Fedora 9 : Miro-1.2.7-5.fc9 / blam-1.8.5-6.fc9.1 / chmsee-1.0.1-9.fc9 / devhelp-0.19.1-9.fc9 / etc (2009-2421)

critical Nessus Plugin ID 35802
New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote Fedora host is missing one or more security updates.

Description

Update to the new upstream Firefox 3.0.7 / XULRunner 1.9.0.7 fixing multiple security issues: http://www.mozilla.org/security/known- vulnerabilities/firefox30.html#firefox3.0.7 This update also contains new builds of all applications depending on Gecko libraries, built against the new version. Note: after the updated packages are installed, Firefox must be restarted for the update to take effect.

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Solution

Update the affected packages.

See Also

https://www.mozilla.org/en-US/security/known-

https://bugzilla.redhat.com/show_bug.cgi?id=488272

https://bugzilla.redhat.com/show_bug.cgi?id=488273

https://bugzilla.redhat.com/show_bug.cgi?id=488276

https://bugzilla.redhat.com/show_bug.cgi?id=488283

https://bugzilla.redhat.com/show_bug.cgi?id=488287

https://bugzilla.redhat.com/show_bug.cgi?id=488290

https://bugzilla.redhat.com/show_bug.cgi?id=488292

http://www.nessus.org/u?53f874fa

http://www.nessus.org/u?5cca5f7a

http://www.nessus.org/u?e5770698

http://www.nessus.org/u?eec68ab8

http://www.nessus.org/u?1dc0cbb2

http://www.nessus.org/u?2d8feae8

http://www.nessus.org/u?93f0da75

http://www.nessus.org/u?4411d35d

http://www.nessus.org/u?42028ec1

http://www.nessus.org/u?28d56078

http://www.nessus.org/u?9f36dd88

http://www.nessus.org/u?c832c68a

http://www.nessus.org/u?6fc8a82f

http://www.nessus.org/u?32bc20d1

http://www.nessus.org/u?e15b24c4

http://www.nessus.org/u?bd9c81e4

http://www.nessus.org/u?1a4ab68a

http://www.nessus.org/u?226a2caf

http://www.nessus.org/u?2e24eca2

Plugin Details

Severity: Critical

ID: 35802

File Name: fedora_2009-2421.nasl

Version: 1.22

Type: local

Agent: unix

Published: 3/9/2009

Updated: 1/11/2021

Dependencies: ssh_get_info.nasl

Risk Information

VPR

Risk Factor: Medium

Score: 5.9

CVSS v2

Risk Factor: Critical

Base Score: 10

Temporal Score: 7.4

Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Temporal Vector: E:U/RL:OF/RC:C

Vulnerability Information

CPE: p-cpe:/a:fedoraproject:fedora:Miro, p-cpe:/a:fedoraproject:fedora:blam, p-cpe:/a:fedoraproject:fedora:chmsee, p-cpe:/a:fedoraproject:fedora:devhelp, p-cpe:/a:fedoraproject:fedora:epiphany, p-cpe:/a:fedoraproject:fedora:epiphany-extensions, p-cpe:/a:fedoraproject:fedora:firefox, p-cpe:/a:fedoraproject:fedora:galeon, p-cpe:/a:fedoraproject:fedora:gnome-python2-extras, p-cpe:/a:fedoraproject:fedora:gnome-web-photo, p-cpe:/a:fedoraproject:fedora:google-gadgets, p-cpe:/a:fedoraproject:fedora:gtkmozembedmm, p-cpe:/a:fedoraproject:fedora:kazehakase, p-cpe:/a:fedoraproject:fedora:mozvoikko, p-cpe:/a:fedoraproject:fedora:mugshot, p-cpe:/a:fedoraproject:fedora:ruby-gnome2, p-cpe:/a:fedoraproject:fedora:totem, p-cpe:/a:fedoraproject:fedora:xulrunner, p-cpe:/a:fedoraproject:fedora:yelp, cpe:/o:fedoraproject:fedora:9

Required KB Items: Host/local_checks_enabled, Host/RedHat/release, Host/RedHat/rpm-list

Exploit Ease: No known exploits are available

Patch Publication Date: 3/8/2009

Vulnerability Publication Date: 3/4/2009

Reference Information

CVE: CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774, CVE-2009-0775, CVE-2009-0776, CVE-2009-0777

BID: 33990

FEDORA: 2009-2421

CWE: 20, 200, 399