現已提供適用於 Red Hat Enterprise Linux 4、5 和 6 的更新版 firefox 套件，可修正數個安全性問題和一個錯誤。

Red Hat 安全性回應團隊已將此更新評為具有重大安全性影響。可針對每個弱點從〈參照〉一節的 CVE 連結中取得常見弱點評分系統 (CVSS) 的基本分數，其中包含有關嚴重性評等的詳細資訊。

Mozilla Firefox 是開放原始碼的網頁瀏覽器。XULRunner 為 Mozilla Firefox 提供 XUL 執行階段環境。

在 Firefox 用於清理延伸模組中 HTML 內容的方法中，發現一個瑕疵。如果延伸模組使用 ParanoidFragmentSink 類別載入或轉譯惡意內容，就會無法安全顯示內容，從而導致 Firefox 利用執行 Firefox 之使用者的權限，執行任意 JavaScript。(CVE-2010-1585)

在 Firefox 用於處理對話方塊的方式中發現一個瑕疵。攻擊者可利用此瑕疵建立一個惡意網頁，網頁中會顯示空白對話方塊，而其中的按鈕將不會有任何作用。如果使用者將對話方塊視窗關閉，就可意外授予提升權限給這個惡意網頁。(CVE-2011-0051)

處理格式有誤之網頁內容時發現多個瑕疵。包含惡意內容的網頁可造成 Firefox 損毀，或可能利用執行 Firefox 之使用者的權限來執行任意程式碼。(CVE-2011-0053、CVE-2011-0055、CVE-2011-0058、CVE-2011-0062)

在 Firefox 處理格式錯誤之 JavaScript 的方式中發現數個瑕疵。含有惡意 JavaScript 的網站可導致 Firefox 利用執行 Firefox 之使用者的權限，執行該 JavaScript。(CVE-2011-0054、CVE-2011-0056、CVE-2011-0057)

在 Firefox 處理格式錯誤的 JPEG 影像的方式中發現一個瑕疵。含有惡意 JPEG 影像的網站可導致 Firefox 損毀，亦可能會以執行 Firefox 之使用者的權限，執行任意程式碼。(CVE-2011-0061)

在 Firefox 用於處理執行 HTTP 要求之外掛程式的方法中發現一個瑕疵。如果有外掛程式執行 HTTP 要求，而伺服器傳送了 307 重新導向回應，外掛程式不會收到通知，但系統會轉寄 HTTP 要求。轉寄的要求可包含自訂標頭，從而導致跨網站要求偽造攻擊。
(CVE-2011-0059)

如需這些瑕疵的詳細技術資訊，請參閱 Firefox 3.6.14 的 Mozilla 安全性公告。您可在此錯字勘誤表的<參照>一節中找到 Mozilla 公告的連結。

此更新也可修正下列錯誤：

* 在 Red Hat Enterprise Linux 4 和 5 上，執行「firefox
-setDefaultBrowser」命令可能會導致下列警告：

libgnomevfs-警告 **：過時的函式。現已不再支援使用者修改 MIME 資料庫。

此更新可停用「setDefaultBrowser」選項。如果 Red Hat Enterprise Linux 4 使用者想要架設預設網頁瀏覽器，可依序選取 [應用程式] -> [偏好設定] -> [更多偏好設定] -> [偏好的應用程式]。Red Hat Enterprise Linux 5 使用者可依序選取 [系統] -> [偏好設定] -> [偏好的應用程式]。(BZ#463131、BZ#665031)

所有 Firefox 使用者應升級至這些更新版套件，其中包含可更正這些問題的 Firefox 版本 3.6.14。安裝更新之後，Firefox 必須重新啟動，變更才會生效。

遠端主機受到 GLSA-201301-01 中所述的弱點影響 (Mozilla 產品：多個弱點)

在 Mozilla Firefox、Thunderbird、SeaMonkey、NSS、GNU IceCat 與 XULRunner 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

遠端攻擊者可引誘使用者檢視特製的網頁或電子郵件，進而可能導致執行任意程式碼或拒絕服務情況。此外，遠端攻擊者或許能夠執行攔截式攻擊、取得敏感資訊、繞過限制及保護機制、強制檔案下載、發動 XML 插入攻擊、發動 XSS 攻擊、繞過同源原則、偽造 URL 以發動網路釣魚攻擊、觸發垂直捲動、偽造位置列、偽造 SSL 指示器、修改瀏覽器的字型、發動點擊劫持攻擊，或造成其他不明的影響。
 本機攻擊者可取得提升的權限、取得敏感資訊，或取代任意下載檔案。
 因應措施：

目前尚無已知的因應措施。

Versions of SeaMonkey 2.0.x earlier than 2.0.12 are potentially affected by multiple vulnerabilities :

