openSUSE 10 Security Update : MozillaFirefox (MozillaFirefox-3547)
High Nessus Plugin ID 27121
SynopsisThe remote openSUSE host is missing a security update.
DescriptionThis update brings Mozilla Firefox to security update version 220.127.116.11
This is a major upgrade from the Firefox 1.5.0.x line for SUSE Linux 10.0 and 10.1.
- MFSA 2007-17 / CVE-2007-2871 :
Chris Thomas demonstrated that XUL popups opened by web content could be placed outside the boundaries of the content area. This could be used to spoof or hide parts of the browser chrome UI such as the location bar.
- MFSA 2007-16 / CVE-2007-2870 :
Mozilla contributor moz_bug_r_a4 demonstrated that the addEventListener method could be used to inject script into another site in violation of the browser's same-origin policy. This could be used to access or modify private or valuable information from that other site.
- MFSA 2007-14 / CVE-2007-1362 :
Nicolas Derouet reported two problems with cookie handling in Mozilla clients. Insufficient length checks could be use to exhaust browser memory and so to crash the browser or at least slow it done by a large degree.
The second issue was that the cookie path and name values were not checked for the presence of the delimiter used for internal cookie storage, and if present this confused future interpretation of the cookie data. This is not considered to be exploitable.
- MFSA 2007-13 / CVE-2007-2869 :
Marcel reported that a malicious web page could perform a denial of service attack against the form autocomplete feature that would persist from session to session until the malicious form data was deleted. Filling a text field with millions of characters and submitting the form will cause the victim's browser to hang for up to several minutes while the form data is read, and this will happen the first time autocomplete is triggered after every browser restart.
No harm is done to the user's computer, but the frustration caused by the hang could prevent use of Firefox if users don't know how to clear the bad state.
- MFSA 2007-12 / CVE-2007-2867 / CVE-2007-2868
As part of the Firefox 18.104.22.168 and 22.214.171.124 update releases Mozilla developers fixed many bugs to improve the stability of the product. Some of these crashes that showed evidence of memory corruption under certain circumstances and we presume that with enough effort at least some of these could be exploited to run arbitrary code.
- MFSA 2007-11 / CVE-2007-1562 :
Incorrect FTP PASV handling could be used by malicious ftp servers to do a rudimentary port scanning of for instance internal networks of the computer the browser is running on.
SolutionUpdate the affected MozillaFirefox packages.