|
Vulnerability Assessment & Network Security Forums |
|||||||||
If through a vulnerability assessment, a network security issue is detected for the vulnerability below, applying the appropriate security patches in a timely matter is very important. If you have detected that your system has already been compromised, following CERT's Network Security recovery document will assist with recommended steps for system recovery. Home >> Browse Vulnerability Assessment Database >> Debian Local Security Checks >> [DSA1253] DSA-1253-1 mozilla-firefox Vulnerability Assessment Details
|
[DSA1253] DSA-1253-1 mozilla-firefox |
||
DSA-1253-1 mozilla-firefox Detailed Explanation for this Vulnerability Assessment Several security related problems have been discovered in Mozilla and derived products such as Mozilla Firefox. The Common Vulnerabilities and Exposures project identifies the following vulnerabilities: Several vulnerabilities in the layout engine permit remote attackers to cause a denial of service and possibly permit them to execute arbitrary code. [MFSA 2006-68] Several vulnerabilities in the JavaScript engine permit remote attackers to cause a denial of service and possibly permit them to execute arbitrary code. [MFSA 2006-68] A bug in the js_dtoa function permits remote attackers to cause a denial of service. [MFSA 2006-68] "shutdown" discovered a vulnerability that permits remote attackers to gain rights and install malicious code via the watch JavaScript function. [MFSA 2006-70] Steven Michaud discovered a programming bug that permits remote attackers to cause a denial of service. [MFSA 2006-71] "moz_bug_r_a4" reported that the src attribute of an IMG element could be used to inject JavaScript code. [MFSA 2006-72] For the stable distribution (sarge) these problems have been fixed in version 1.0.4-2sarge15. For the testing (etch) and unstable (sid) distribution these problems have been fixed in version 2.0.0.1+dfsg-2 of iceweasel. We recommend that you upgrade your firefox and iceweasel packages. Solution : http://www.debian.org/security/2007/dsa-1253 Network Security Threat Level: High Networks Security ID: 21668 Vulnerability Assessment Copyright: This script is (C) 2007 Michel Arboi |
||
Cables, Connectors |
Vintage Rare HP 9826A CRY Graphics Board 09826-66575 Rev D-2309-40
$199.95
Dell OptiPlex GX1 Vintage Desktop PC - P3 500 MHZ 384 MB RAM Win 98 Ready To Use
$200.00
Vintage composite computer Sanyo video monitor from 1983.
$149.00
Apple Newton MessagePad 110 PDA H0059 Vintage Working with Stylus Pen
$65.00
Vintage EXPRESSNET 10/100 MBPS Fast Ethernet PCI Adapter w/CD
$45.00
Vintage "As-Is" Everex EX-830 QIC-02 External Tape Drive, Cable & Controller
$175.00
Vintage Atari 410 Program Recorder Cassette Player UNTESTED PARTS OR REPAIR
$14.99
Logitech Trackball TrackMan Marble Mouse T-CH11 Vintage PC Gaming Ergonomic
$14.50
Vintage AMD Athlon Processor Slot A CPU K7600MTR51B 600 MHz Slot A
$25.50
Vintage Industrial 1984 Micro Systems - Z80 CPX-BMX Board 128K
$115.00
|
||
No Discussions have been posted on this vulnerability. |