Firefox 3.6 < 3.6.26 Multiple Vulnerabilities (Mac OS X)
High Nessus Plugin ID 57774
Synopsis
The remote Mac OS X host contains a web browser that is potentially affected by multiple vulnerabilities.
Description
The installed version of Firefox 3.6 is earlier than 3.6.26. Such versions are potentially affected by multiple vulnerabilities :
- A use-after-free error exists related to removed nsDOMAttribute child nodes.(CVE-2011-3659)
- The IPv6 literal syntax in web addresses is not being properly enforced. (CVE-2011-3670)
- Various memory safety issues exist. (CVE-2012-0442)
- Memory corruption errors exist related to the decoding of Ogg Vorbis files and processing of malformed XSLT stylesheets. (CVE-2012-0444, CVE-2012-0449)
Solution
Upgrade to Firefox 3.6.26 or later.