Test Kennung:	1.3.6.1.4.1.25623.1.0.803627
Kategorie:	General
Titel:	Mozilla Firefox ESR Multiple Vulnerabilities - November12 (Windows)
Zusammenfassung:	This host is installed with Mozilla Firefox ESR and is prone to multiple; vulnerabilities.
Beschreibung:	Summary: This host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities. Vulnerability Insight: Multiple errors - When handling the 'window.location' object. - Within CheckURL() function of the 'window.location' object, which can be forced to return the wrong calling document and principal. - Within handling of 'Location' object can be exploited to bypass security wrapper protection. Vulnerability Impact: Successful exploitation will allow attackers to inject scripts and bypass certain security restrictions. Affected Software/OS: Mozilla Firefox ESR version 10.x before 10.0.10 on Windows Solution: Upgrade to Mozilla Firefox ESR version 10.0.10 or later. CVSS Score: 6.4 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:N
Querverweis:	BugTraq ID: 56301 BugTraq ID: 56302 BugTraq ID: 56306 Common Vulnerability Exposure (CVE) ID: CVE-2012-4194 http://www.securityfocus.com/bid/56301 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16918 RedHat Security Advisories: RHSA-2012:1407 http://rhn.redhat.com/errata/RHSA-2012-1407.html RedHat Security Advisories: RHSA-2012:1413 http://rhn.redhat.com/errata/RHSA-2012-1413.html http://secunia.com/advisories/51121 http://secunia.com/advisories/51123 http://secunia.com/advisories/51127 http://secunia.com/advisories/51144 http://secunia.com/advisories/51146 http://secunia.com/advisories/51147 http://secunia.com/advisories/51165 http://secunia.com/advisories/55318 SuSE Security Announcement: SUSE-SU-2012:1426 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00025.html SuSE Security Announcement: openSUSE-SU-2012:1412 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2012-10/msg00019.html http://www.ubuntu.com/usn/USN-1620-1 http://www.ubuntu.com/usn/USN-1620-2 Common Vulnerability Exposure (CVE) ID: CVE-2012-4195 http://www.securityfocus.com/bid/56302 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16856 Common Vulnerability Exposure (CVE) ID: CVE-2012-4196 http://www.securityfocus.com/bid/56306 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16962
Copyright	Copyright (C) 2012 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.