Fedora 7 : Miro-1.1-3.fc7 / chmsee-1.0.0-1.28.fc7 / devhelp-0.13-13.fc7 / epiphany-2.18.3-6.fc7 / etc (2008-1435)

High Nessus Plugin ID 31060

New! Vulnerability Priority Rating (VPR)

Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.

VPR Score: 5.9

Synopsis

The remote Fedora host is missing one or more security updates.

Description

Mozilla Firefox is an open source Web browser. Several flaws were found in the way Firefox processed certain malformed web content. A web page containing malicious content could cause Firefox to crash, or potentially execute arbitrary code as the user running Firefox.
(CVE-2008-0412, CVE-2008-0413, CVE-2008-0415, CVE-2008-0419) Several flaws were found in the way Firefox displayed malformed web content. A web page containing specially crafted content could trick a user into surrendering sensitive information. (CVE-2008-0591, CVE-2008-0593) A flaw was found in the way Firefox stored password data. If a user saves login information for a malicious website, it could be possible to corrupt the password database, preventing the user from properly accessing saved password data. (CVE-2008-0417) A flaw was found in the way Firefox handles certain chrome URLs. If a user has certain extensions installed, it could allow a malicious website to steal sensitive session data. Note: this flaw does not affect a default installation of Firefox. (CVE-2008-0418) A flaw was found in the way Firefox saves certain text files. If a website offers a file of type 'plain/text', rather than 'text/plain', Firefox will not show future 'text/plain' content to the user in the browser, forcing them to save those files locally to view the content. (CVE-2008-0592) Users of firefox are advised to upgrade to these updated packages, which contain updated packages to resolve these issues.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

See Also

https://bugzilla.redhat.com/show_bug.cgi?id=431732

https://bugzilla.redhat.com/show_bug.cgi?id=431733

https://bugzilla.redhat.com/show_bug.cgi?id=431739

https://bugzilla.redhat.com/show_bug.cgi?id=431742

https://bugzilla.redhat.com/show_bug.cgi?id=431748

https://bugzilla.redhat.com/show_bug.cgi?id=431749

https://bugzilla.redhat.com/show_bug.cgi?id=431751

https://bugzilla.redhat.com/show_bug.cgi?id=431752

https://bugzilla.redhat.com/show_bug.cgi?id=431756

https://bugzilla.redhat.com/show_bug.cgi?id=432036

https://bugzilla.redhat.com/show_bug.cgi?id=432040

http://www.nessus.org/u?63627475

http://www.nessus.org/u?4225307a

http://www.nessus.org/u?5f2dbb08

http://www.nessus.org/u?ded22244

http://www.nessus.org/u?f7f870dd

http://www.nessus.org/u?a24c3429

http://www.nessus.org/u?3bc6d673

http://www.nessus.org/u?d6e3b3b7

http://www.nessus.org/u?e9ddf257

http://www.nessus.org/u?382378d6

http://www.nessus.org/u?86d0cc5c

http://www.nessus.org/u?8fa9b38c

http://www.nessus.org/u?4d5c6865

http://www.nessus.org/u?e6df462e

Plugin Details

Severity: High

ID: 31060

File Name: fedora_2008-1435.nasl

Version: 1.18

Type: local

Agent: unix

Published: 2008/02/14

Updated: 2019/08/02

Dependencies: 12634

Risk Information

Risk Factor: High

VPR Score: 5.9

CVSS v2.0

Base Score: 9.3

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:Miro, p-cpe:/a:fedoraproject:fedora:chmsee, p-cpe:/a:fedoraproject:fedora:devhelp, p-cpe:/a:fedoraproject:fedora:epiphany, p-cpe:/a:fedoraproject:fedora:epiphany-extensions, p-cpe:/a:fedoraproject:fedora:firefox, p-cpe:/a:fedoraproject:fedora:galeon, p-cpe:/a:fedoraproject:fedora:gnome-python2-extras, p-cpe:/a:fedoraproject:fedora:gtkmozembedmm, p-cpe:/a:fedoraproject:fedora:kazehakase, p-cpe:/a:fedoraproject:fedora:liferea, p-cpe:/a:fedoraproject:fedora:openvrml, p-cpe:/a:fedoraproject:fedora:ruby-gnome2, p-cpe:/a:fedoraproject:fedora:yelp, cpe:/o:fedoraproject:fedora:7

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Patch Publication Date: 2008/02/13

Vulnerability Publication Date: 2008/02/08

Reference Information

CVE: CVE-2008-0412, CVE-2008-0413, CVE-2008-0414, CVE-2008-0415, CVE-2008-0417, CVE-2008-0418, CVE-2008-0419, CVE-2008-0591, CVE-2008-0592, CVE-2008-0593, CVE-2008-0594

FEDORA: 2008-1435

CWE: 20, 22, 79, 94, 200, 399