Test Kennung:	1.3.6.1.4.1.25623.1.0.803059
Kategorie:	General
Titel:	Mozilla Firefox Multiple Vulnerabilities - November12 (Windows)
Zusammenfassung:	This host is installed with Mozilla Firefox and is prone to multiple; vulnerabilities.
Beschreibung:	Summary: This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities. Vulnerability Insight: - An error within the 'Web Developer Toolbar' allows script to be executed in chrome privileged context. - The 'Javascript:' URLs when opened in a New Tab page inherits the privileges of the privileged 'new tab' page. Vulnerability Impact: Successful exploitation could allow attackers to inject script or execute arbitrary programs in the context of the browser. Affected Software/OS: Mozilla Firefox version before 17.0 on Windows Solution: Upgrade to Mozilla Firefox version 17.0 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Querverweis:	BugTraq ID: 56623 BugTraq ID: 56645 Common Vulnerability Exposure (CVE) ID: CVE-2012-4203 http://www.securityfocus.com/bid/56623 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16503 http://secunia.com/advisories/51369 http://secunia.com/advisories/51434 http://secunia.com/advisories/51439 SuSE Security Announcement: SUSE-SU-2012:1592 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-11/msg00021.html SuSE Security Announcement: openSUSE-SU-2012:1583 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-11/msg00090.html SuSE Security Announcement: openSUSE-SU-2012:1586 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-11/msg00093.html SuSE Security Announcement: openSUSE-SU-2013:0175 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-01/msg00022.html http://www.ubuntu.com/usn/USN-1638-1 http://www.ubuntu.com/usn/USN-1638-2 http://www.ubuntu.com/usn/USN-1638-3 Common Vulnerability Exposure (CVE) ID: CVE-2012-5837 http://www.securityfocus.com/bid/56645 http://osvdb.org/87586 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16542 SuSE Security Announcement: openSUSE-SU-2012:1585 (Google Search) http://lists.opensuse.org/opensuse-updates/2012-11/msg00092.html XForce ISS Database: firefox-developer-tool-priv-esc(80180) https://exchange.xforce.ibmcloud.com/vulnerabilities/80180
Copyright	Copyright (C) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.