This script is Copyright (C) 2007-2015 Tenable Network Security, Inc.
The remote Gentoo host is missing one or more security-related
The remote host is affected by the vulnerability described in GLSA-200701-02
(Mozilla Firefox: Multiple vulnerabilities)
An anonymous researcher found evidence of memory corruption in the way
Mozilla Firefox handles certain types of SVG comment DOM nodes.
Additionally, Frederik Reiss discovered a heap-based buffer overflow in
the conversion of a CSS cursor. Other issues with memory corruption
were also fixed. Mozilla Firefox also contains less severe
An attacker could entice a user to view a specially crafted web page
that will trigger one of the vulnerabilities, possibly leading to the
execution of arbitrary code. It is also possible for an attacker to
perform cross-site scripting attacks, leading to the exposure of
sensitive information, like user credentials.
There are no known workarounds for all the issues at this time.
See also :
All Mozilla Firefox users should upgrade to the latest version:
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-client/mozilla-firefox-18.104.22.168'
All Mozilla Firefox binary release users should upgrade to the latest
# emerge --sync
# emerge --ask --oneshot --verbose '>=www-client/mozilla-firefox-bin-22.214.171.124'
Risk factor :
High / CVSS Base Score : 9.3
CVSS Temporal Score : 8.1
Public Exploit Available : true
Family: Gentoo Local Security Checks
Nessus Plugin ID: 23991 (gentoo_GLSA-200701-02.nasl)
Bugtraq ID: 21668
CVE ID: CVE-2006-6497CVE-2006-6498CVE-2006-6499CVE-2006-6500CVE-2006-6501CVE-2006-6502CVE-2006-6503CVE-2006-6504CVE-2006-6506CVE-2006-6507
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.