Scientific Linux Security Update : firefox on SL5.x, SL6.x, SL7.x i386/x86_64
Critical Nessus Plugin ID 85706
SynopsisThe remote Scientific Linux host is missing one or more security updates.
DescriptionA flaw was found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2015-4497)
A flaw was found in the way Firefox handled installation of add-ons.
An attacker could use this flaw to bypass the add-on installation prompt, and trick the user inso installing an add-on from a malicious source. (CVE-2015-4498)
After installing the update, Firefox must be restarted for the changes to take effect.
SolutionUpdate the affected firefox and / or firefox-debuginfo packages.