Mozilla < 1.7 Multiple Remote Overflows

High Log Correlation Engine Plugin ID 801303

Synopsis

The remote browser is vulnerable to multiple flaws

Description

The remote host is using the Mozilla web browser prior to version 1.7. There are several flaws within this version of Mozilla that include a remote overflow via a spoofed address bar, an overflow in the SSL certificate store, and other serious issues.

Solution

Upgrade to Mozilla 1.7 or later.

Plugin Details

Severity: High

ID: 801303

File Name: 801303.prm

Family: Web Clients

Risk Information

Risk Factor: High

CVSSv2

Base Score: 10

Temporal Score: 8.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: CVSS2#E:H/RL:OF/RC:C

Reference Information

CVE: CVE-2004-0757

BID: 15495