FreeBSD : mozilla -- multiple vulnerabilities (9ccfee39-3c3b-11df-9edc-000f20797ede)

Critical Nessus Plugin ID 45382

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

Mozilla Project reports :

MFSA 2010-24 XMLDocument::load() doesn't check nsIContentPolicy

MFSA 2010-23 Image src redirect to mailto: URL opens email editor

MFSA 2010-22 Update NSS to support TLS renegotiation indication

MFSA 2010-21 Arbitrary code execution with Firebug XMLHttpRequestSpy

MFSA 2010-20 Chrome privilege escalation via forced URL drag and drop

MFSA 2010-19 Dangling pointer vulnerability in nsPluginArray

MFSA 2010-18 Dangling pointer vulnerability in nsTreeContentView

MFSA 2010-17 Remote code execution with use-after-free in nsTreeSelection

MFSA 2010-16 Crashes with evidence of memory corruption (rv:1.9.2.2/ 1.9.1.9/ 1.9.0.19)

Solution

Update the affected packages.

See Also

https://www.mozilla.org/en-US/security/advisories/mfsa2010-24/

https://www.mozilla.org/en-US/security/advisories/mfsa2010-23/

https://www.mozilla.org/en-US/security/advisories/mfsa2010-22/

https://www.mozilla.org/en-US/security/advisories/mfsa2010-21/

https://www.mozilla.org/en-US/security/advisories/mfsa2010-20/

https://www.mozilla.org/en-US/security/advisories/mfsa2010-19/

https://www.mozilla.org/en-US/security/advisories/mfsa2010-18/

https://www.mozilla.org/en-US/security/advisories/mfsa2010-17/

https://www.mozilla.org/en-US/security/advisories/mfsa2010-16/

http://www.nessus.org/u?2ceda238

Plugin Details

Severity: Critical

ID: 45382

File Name: freebsd_pkg_9ccfee393c3b11df9edc000f20797ede.nasl

Version: 1.15

Type: local

Published: 2010/03/31

Updated: 2018/11/21

Dependencies: 12634

Risk Information

Risk Factor: Critical

CVSS v2.0

Base Score: 10

Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:firefox, p-cpe:/a:freebsd:freebsd:linux-f10-nss, p-cpe:/a:freebsd:freebsd:linux-firefox, p-cpe:/a:freebsd:freebsd:linux-firefox-devel, p-cpe:/a:freebsd:freebsd:nss, p-cpe:/a:freebsd:freebsd:seamonkey, p-cpe:/a:freebsd:freebsd:thunderbird, cpe:/o:freebsd:freebsd

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 2010/03/30

Vulnerability Publication Date: 2010/03/30

Reference Information

CVE: CVE-2009-3555, CVE-2010-0173, CVE-2010-0174, CVE-2010-0175, CVE-2010-0176, CVE-2010-0177, CVE-2010-0178, CVE-2010-0179, CVE-2010-0181

CWE: 310