Mozilla / Firefox enablePrivilege Dialog Weakness

low Log Correlation Engine Plugin ID 801341

Synopsis

The remote host is vulnerable to a Script Injection attack.

Description

The remote host appears to be running Mozilla or Firefox. It is reported that versions up to and including 0.9.3 of Firefox and up to and including 1.7.2 of Mozilla are prone to a security weakness in the enablePrivilege dialog that is displayed to authorize signed code execution. An attacker may display an arbitrary string in the security dialog to entice an user into executing a malicious script.

Solution

Upgrade or patch according to vendor recommendations.

Plugin Details

Severity: Low

ID: 801341

Family: Web Clients

Risk Information

CVSS v2

Risk Factor: Low

Base Score: 2.6

Temporal Score: 2.1

Vector: CVSS2#AV:N/AC:H/Au:N/C:P/I:N/A:N

Reference Information

BID: 11194

Detections

Analytics