Test Kennung:	1.3.6.1.4.1.25623.1.0.880931
Kategorie:	CentOS Local Security Checks
Titel:	CentOS Update for firefox CESA-2009:0315 centos4 i386
Zusammenfassung:	The remote host is missing an update for the 'firefox'; package(s) announced via the referenced advisory.
Beschreibung:	Summary: The remote host is missing an update for the 'firefox' package(s) announced via the referenced advisory. Vulnerability Insight: Mozilla Firefox is an open source Web browser. Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code as the user running Firefox. (CVE-2009-0040, CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774, CVE-2009-0775) Several flaws were found in the way malformed content was processed. A website containing specially-crafted content could, potentially, trick a Firefox user into surrendering sensitive information. (CVE-2009-0776, CVE-2009-0777) For technical details regarding these flaws, please see the Mozilla security advisories for Firefox 3.0.7. You can find a link to the Mozilla advisories in the References section of this errata. All Firefox users should upgrade to these updated packages, which contain Firefox version 3.0.7, and which correct these issues. After installing the update, Firefox must be restarted for the changes to take effect. Affected Software/OS: firefox on CentOS 4 Solution: Please install the updated packages. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-0040 http://lists.apple.com/archives/security-announce/2009/May/msg00002.html http://lists.apple.com/archives/security-announce/2009/jun/msg00002.html http://lists.apple.com/archives/security-announce/2009/Jun/msg00005.html http://lists.apple.com/archives/security-announce/2009/Aug/msg00001.html BugTraq ID: 33827 http://www.securityfocus.com/bid/33827 BugTraq ID: 33990 http://www.securityfocus.com/bid/33990 Bugtraq: 20090312 rPSA-2009-0046-1 libpng (Google Search) http://www.securityfocus.com/archive/1/501767/100/0/threaded Bugtraq: 20090529 VMSA-2009-0007 VMware Hosted products and ESX and ESXi patches resolve security issues (Google Search) http://www.securityfocus.com/archive/1/503912/100/0/threaded Bugtraq: 20090821 VMSA-2009-0010 VMware Hosted products update libpng and Apache HTTP Server (Google Search) http://www.securityfocus.com/archive/1/505990/100/0/threaded Cert/CC Advisory: TA09-133A http://www.us-cert.gov/cas/techalerts/TA09-133A.html Cert/CC Advisory: TA09-218A http://www.us-cert.gov/cas/techalerts/TA09-218A.html CERT/CC vulnerability note: VU#649212 http://www.kb.cert.org/vuls/id/649212 Debian Security Information: DSA-1750 (Google Search) http://www.debian.org/security/2009/dsa-1750 Debian Security Information: DSA-1830 (Google Search) http://www.debian.org/security/2009/dsa-1830 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00412.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00272.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00769.html https://www.redhat.com/archives/fedora-package-announce/2009-March/msg00771.html http://security.gentoo.org/glsa/glsa-200903-28.xml http://security.gentoo.org/glsa/glsa-201209-25.xml http://www.mandriva.com/security/advisories?name=MDVSA-2009:051 http://www.mandriva.com/security/advisories?name=MDVSA-2009:075 http://www.mandriva.com/security/advisories?name=MDVSA-2009:083 http://sourceforge.net/mailarchive/message.php?msg_name=e56ccc8f0902181726i200f4bf0n20d919473ec409b7%40mail.gmail.com http://lists.vmware.com/pipermail/security-announce/2009/000062.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10316 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6458 http://www.redhat.com/support/errata/RHSA-2009-0315.html http://www.redhat.com/support/errata/RHSA-2009-0325.html http://www.redhat.com/support/errata/RHSA-2009-0333.html http://www.redhat.com/support/errata/RHSA-2009-0340.html http://secunia.com/advisories/33970 http://secunia.com/advisories/33976 http://secunia.com/advisories/34137 http://secunia.com/advisories/34140 http://secunia.com/advisories/34143 http://secunia.com/advisories/34145 http://secunia.com/advisories/34152 http://secunia.com/advisories/34210 http://secunia.com/advisories/34265 http://secunia.com/advisories/34272 http://secunia.com/advisories/34320 http://secunia.com/advisories/34324 http://secunia.com/advisories/34388 http://secunia.com/advisories/34462 http://secunia.com/advisories/34464 http://secunia.com/advisories/35074 http://secunia.com/advisories/35258 http://secunia.com/advisories/35302 http://secunia.com/advisories/35379 http://secunia.com/advisories/35386 http://secunia.com/advisories/36096 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.405420 http://slackware.com/security/viewer.php?l=slackware-security&y=2009&m=slackware-security.433952 http://sunsolve.sun.com/search/document.do?assetkey=1-77-1020521.1-1 http://sunsolve.sun.com/search/document.do?assetkey=1-66-259989-1 SuSE Security Announcement: SUSE-SA:2009:012 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00002.html SuSE Security Announcement: SUSE-SA:2009:023 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-04/msg00009.html SuSE Security Announcement: SUSE-SR:2009:005 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2009-03/msg00000.html http://www.vupen.com/english/advisories/2009/0469 http://www.vupen.com/english/advisories/2009/0473 http://www.vupen.com/english/advisories/2009/0632 http://www.vupen.com/english/advisories/2009/1297 http://www.vupen.com/english/advisories/2009/1451 http://www.vupen.com/english/advisories/2009/1462 http://www.vupen.com/english/advisories/2009/1522 http://www.vupen.com/english/advisories/2009/1560 http://www.vupen.com/english/advisories/2009/1621 http://www.vupen.com/english/advisories/2009/2172 XForce ISS Database: libpng-pointer-arrays-code-execution(48819) https://exchange.xforce.ibmcloud.com/vulnerabilities/48819 Common Vulnerability Exposure (CVE) ID: CVE-2009-0771 Debian Security Information: DSA-1751 (Google Search) http://www.debian.org/security/2009/dsa-1751 https://www.redhat.com/archives/fedora-package-announce/2009-March/msg01077.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11314 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5250 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6163 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6196 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6755 http://www.securitytracker.com/id?1021795 http://secunia.com/advisories/34383 http://secunia.com/advisories/34527 Common Vulnerability Exposure (CVE) ID: CVE-2009-0772 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5703 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5945 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6097 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6811 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9609 http://www.redhat.com/support/errata/RHSA-2009-0258.html http://secunia.com/advisories/34387 http://secunia.com/advisories/34417 https://usn.ubuntu.com/741-1/ Common Vulnerability Exposure (CVE) ID: CVE-2009-0773 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A10491 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5856 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5980 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6141 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6708 Common Vulnerability Exposure (CVE) ID: CVE-2009-0774 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11138 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5947 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6057 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6121 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6945 Common Vulnerability Exposure (CVE) ID: CVE-2009-0775 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5806 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5816 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6207 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7584 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9681 http://www.securitytracker.com/id?1021796 Common Vulnerability Exposure (CVE) ID: CVE-2009-0776 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5956 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6017 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6191 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7390 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A9241 http://www.securitytracker.com/id?1021797 Common Vulnerability Exposure (CVE) ID: CVE-2009-0777 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A11222 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6039 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6157 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6229 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7435 http://securitytracker.com/alerts/2009/Mar/1021799.html XForce ISS Database: mozilla-invisible-url-spoofing(49087) https://exchange.xforce.ibmcloud.com/vulnerabilities/49087
Copyright	Copyright (c) 2011 Greenbone Networks GmbH

Dies ist nur einer von 99761 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.