Versions of Firefox 4.0.x earlier than 4.0.1 are potentially affected by multiple vulnerabilities : 

Multiple memory corruption issues could lead to arbitrary code execution. (MFSA2011-12)
 - Multiple vulnerabilities in the WebGL feature and WebGLES could be exploited to execute arbitrary code or bypass ASLR protection on Windows. (MFSA2011-17) - The XSLT 'generate-id()' function returned a string that revealed a specific valid address of an object on the memory heap. (MFSA2011-18)

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - Unspecified vulnerability in the browser engine in Mozilla Firefox 3.6.x before 3.6.17 and 4.x before
    4.0.1, and Thunderbird 3.1.x before 3.1.10, allows remote attackers to cause a denial of service (memory
    corruption and application crash) or possibly execute arbitrary code via unknown vectors. (CVE-2011-0081)

  - Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before
    3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote
    attackers to cause a denial of service (memory corruption and application crash) or possibly execute
    arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0070. (CVE-2011-0069)

  - Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19, 3.6.x before
    3.6.17, and 4.x before 4.0.1; Thunderbird before 3.1.10; and SeaMonkey before 2.0.14 allows remote
    attackers to cause a denial of service (memory corruption and application crash) or possibly execute
    arbitrary code via unknown vectors, a different vulnerability than CVE-2011-0069. (CVE-2011-0070)

  - Unspecified vulnerability in the browser engine in Mozilla Firefox 3.5.x before 3.5.19 and 3.6.x before
    3.6.17, Thunderbird before 3.1.10, and SeaMonkey before 2.0.14 allows remote attackers to cause a denial
    of service (memory corruption and application crash) or possibly execute arbitrary code via unknown
    vectors, a different vulnerability than CVE-2011-0074, CVE-2011-0075, CVE-2011-0077, and CVE-2011-0078.
    (CVE-2011-0072)

The installed version of Firefox 4.0 is earlier than 4.0.1.  As such, it is potentially affected by the following security issues :

  - A buffer overflow exists in the WebGLES library.
    Additionally, the Windows version was not compiled     with ASLR enabled. (CVE-2011-0068)

  - Multiple memory safety issues can lead to application     crashes and possibly remote code execution.
    (CVE-2011-0069, CVE-2011-0070, CVE-2011-0079,     CVE-2011-0081)

  - An information disclosure vulnerability exists in the     'xsltGenerateIdFunction' function in the included     libxslt library. (CVE-2011-1202)

Mozilla Firefox was updated to the 4.0.1 security release.

MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Credits

Mozilla developers Boris Zbarsky, Gary Kwong, Jesse Ruderman, Michael Wu, Nils, Scoobidiver, and Ted Mielczarek reported memory safety issues which affected Firefox 4. (CVE-2011-0079)

Mozilla developer Scoobidiver reported a memory safety issue which affected Firefox 4 and Firefox 3.6 (CVE-2011-0081)

Ian Beer reported a crash that affected Firefox 4, Firefox 3.6 and Firefox 3.5. (CVE-2011-0070)

MFSA 2011-17 / CVE-2011-0068: Two crashes that could potentially be exploited to run malicious code were found in the WebGL feature and fixed in Firefox 4.0.1. In addition the WebGLES libraries could potentially be used to bypass a security feature of recent Windows versions. The WebGL feature was introduced in Firefox 4; older versions are not affected by these issues.

Nils reported that the WebGLES libraries in the Windows version of Firefox were compiled without ASLR protection. An attacker who found an exploitable memory corruption flaw could then use these libraries to bypass ASLR on Windows Vista and Windows 7, making the flaw as exploitable on those platforms as it would be on Windows XP or other platforms.

Mozilla researcher Christoph Diehl reported a potentially exploitable buffer overflow in the WebGLES library

Yuri Ko reported a potentially exploitable overwrite in the WebGLES library to the Chrome Secuity Team. We thank them for coordinating with us on this fix.

MFSA 2011-18 / CVE-2011-1202: Chris Evans of the Chrome Security Team reported that the XSLT generate-id() function returned a string that revealed a specific valid address of an object on the memory heap. It is possible that in some cases this address would be valuable information that could be used by an attacker while exploiting a different memory corruption but, in order to make an exploit more reliable or work around mitigation features in the browser or operating system.

The remote host is affected by the vulnerability described in GLSA-201301-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information,       bypass restrictions and protection mechanisms, force file downloads,       conduct XML injection attacks, conduct XSS attacks, bypass the Same       Origin Policy, spoof URL&rsquo;s for phishing attacks, trigger a vertical       scroll, spoof the location bar, spoof an SSL indicator, modify the       browser&rsquo;s font, conduct clickjacking attacks, or have other unspecified       impact.
    A local attacker could gain escalated privileges, obtain sensitive       information, or replace an arbitrary downloaded file.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
5902	Mozilla Firefox 4.0.x < 4.0.1 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	4/29/2011	3/6/2019	high
401257	Alpine: xulrunner: security update to 2.0-r4 (deprecated)	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	8/16/2023	7/2/2026	critical
401257	Alpine: xulrunner: security update to 2.0-r4 (deprecated)	Tenable Cloud Security	Alpine Linux Local Security Checks	8/16/2023	7/2/2026	critical
53595	Firefox 4.0 < 4.0.1 Multiple Vulnerabilities	Nessus	Windows	4/29/2011	7/16/2018	high
75944	openSUSE Security Update : MozillaFirefox (MozillaFirefox-4457)	Nessus	SuSE Local Security Checks	6/13/2014	1/14/2021	critical
63402	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	1/8/2013	10/6/2025	critical

Detections

Analytics

Plugins Search

high

critical

critical

high

critical

critical