SuSE 10 Security Update : MozillaFirefox (ZYPP Patch Number 2683)

High Nessus Plugin ID 29359

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.

VPR Score: 6.6


The remote SuSE 10 host is missing a security-related patch.


This update brings Mozilla Firefox to security update version

- As part of the Firefox and update releases several bugs were fixed to improve the stability of the browser. Some of these were crashes that showed evidence of memory corruption and we presume that with enough effort at least some of these could be exploited to run arbitrary code. These fixes affected the layout engine (CVE-2007-0775), SVG renderer (CVE-2007-0776) and JavaScript engine. (CVE-2007-0777).
(MFSA 2007-01)

- Various enhancements were done to make XSS exploits against websites less effective. These included fixes for invalid trailing characters (CVE-2007-0995), child frame character set inheritance (CVE-2007-0996), password form injection (CVE-2006-6077), and the Adobe Reader universal XSS problem. (MFSA 2007-02)

- AAd reported a potential disk cache collision that could be exploited by remote attackers to steal confidential data or execute code. (MFSA 2007-03 / CVE-2007-0778)

- David Eckel reported that browser UI elements--such as the host name and security indicators--could be spoofed by using a large, mostly transparent, custom cursor and adjusting the CSS3 hotspot property so that the visible part of the cursor floated outside the browser content area. (MFSA 2007-04 / CVE-2007-0779)

- Manually opening blocked popups could be exploited by remote attackers to allow XSS attacks (CVE-2007-0780) or to execute code in local files. (CVE-2007-0800). (MFSA 2007-05)

- Two buffer overflows were found in the NSS handling of Mozilla. (MFSA 2007-06)

- SSL clients such as Firefox and Thunderbird can suffer a buffer overflow if a malicious server presents a certificate with a public key that is too small to encrypt the entire 'Master Secret'. Exploiting this overflow appears to be unreliable but possible if the SSLv2 protocol is enabled. (CVE-2007-0008)

- Servers that use NSS for the SSLv2 protocol can be exploited by a client that presents a 'Client Master Key' with invalid length values in any of several fields that are used without adequate error checking. This can lead to a buffer overflow that presumably could be exploitable. (CVE-2007-0009)

- Michal Zalewski demonstrated that setting location.hostname to a value with embedded null characters can confuse the browsers domain checks.
Setting the value triggers a load, but the networking software reads the hostname only up to the null character while other checks for 'parent domain' start at the right and so can have a completely different idea of what the current host is. (MFSA 2007-06 / CVE-2007-0981)


Apply ZYPP patch number 2683.

See Also

Plugin Details

Severity: High

ID: 29359

File Name: suse_MozillaFirefox-2683.nasl

Version: 1.19

Type: local

Agent: unix

Published: 2007/12/13

Updated: 2021/01/14

Dependencies: 12634

Risk Information

Risk Factor: High

VPR Score: 6.6

CVSS v2.0

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: cpe:/o:suse:suse_linux

Required KB Items: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

Patch Publication Date: 2007/03/01

Vulnerability Publication Date: 2006/11/24

Reference Information

CVE: CVE-2006-6077, CVE-2007-0008, CVE-2007-0009, CVE-2007-0775, CVE-2007-0776, CVE-2007-0777, CVE-2007-0778, CVE-2007-0779, CVE-2007-0780, CVE-2007-0800, CVE-2007-0981, CVE-2007-0995, CVE-2007-0996

CWE: 79, 119, 189