Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2009-0689. Reason: This candidate is a duplicate of CVE-2009-0689. Certain codebase relationships were not originally clear. Notes: All CVE users should reference CVE-2009-0689 instead of this candidate. All references and descriptions in this candidate have been removed to prevent accidental usage

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1530 advisory.

    firefox:

    [3.0.15-3.0.1.el5_4]
    - Update firstrun and homepage URLs in specfile
    - Added patch oracle-firefox-branding.patch
    - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html       and removed the corresponding  Red Hat ones

    [3.0.15-3]
    - Rebuild due to Mozilla's respin

    [3.0.15-2]
    - Rebuild due to xulrunner changes

    [3.0.15-1]
    - Update to 3.0.15

    nspr:

    [4.7.6-1]
    - update to 4.7.6

    xulrunner:

    [1.9.0.15-3.0.1.el5_4]
    - Added xulrunner-oracle-default-prefs.js and removed the corresponding       RedHat one.

    [1.9.0.15-3]
    - Rebuild due to Mozilla's respin

    [1.9.0.15-2]
    - Added remedy patch

    [1.9.0.15-1]
    - Update to 1.9.0.15

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1531 advisory.

    SeaMonkey is an open source Web browser, email and newsgroup client, IRC     chat client, and HTML editor.

    A flaw was found in the way SeaMonkey creates temporary file names for     downloaded files. If a local attacker knows the name of a file SeaMonkey is     going to download, they can replace the contents of that file with     arbitrary contents. (CVE-2009-3274)

    A heap-based buffer overflow flaw was found in the SeaMonkey string to     floating point conversion routines. A web page containing malicious     JavaScript could crash SeaMonkey or, potentially, execute arbitrary code     with the privileges of the user running SeaMonkey. (CVE-2009-1563)

    A flaw was found in the way SeaMonkey handles text selection. A malicious     website may be able to read highlighted text in a different domain (e.g.
    another website the user is viewing), bypassing the same-origin policy.
    (CVE-2009-3375)

    A flaw was found in the way SeaMonkey displays a right-to-left override     character when downloading a file. In these cases, the name displayed in     the title bar differs from the name displayed in the dialog body. An     attacker could use this flaw to trick a user into downloading a file that     has a file name or extension that differs from what the user expected.
    (CVE-2009-3376)

    Several flaws were found in the processing of malformed web content. A web     page containing malicious content could cause SeaMonkey to crash or,     potentially, execute arbitrary code with the privileges of the user running     SeaMonkey. (CVE-2009-3380)

    All SeaMonkey users should upgrade to these updated packages, which correct     these issues. After installing the update, SeaMonkey must be restarted for     the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 4 / 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2009:1530 advisory.

    Mozilla Firefox is an open source Web browser. XULRunner provides the XUL     Runtime environment for Mozilla Firefox. nspr provides the Netscape     Portable Runtime (NSPR).

    A flaw was found in the way Firefox handles form history. A malicious web     page could steal saved form data by synthesizing input events, causing the     browser to auto-fill form fields (which could then be read by an attacker).
    (CVE-2009-3370)

    A flaw was found in the way Firefox creates temporary file names for     downloaded files. If a local attacker knows the name of a file Firefox is     going to download, they can replace the contents of that file with     arbitrary contents. (CVE-2009-3274)

    A flaw was found in the Firefox Proxy Auto-Configuration (PAC) file     processor. If Firefox loads a malicious PAC file, it could crash Firefox     or, potentially, execute arbitrary code with the privileges of the user     running Firefox. (CVE-2009-3372)

    A heap-based buffer overflow flaw was found in the Firefox GIF image     processor. A malicious GIF image could crash Firefox or, potentially,     execute arbitrary code with the privileges of the user running Firefox.
    (CVE-2009-3373)

    A heap-based buffer overflow flaw was found in the Firefox string to     floating point conversion routines. A web page containing malicious     JavaScript could crash Firefox or, potentially, execute arbitrary code with     the privileges of the user running Firefox. (CVE-2009-1563)

    A flaw was found in the way Firefox handles text selection. A malicious     website may be able to read highlighted text in a different domain (e.g.
    another website the user is viewing), bypassing the same-origin policy.
    (CVE-2009-3375)

    A flaw was found in the way Firefox displays a right-to-left override     character when downloading a file. In these cases, the name displayed in     the title bar differs from the name displayed in the dialog body. An     attacker could use this flaw to trick a user into downloading a file that     has a file name or extension that differs from what the user expected.
    (CVE-2009-3376)

    Several flaws were found in the processing of malformed web content. A web     page containing malicious content could cause Firefox to crash or,     potentially, execute arbitrary code with the privileges of the user running     Firefox. (CVE-2009-3374, CVE-2009-3380, CVE-2009-3382)

    For technical details regarding these flaws, refer to the Mozilla security     advisories for Firefox 3.0.15. You can find a link to the Mozilla     advisories in the References section of this errata.

    All Firefox users should upgrade to these updated packages, which contain     Firefox version 3.0.15, which corrects these issues. After installing the     update, Firefox must be restarted for the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Severity
67948	Oracle Linux 5 : firefox (ELSA-2009-1530)	Nessus	Oracle Linux Local Security Checks	high
42288	RHEL 4 : seamonkey (RHSA-2009:1531)	Nessus	Red Hat Local Security Checks	critical
42287	RHEL 4 / 5 : firefox (RHSA-2009:1530)	Nessus	Red Hat Local Security Checks	critical

Detections

Analytics

CVE-2009-1563

No Score

Tenable Plugins

high

critical

critical