Mozilla < 1.7 Multiple Remote Overflows

High Log Correlation Engine Plugin ID 801303

Synopsis

The remote browser is vulnerable to multiple flaws

Description

The remote host is using the Mozilla web browser prior to version 1.7. There are several flaws within this version of Mozilla that include a remote overflow via a spoofed address bar, an overflow in the SSL certificate store, and other serious issues.

Solution

Upgrade to Mozilla 1.7 or later.

Plugin Details

Severity: High

ID: 801303

Family: Web Clients

Risk Information

Risk Factor: High

CVSS v2.0

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Reference Information

CVE: CVE-2004-0757

BID: 15495