Detections
Analytics
Mandrake Linux Security Advisory : mozilla (MDKSA-2004:107)
critical Nessus Plugin ID 15521
Synopsis
The remote Mandrake Linux host is missing one or more security updates.Description
A number of vulnerabilities were fixed in mozilla 1.7.3, the following of which have been backported to mozilla packages for Mandrakelinux 10.0 :- 'Send page' heap overrun
- JavaScript clipboard access
- buffer overflow when displaying VCard
- BMP integer overflow
- javascript: link dragging
- Malicious POP3 server III
The details of all of these vulnerabilities are available from the Mozilla website.
Solution
Update the affected packages.See Also
Plugin Details
Severity: Critical
ID: 15521
File Name: mandrake_MDKSA-2004-107.nasl
Version: 1.19
Type: local
Family: Mandriva Local Security Checks
Published: 10/20/2004
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.0
CVSS v2
Risk Factor: Critical
Base Score: 10
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:mandriva:linux:lib64nspr4, p-cpe:/a:mandriva:linux:lib64nspr4-devel, p-cpe:/a:mandriva:linux:lib64nss3, p-cpe:/a:mandriva:linux:lib64nss3-devel, p-cpe:/a:mandriva:linux:libnspr4, p-cpe:/a:mandriva:linux:libnspr4-devel, p-cpe:/a:mandriva:linux:libnss3, p-cpe:/a:mandriva:linux:libnss3-devel, p-cpe:/a:mandriva:linux:mozilla, p-cpe:/a:mandriva:linux:mozilla-devel, p-cpe:/a:mandriva:linux:mozilla-dom-inspector, p-cpe:/a:mandriva:linux:mozilla-enigmail, p-cpe:/a:mandriva:linux:mozilla-enigmime, p-cpe:/a:mandriva:linux:mozilla-irc, p-cpe:/a:mandriva:linux:mozilla-js-debugger, p-cpe:/a:mandriva:linux:mozilla-mail, p-cpe:/a:mandriva:linux:mozilla-spellchecker, cpe:/o:mandrakesoft:mandrake_linux:10.0
Required KB Items: Host/local_checks_enabled, Host/cpu, Host/Mandrake/release, Host/Mandrake/rpm-list
Patch Publication Date: 10/19/2004
Reference Information
CVE: CVE-2004-0902, CVE-2004-0903, CVE-2004-0904, CVE-2004-0905, CVE-2004-0906, CVE-2004-0908, CVE-2004-0909
MDKSA: 2004:107