Test Kennung:	1.3.6.1.4.1.25623.1.0.880897
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for firefox CESA-2009:0397 centos4 i386
Zusammenfassung:	The remote host is missing an update for the 'firefox'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'firefox' package(s) announced via the referenced advisory. Vulnerability Insight: Mozilla Firefox is an open source Web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox. A memory corruption flaw was discovered in the way Firefox handles XML files containing an XSLT transform. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1169) A flaw was discovered in the way Firefox handles certain XUL garbage collection events. A remote attacker could use this flaw to crash Firefox or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-1044) For technical details regarding these flaws, refer to the Mozilla security advisories. You can find a link to the Mozilla advisories in the References section of this errata. Firefox users should upgrade to these updated packages, which resolve these issues. For Red Hat Enterprise Linux 4, they contain backported patches to the firefox package. For Red Hat Enterprise Linux 5, they contain backported patches to the xulrunner packages. After installing the update, Firefox must be restarted for the changes to take effect. Affected Software/OS: firefox on CentOS 4 Solution: Please install the updated packages. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-1044 BugTraq ID: 34181 http://www.securityfocus.com/bid/34181 Bugtraq: 20090330 ZDI-09-015: Mozilla Firefox XUL _moveToEdgeShift() Memory Corruption Vulnerability (Google Search) http://www.securityfocus.com/archive/1/502303/100/0/threaded Debian Security Information: DSA-1756 (Google Search) http://www.debian.org/security/2009/dsa-1756 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01023.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01040.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html http://www.mandriva.com/security/advisories?name=MDVSA-2009:084 http://blogs.zdnet.com/security/?p=2934 http://blogs.zdnet.com/security/?p=2941 http://cansecwest.com/index.html http://dvlabs.tippingpoint.com/blog/2009/02/25/pwn2own-2009 http://dvlabs.tippingpoint.com/blog/2009/03/18/pwn2own-2009-day-1---safari-internet-explorer-and-firefox-taken-down-by-four-zero-day-exploits http://news.cnet.com/8301-1009_3-10199652-83.html http://twitter.com/tippingpoint1/status/1351635812 http://www.h-online.com/security/Pwn2Own-2009-Safari-IE-8-and-Firefox-exploited--/news/112889 http://www.zerodayinitiative.com/advisories/ZDI-09-015 http://osvdb.org/52896 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11368 http://www.redhat.com/support/errata/RHSA-2009-0397.html http://www.redhat.com/support/errata/RHSA-2009-0398.html http://www.securitytracker.com/id?1021878 http://secunia.com/advisories/34471 http://secunia.com/advisories/34505 http://secunia.com/advisories/34510 http://secunia.com/advisories/34511 http://secunia.com/advisories/34521 http://secunia.com/advisories/34527 http://secunia.com/advisories/34549 http://secunia.com/advisories/34550 http://secunia.com/advisories/34792 SuSE Security Announcement: SUSE-SA:2009:022 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00008.html http://www.ubuntu.com/usn/usn-745-1 http://www.vupen.com/english/advisories/2009/0864 Common Vulnerability Exposure (CVE) ID: CVE-2009-1169 BugTraq ID: 34235 http://www.securityfocus.com/bid/34235 https://www.exploit-db.com/exploits/8285 http://blogs.zdnet.com/security/?p=3013 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11372 http://www.securitytracker.com/id?1021939 http://secunia.com/advisories/34486 SuSE Security Announcement: SUSE-SA:2009:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html http://www.vupen.com/english/advisories/2009/0853 XForce ISS Database: mozilla-xslt-code-execution(49439) https://exchange.xforce.ibmcloud.com/vulnerabilities/49439
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.