SuSE 11.3 Security Update : Mozilla Firefox (SAT Patch Number 8491)

This script is Copyright (C) 2013 Tenable Network Security, Inc.


Synopsis :

The remote SuSE 11 host is missing one or more security updates.

Description :

Mozilla Firefox has been updated to the 17.0.10ESR release, which
fixes various bugs and security issues :

- Mozilla developers identified and fixed several memory
safety bugs in the browser engine used in Firefox and
other Mozilla-based products. Some of these bugs showed
evidence of memory corruption under certain
circumstances, and we presume that with enough effort at
least some of these could be exploited to run arbitrary
code. (MFSA 2013-93)

Jesse Ruderman and Christoph Diehl reported memory
safety problems and crashes that affect Firefox ESR 17,
Firefox ESR 24, and Firefox 24. (CVE-2013-5590)

Carsten Book reported a crash fixed in the NSS library
used by Mozilla-based products fixed in Firefox 25,
Firefox ESR 24.1, and Firefox ESR 17.0.10.
(CVE-2013-1739)

- Security researcher Abhishek Arya (Inferno) of the
Google Chrome Security Team used the Address Sanitizer
tool to discover an access violation due to
uninitialized data during Extensible Stylesheet Language
Transformation (XSLT) processing. This leads to a
potentially exploitable crash. (MFSA 2013-95 /
CVE-2013-5604)

- Compiler Engineer Dan Gohman of Google discovered a flaw
in the JavaScript engine where memory was being
incorrectly allocated for some functions and the calls
for allocations were not always properly checked for
overflow, leading to potential buffer overflows. When
combined with other vulnerabilities, these flaws could
be potentially exploitable. (MFSA 2013-96 /
CVE-2013-5595)

- Security researcher Byoungyoung Lee of Georgia Tech
Information Security Center (GTISC) used the Address
Sanitizer tool to discover a use-after-free during state
change events while updating the offline cache. This
leads to a potentially exploitable crash. (MFSA 2013-98
/ CVE-2013-5597)

- Security researcher Nils used the Address Sanitizer tool
while fuzzing to discover missing strong references in
browsing engine leading to use-after-frees. This can
lead to a potentially exploitable crash. (MFSA 2013-100)

- ASAN heap-use-after-free in
nsIPresShell::GetPresContext() with canvas, onresize and
mozTextStyle. (CVE-2013-5599)

- ASAN use-after-free in
nsIOService::NewChannelFromURIWithProxyFlags with Blob
URL. (CVE-2013-5600)

- ASAN use-after free in GC allocation in
nsEventListenerManager::SetEventHandler. (CVE-2013-5601)

- Security researcher Nils used the Address Sanitizer tool
while fuzzing to discover a memory corruption issue with
the JavaScript engine when using workers with direct
proxies. This results in a potentially exploitable
crash. (MFSA 2013-101 / CVE-2013-5602)

See also :

http://www.mozilla.org/security/announce/2013/mfsa2013-100.html
http://www.mozilla.org/security/announce/2013/mfsa2013-101.html
http://www.mozilla.org/security/announce/2013/mfsa2013-93.html
http://www.mozilla.org/security/announce/2013/mfsa2013-95.html
http://www.mozilla.org/security/announce/2013/mfsa2013-96.html
http://www.mozilla.org/security/announce/2013/mfsa2013-98.html
https://bugzilla.novell.com/show_bug.cgi?id=847708
http://support.novell.com/security/cve/CVE-2013-1739.html
http://support.novell.com/security/cve/CVE-2013-5590.html
http://support.novell.com/security/cve/CVE-2013-5595.html
http://support.novell.com/security/cve/CVE-2013-5597.html
http://support.novell.com/security/cve/CVE-2013-5599.html
http://support.novell.com/security/cve/CVE-2013-5600.html
http://support.novell.com/security/cve/CVE-2013-5601.html
http://support.novell.com/security/cve/CVE-2013-5602.html
http://support.novell.com/security/cve/CVE-2013-5604.html

Solution :

Apply SAT patch number 8491.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)

Family: SuSE Local Security Checks

Nessus Plugin ID: 70933 ()

Bugtraq ID:

CVE ID: CVE-2013-1739
CVE-2013-5590
CVE-2013-5595
CVE-2013-5597
CVE-2013-5599
CVE-2013-5600
CVE-2013-5601
CVE-2013-5602
CVE-2013-5604

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now