Ubuntu Security Notice (C) 2013-2015 Canonical, Inc. / NASL script (C) 2013-2015 Tenable Network Security, Inc.
The remote Ubuntu host is missing a security-related patch.
Multiple memory safety issues were discovered in Firefox. If the user
were tricked into opening a specially crafted page, an attacker could
possibly exploit these to cause a denial of service via application
crash, or potentially execute code with the privileges of the user
invoking Firefox. (CVE-2013-0801, CVE-2013-1669)
Cody Crews discovered that some constructors could be used to bypass
restrictions enforced by their Chrome Object Wrapper (COW). An
attacker could exploit this to conduct cross-site scripting (XSS)
It was discovered that the file input element could expose the full
local path under certain conditions. An attacker could potentially
exploit this to steal sensitive information. (CVE-2013-1671)
A use-after-free was discovered when resizing video content whilst it
is playing. An attacker could potentially exploit this to execute code
with the privileges of the user invoking Firefox. (CVE-2013-1674)
It was discovered that some DOMSVGZoomEvent functions could be used
without being properly initialized, which could lead to information
Abhishek Arya discovered multiple memory safety issues in Firefox. If
the user were tricked into opening a specially crafted page, an
attacker could possibly exploit these to cause a denial of service via
application crash, or potentially execute code with the privileges of
the user invoking Firefox. (CVE-2013-1676, CVE-2013-1677,
CVE-2013-1678, CVE-2013-1679, CVE-2013-1680, CVE-2013-1681).
Update the affected firefox package.
Risk factor :
Critical / CVSS Base Score : 10.0
CVSS Temporal Score : 8.7
Public Exploit Available : false
Family: Ubuntu Local Security Checks
Nessus Plugin ID: 66442 ()
Bugtraq ID: 598555985859859598605986159862598635986459865598685986959870
CVE ID: CVE-2013-0801CVE-2013-1669CVE-2013-1670CVE-2013-1671CVE-2013-1674CVE-2013-1675CVE-2013-1676CVE-2013-1677CVE-2013-1678CVE-2013-1679CVE-2013-1680CVE-2013-1681
The cookie settings on this website are set to 'allow all cookies' to give you the very best website experience. If you continue without changing these settings, you consent to this - but if you want, you can opt out of all cookies by clicking below.