The installed version of Firefox is earlier than 3.0.15.  Such versions are potentially affected by the following security issues :

  - It may be possible for a malicious web page to     steal form history. (MFSA 2009-52)

  - By predicting the filename of an already     downloaded file in the downloads directory, a     local attacker may be able to trick the browser     into opening an incorrect file. (MFSA 2009-53)

  - Provided the browser is configured to use Proxy     Auto-configuration it may be possible for an     attacker to crash the browser or execute arbitrary     code. (MFSA 2009-55)

  - Mozilla's GIF image parser is affected by a     heap-based buffer overflow. (MFSA 2009-56)

  - A vulnerability in XPCOM utility     'XPCVariant::VariantDataToJS' could allow     executing arbitrary JavaScript code with chrome     privileges. (MFSA 2009-57)

  - A vulnerability in Mozilla's string to floating     point number conversion routine could allow     arbitrary code execution on the remote system.     (MFSA 2009-59)

  - It may be possible to read text from a web page     using JavaScript function 'document.getSelection()     from a different domain. (MFSA 2009-61)

  - If a file contains right-to-left override character     (RTL) in the filename it may be possible for an     attacker to obfuscate the filename and extension     of the file being downloaded. (MFSA 2009-62)

  - Multiple memory corruption vulnerabilities could     potentially allow arbitrary code execution.
    (MFSA 2009-64)

The Mozilla XULRunner engine was updated to version 1.9.0.15 to fix various bugs and security issues.

The following security issues have been fixed :

  - Security researcher Paul Stone reported that a user's     form history, both from web content as well as the smart     location bar, was vulnerable to theft. A malicious web     page could synthesize events such as mouse focus and key     presses on behalf of the victim and trick the browser     into auto-filling the form fields with history entries     and then reading the entries. (MFSA 2009-52 /     CVE-2009-3370)

  - Security researcher Jeremy Brown reported that the file     naming scheme used for downloading a file which already     exists in the downloads folder is predictable. If an     attacker had local access to a victim's computer and     knew the name of a file the victim intended to open     through the Download Manager, he could use this     vulnerability to place a malicious file in the     world-writable directory used to save temporary     downloaded files and cause the browser to choose the     incorrect file when opening it. Since this attack     requires local access to the victim's machine, the     severity of this vulnerability was determined to be low.
    (MFSA 2009-53 / CVE-2009-3274)

  - Security researcher Orlando Berrera of Sec Theory     reported that recursive creation of JavaScript     web-workers can be used to create a set of objects whose     memory could be freed prior to their use. These     conditions often result in a crash which could     potentially be used by an attacker to run arbitrary code     on a victim's computer. (MFSA 2009-54 / CVE-2009-3371)

  - Security researcher Marco C. reported a flaw in the     parsing of regular expressions used in Proxy     Auto-configuration (PAC) files. In certain cases this     flaw could be used by an attacker to crash a victim's     browser and run arbitrary code on their computer. Since     this vulnerability requires the victim to have PAC     configured in their environment with specific regular     expresssions which can trigger the crash, the severity     of the issue was determined to be moderate. (MFSA     2009-55 / CVE-2009-3372)

  - Security research firm iDefense reported that researcher     regenrecht discovered a heap-based buffer overflow in     Mozilla's GIF image parser. This vulnerability could     potentially be used by an attacker to crash a victim's     browser and run arbitrary code on their computer. (MFSA     2009-56 / CVE-2009-3373)

  - Mozilla security researcher moz_bug_r_a4 reported that     the XPCOM utility XPCVariant::VariantDataToJS unwrapped     doubly-wrapped objects before returning them to chrome     callers. This could result in chrome privileged code     calling methods on an object which had previously been     created or modified by web content, potentially     executing malicious JavaScript code with chrome     privileges. (MFSA 2009-57 / CVE-2009-3374)

  - Security researcher Alin Rad Pop of Secunia Research     reported a heap-based buffer overflow in Mozilla's     string to floating point number conversion routines.
    Using this vulnerability an attacker could craft some     malicious JavaScript code containing a very long string     to be converted to a floating point number which would     result in improper memory allocation and the execution     of an arbitrary memory location. This vulnerability     could thus be leveraged by the attacker to run arbitrary     code on a victim's computer. (MFSA 2009-59 /     CVE-2009-1563)

  - Security researcher Gregory Fleischer reported that text     within a selection on a web page can be read by     JavaScript in a different domain using the     document.getSelection function, violating the     same-origin policy. Since this vulnerability requires     user interaction to exploit, its severity was determined     to be moderate. (MFSA 2009-61 / CVE-2009-3375)

  - Mozilla security researchers Jesse Ruderman and Sid     Stamm reported that when downloading a file containing a     right-to-left override character (RTL) in the filename,     the name displayed in the dialog title bar conflicts     with the name of the file shown in the dialog body. An     attacker could use this vulnerability to obfuscate the     name and file extension of a file to be downloaded and     opened, potentially causing a user to run an executable     file when they expected to open a non-executable file.
    (MFSA 2009-62 / CVE-2009-3376)

  - Mozilla developers and community members identified and     fixed several stability bugs in the browser engine used     in Firefox and other Mozilla-based products. Some of     these crashes showed evidence of memory corruption under     certain circumstances and we presume that with enough     effort at least some of these could be exploited to run     arbitrary code. (MFSA 2009-64 / CVE-2009-3380 /     CVE-2009-3381 / CVE-2009-3382 / CVE-2009-3383)

The remote VMware ESX host is missing a security-related patch. It is, therefore, affected by multiple vulnerabilities, including remote code execution vulnerabilities, in several third-party components and libraries :

  - Network Security Services (NSS)
  - NetScape Portable Runtime (NSPR)

The remote host is affected by the vulnerability described in GLSA-201301-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information,       bypass restrictions and protection mechanisms, force file downloads,       conduct XML injection attacks, conduct XSS attacks, bypass the Same       Origin Policy, spoof URL&rsquo;s for phishing attacks, trigger a vertical       scroll, spoof the location bar, spoof an SSL indicator, modify the       browser&rsquo;s font, conduct clickjacking attacks, or have other unspecified       impact.
    A local attacker could gain escalated privileges, obtain sensitive       information, or replace an arbitrary downloaded file.
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
42305	Firefox < 3.0.15 Multiple Vulnerabilities	Nessus	Windows	2009/10/29	2018/7/16	high
42364	SuSE 11 Security Update : Mozilla XULRunner (SAT Patch Number 1493)	Nessus	SuSE Local Security Checks	2009/11/4	2021/1/14	critical
89735	VMware ESX Third-Party Libraries Multiple Vulnerabilities (VMSA-2010-0001) (remote check)	Nessus	VMware ESX Local Security Checks	2016/3/8	2021/1/6	critical
63402	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	2013/1/8	2025/10/6	critical

检测

插件搜索

high

critical

critical

critical