USN-873-1 fixed vulnerabilities in Firefox and Xulrunner. The upstream changes introduced a regression when using NTLM authentication. This update fixes the problem and adds additional stability fixes.

We apologize for the inconvenience.

Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Olli Pettay, and David James discovered several flaws in the browser and JavaScript engines of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-3979, CVE-2009-3981, CVE-2009-3986)

Takehiro Takahashi discovered flaws in the NTLM implementation in Firefox. If an NTLM authenticated user visited a malicious website, a remote attacker could send requests to other applications, authenticated as the user.
(CVE-2009-3983)

Jonathan Morgan discovered that Firefox did not properly display SSL indicators under certain circumstances. This could be used by an attacker to spoof an encrypted page, such as in a phishing attack. (CVE-2009-3984)

Jordi Chancel discovered that Firefox did not properly display invalid URLs for a blank page. If a user were tricked into accessing a malicious website, an attacker could exploit this to spoof the location bar, such as in a phishing attack. (CVE-2009-3985).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several remote vulnerabilities have been discovered in Xulrunner, a runtime environment for XUL applications, such as the Iceweasel web browser. The Common Vulnerabilities and Exposures project identifies the following problems :

  - CVE-2009-3986 :
    David James discovered that the window.opener property     allows Chrome privilege escalation.

  - CVE-2009-3985 :
    Jordi Chanel discovered a spoofing vulnerability of the     URL location bar using the document.location property.

  - CVE-2009-3984 :
    Jonathan Morgan discovered that the icon indicating a     secure connection could be spoofed through the     document.location property.

  - CVE-2009-3983 :
    Takehiro Takahashi discovered that the NTLM     implementation is vulnerable to reflection attacks.

  - CVE-2009-3981 :
    Jesse Ruderman discovered a crash in the layout engine,     which might allow the execution of arbitrary code.

  - CVE-2009-3979 :
    Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel     and Olli Pettay discovered crashes in the layout engine,     which might allow the execution of arbitrary code.

The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2009-445:05 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and     portability.
    Security bugs fixed with this release:
    CVE-2009-3979     CVE-2009-3981     CVE-2009-3983     CVE-2009-3984     CVE-2009-3985     CVE-2009-3986     No description available at the time of writing, please see CVE links below.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of Firefox is 3.5.x earlier than 3.5.6.  Such versions are potentially affected by the following security issues :

  - Multiple crashes can result in arbitrary code     execution. (MFSA 2009-65)

  - Multiple vulnerabilities in 'liboggplay' can lead to     arbitrary code execution. (MFSA 2009-66)

  - An integer overflow in the 'Theora' video library can     lead to a crash or the execution of arbitrary code.     (MFSA 2009-67)

  - The NTLM implementation is vulnerable to reflection     attacks in which NTLM credentials from one application     can be forwarded to another application. (MFSA 2009-68)

  - Multiple location bar spoofing vulnerabilities exist.     (MFSA 2009-69)

  - A content window which is opened by a chrome window     retains a reference to the chrome window via the     'window.opener' property, which can lead to privilege     escalation. (MFSA 2009-70)

  - The exception messages generated by the     'GeckoActiveXObject' differ based on whether or not the     requested COM object's ProgID is present in the system     registry. (MFSA 2009-71)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2009-1674 advisory.

    firefox:

    [3.0.16-1.0.1.el5_4]
    - Update firstrun and homepage URLs in specfile
    - Added patch oracle-firefox-branding.patch
    - Added firefox-oracle-default-prefs.js/firefox-oracle-default-bookmarks.html       and removed the corresponding  Red Hat ones

    [3.0.16-1]
    - Update to 3.0.16

    xulrunner:

    [1.9.0.16-2.0.1.el5_4]
    - Added xulrunner-oracle-default-prefs.js and removed the corresponding       RedHat one.

    [1.9.0.16-2]
    - Rebuild due to Mozilla's respin

    [1.9.0.16-1]
    - Update to 1.9.0.16

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

USN-874-1 fixed vulnerabilities in Firefox and Xulrunner. The upstream changes introduced a regression when using NTLM authentication. This update fixes the problem and adds additional stability fixes.

We apologize for the inconvenience.

Jesse Ruderman, Josh Soref, Martijn Wargers, Jose Angel, Olli Pettay, and David James discovered several flaws in the browser and JavaScript engines of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. (CVE-2009-3979, CVE-2009-3980, CVE-2009-3982, CVE-2009-3986)

Takehiro Takahashi discovered flaws in the NTLM implementation in Firefox. If an NTLM authenticated user visited a malicious website, a remote attacker could send requests to other applications, authenticated as the user.
(CVE-2009-3983)

Jonathan Morgan discovered that Firefox did not properly display SSL indicators under certain circumstances. This could be used by an attacker to spoof an encrypted page, such as in a phishing attack. (CVE-2009-3984)

Jordi Chancel discovered that Firefox did not properly display invalid URLs for a blank page. If a user were tricked into accessing a malicious website, an attacker could exploit this to spoof the location bar, such as in a phishing attack. (CVE-2009-3985)

David Keeler, Bob Clary, and Dan Kaminsky discovered several flaws in third party media libraries. If a user were tricked into opening a crafted media file, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program.
(CVE-2009-3388, CVE-2009-3389).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Update to new upstream Firefox version 3.5.6, fixing multiple security issues detailed in the upstream advisories:
http://www.mozilla.org/security/known- vulnerabilities/firefox35.html#firefox3.5.6 Update also includes all packages depending on gecko-libs rebuilt against new version of Firefox / XULRunner. CVE-2009-3979 CVE-2009-3980 CVE-2009-3982 CVE-2009-3983 CVE-2009-3984 CVE-2009-3985 CVE-2009-3986 CVE-2009-3388 CVE-2009-3389

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
43823	Ubuntu 8.04 LTS / 8.10 / 9.04 : firefox-3.0, xulrunner-1.9 regression (USN-877-1)	Nessus	Ubuntu Local Security Checks	2010/1/8	2019/9/19	high
44821	Debian DSA-1956-1 : xulrunner - several vulnerabilities	Nessus	Debian Local Security Checks	2010/2/24	2021/1/4	high
284100	MiracleLinux 3 : firefox-3.0.16-1.1AXS3 (AXSA:2009-445:05)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	critical
43174	Firefox 3.5 < 3.5.6 Multiple Vulnerabilities	Nessus	Windows	2009/12/16	2026/6/23	high
67975	Oracle Linux 5 : firefox (ELSA-2009-1674)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/23	critical
43824	Ubuntu 9.10 : firefox-3.5, xulrunner-1.9.1 regression (USN-878-1)	Nessus	Ubuntu Local Security Checks	2010/1/8	2019/9/19	high
43334	Fedora 11 : Miro-2.5.2-7.fc11 / blam-1.8.5-17.fc11 / chmsee-1.0.1-14.fc11 / epiphany-2.26.3-7.fc11 / etc (2009-13333)	Nessus	Fedora Local Security Checks	2009/12/18	2021/1/11	high

检测

插件搜索

high

high

critical

high

critical

high

high