Detections
Analytics
Firefox < 2.0.0.10 Multiple Vulnerabilities
high Nessus Plugin ID 28329
Synopsis
The remote Windows host contains a web browser that is affected by multiple vulnerabilities.Description
The installed version of Firefox is affected by various security issues :- Three bugs that can result in crashes with traces of memory corruption
- A cross-site scripting vulnerability involving support for the 'jar:' URI scheme
- A timing issue when setting the 'window.location' property that could be leveraged to conduct cross-site request forgery attacks.
Solution
Upgrade to Firefox 2.0.0.10 or later.See Also
https://www.mozilla.org/en-US/security/advisories/mfsa2007-37/
https://www.mozilla.org/en-US/security/advisories/mfsa2007-38/
https://www.mozilla.org/en-US/security/advisories/mfsa2007-39/
Plugin Details
Severity: High
ID: 28329
File Name: mozilla_firefox_20010.nasl
Version: 1.16
Type: local
Agent: windows
Family: Windows
Published: 11/27/2007
Updated: 7/16/2018
Supported Sensors: Frictionless Assessment Agent, Frictionless Assessment AWS, Frictionless Assessment Azure, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 5.8
CVSS v2
Risk Factor: High
Base Score: 9.3
Temporal Score: 6.9
Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: cpe:/a:mozilla:firefox
Required KB Items: Mozilla/Firefox/Version
Exploit Ease: No known exploits are available
Patch Publication Date: 11/26/2007
Vulnerability Publication Date: 11/9/2007