This script is Copyright (C) 2007-2015 Tenable Network Security, Inc.
The remote Fedora Core host is missing a security update.
Mozilla Firefox is an open source Web browser.
Two flaws were found in the way Firefox processed certain regular
expressions. A malicious web page could crash the browser or possibly
execute arbitrary code as the user running Firefox. (CVE-2006-4565,
A number of flaws were found in Firefox. A malicious web page could
crash the browser or possibly execute arbitrary code as the user
running Firefox. (CVE-2006-4571)
malicious web page could crash the browser or possibly execute
arbitrary code as the user running Firefox. (CVE-2006-4253)
A flaw was found in the Firefox auto-update verification system. An
attacker who has the ability to spoof a victim's DNS could get Firefox
to download and install malicious code. In order to exploit this issue
an attacker would also need to get a victim to previously accept an
unverifiable certificate. (CVE-2006-4567)
Firefox did not properly prevent a frame in one domain from injecting
content into a sub-frame that belongs to another domain, which
facilitates website spoofing and other attacks (CVE-2006-4568)
Firefox did not load manually opened, blocked popups in the right
domain context, which could lead to cross-site scripting attacks. In
order to exploit this issue an attacker would need to find a site
which would frame their malicious page and convince the user to
manually open a blocked popup. (CVE-2006-4569)
Users of Firefox are advised to upgrade to this update, which contains
Firefox version 22.214.171.124 that corrects these issues.
Note that Tenable Network Security has extracted the preceding
description block directly from the Fedora security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.
See also :
Update the affected firefox and / or firefox-debuginfo packages.
Risk factor :
Family: Fedora Local Security Checks
Nessus Plugin ID: 24180 (fedora_2006-976.nasl)
Get Nessus Professional to scan unlimited IPs, run compliance checks & moreBuy Nessus Professional Now