New! Vulnerability Priority Rating (VPR)
Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.
VPR Score: 6.7
Synopsis
The remote openSUSE host is missing a security update.
Description
The Mozilla Firefox was updated to version 3.0.16, fixing lots of bugs and various security issues.
The following issues were fixed :
- MFSA 2009-65/CVE-2009-3979/CVE-2009-3981 Crashes with evidence of memory corruption (1.9.0.16)
- MFSA 2009-68/CVE-2009-3983 (bmo#487872) NTLM reflection vulnerability
- MFSA 2009-69/CVE-2009-3984/CVE-2009-3985 (bmo#521461,bmo#514232) Location bar spoofing vulnerabilities
- MFSA 2009-70/CVE-2009-3986 (bmo#522430) Privilege escalation via chrome window.opener
Solution
Update the affected MozillaFirefox packages.