Ubuntu Security Notice (C) 2005-2016 Canonical, Inc. / NASL script (C) 2006-2016 Tenable Network Security, Inc.
The remote Ubuntu host is missing one or more security-related
When a popup is blocked the user is given the ability to open that
popup through the popup-blocking status bar icon and, in Firefox,
through the information bar. Doron Rosenberg noticed that popups which
are permitted by the user were executed with elevated privileges,
which could be abused to automatically install and execute arbitrary
code with the privileges of the user. (CAN-2005-1153)
It was discovered that the browser did not start with a clean global
page to define a global variable known to be used by a different site,
allowing malicious code to be executed in the context of that site
(for example, sending web mail or automatic purchasing).
Michael Krax discovered a flaw in the 'favicon' links handler. A
which could be exploited to execute arbitrary code with the privileges
of the user. (CAN-2005-1155)
Michael Krax found two flaws in the Search Plugin installation. This
allowed malicious plugins to execute arbitrary code in the context of
the current site. If the current page had elevated privileges (like
'about:plugins' or 'about:config'), the malicious plugin could even
install malicious software when a search was performed.
Kohei Yoshino discovered two missing security checks when Firefox
opens links in its sidebar. This allowed a malicious web page to
construct a link that, when clicked on, could execute arbitrary
Georgi Guninski discovered that the types of certain XPInstall related
called. This could be exploited by a malicious website to crash
Firefox or even execute arbitrary code with the privileges of the
Firefox did not properly verify the values of XML DOM nodes of web
pages. By tricking the user to perform a common action like clicking
on a link or opening the context menu, a malicious page could exploit
the user. (CAN-2005-1160).
Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.
Update the affected packages.
Risk factor :
High / CVSS Base Score : 7.5
Family: Ubuntu Local Security Checks
Nessus Plugin ID: 20513 ()
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now