDVSA-2011:141 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14252 http://www.redhat.com/support/errata/RHSA-2011-1341.html http://secunia.com/advisories/46315 SuSE Security Announcement: SUSE-SU-2011:1256 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-11/msg00020.html SuSE Security Announcement: openSUSE-SU-2011:1076 (Google Search) http://lists.opensuse.org/opensuse-updates/2011-10/msg00002.html
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.