New! Vulnerability Priority Rating (VPR)
Tenable calculates a dynamic VPR for every vulnerability. VPR combines vulnerability information with threat intelligence and machine learning algorithms to predict which vulnerabilities are most likely to be exploited in attacks. Read more about what VPR is and how it's different from CVSS.
VPR Score: 5.9
Synopsis
The remote Debian host is missing a security-related update.
Description
Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian.
The reported vulnerabilities could lead to the execution of arbitrary code or the bypass of content-loading restrictions via the location object.
Solution
Upgrade the iceweasel packages.
For the stable distribution (squeeze), these problems have been fixed in version 3.5.16-18.