  - Multiple memory corruption issues exists which could lead to arbitrary code execution. (MFSA 2011-01)

  - An error exists in the processing of recusrive calls to 'eval()' when the call is wrapped in a try/catch statement.  This error causes dialog boxes to be displayed with no content and non-functioning buttons.  Closing the dialog results in default acceptance of the dialog. (MFSA 2011-02)

  - A use-after-free error exists in a method used by 'JSON.stringify' and can allow arbitrary code execution. (MFSA 2011-03)

  - A buffer-overflow vulnerability exists in the JavaScript engine's internal memory mapping of non-local variables and may lead to cde execution. (MFSA 2011-04)

  - A buffer overflow vulnerability exists in the JavaScript engine's internal mapping of string values and may lead to code execution. (MFSA 2011-05)

  - A use-after-free error exists such that a JavaScript 'Worker' can be used to keep a reference to an object which can be freed during garbage collection. This vulnerability may lead to arbitrary code execution. (MFSA 2011-06)

  - A buffer overflow error exists related to the creation of very long strings and the insertion of those strings into an HTML document.  This vulnerability may lead to arbitrary code execution. (MFSA 2011-07)

  - An input validation error exists int he class, 'ParanoidFragmentSink', which allows inline JavaScript and 'javascript:' URLs in a chrome document.  Note that no unsafe usage occurs in Mozilla products, however community generated extensions could. (MFSA 2011-08)

  - A cross-site request forgery (CSRF) vulnerability exists when an HTTP 307 redirect is received in response to a plugin's request.  The request is forwarded to the new location without the plugin's knowledge and with custom headers intact, even across origins. (MFSA 2011-10)

Versions of Firefox 3.6.x earlier than 3.6.14 are potentially affected by multiple vulnerabilities :

 - Multiple memory corruption issues exists which could lead to arbitrary code execution. (MFSA 2011-01)
 - An error exists in the processing of recusrive calls to 'eval()' when the call is wrapped in a try/catch statement.  This error causes dialog boxes to be displayed with no content and non-functioning buttons.  Closing the dialog results in default acceptance of the dialog. (MFSA 2011-02)
 - A use-after-free error exists in a method used by 'JSON.stringify' and can allow arbitrary code execution. (MFSA 2011-03)
 - A buffer-overflow vulnerability exists in the JavaScript engine's internal memory mapping of non-local variables and may lead to cde execution. (MFSA 2011-04)
 - A buffer overflow vulnerability exists in the JavaScript engine's internal mapping of string values and may lead to code execution. (MFSA 2011-05)
 - A use-after-free error exists such that a JavaScript 'Worker' can be used to keep a reference to an object which can be freed during garbage collection. This vulnerability may lead to arbitrary code execution. (MFSA 2011-06)
 - A buffer overflow error exists related to the creation of very long strings and the insertion of those strings into an HTML document.  This vulnerability may lead to arbitrary code execution. (MFSA 2011-07)
 - An input validation error exists int he class, 'ParanoidFragmentSink', which allows inline JavaScript and 'javascript:' URLs in a chrome document.  Note that no unsafe usage occurs in Mozilla products, however community generated extensions could. (MFSA 2011-08)
 - A buffer overflow exist related to JPEG decoding and may lead to arbitrary code execution. (MFSA 2011-09)
 - A cross-site request forgery (CSRF) vulnerability exists when an HTTP 307 redirect is received in response to a plugin's request.  The request is forwarded to the new location without the plugin's knowledge and with custom headers intact, even across origins. (MFSA 2011-10)

Versions of Mozilla Thunderbird 3.1.x prior to 3.1.8 are affected by the following vulnerabilities :

 - Multiple memory corruption issues exists which could lead to arbitrary code execution. (MFSA 2011-01)
 - An input validation error exists int he class, 'ParanoidFragmentSink', which allows inline JavaScript and 'javascript:' URLs in a chrome document. Note that no unsafe usage occurs in Mozilla products, however community generated extensions could. (MFSA 2011-08)
 - A buffer overflow exist related to JPEG decoding and may lead to arbitrary code execution. (MFSA 2011-09)

Versions of Firefox 3.6.x earlier than 3.6.14 are potentially affected by multiple vulnerabilities :

  - Multiple memory corruption issues exists which could lead to arbitrary code execution. (MFSA 2011-01)

  - An error exists in the processing of recusrive calls to 'eval()' when the call is wrapped in a try/catch statement.  This error causes dialog boxes to be displayed with no content and non-functioning buttons.  Closing the dialog results in default acceptance of the dialog. (MFSA 2011-02)

  - A use-after-free error exists in a method used by 'JSON.stringify' and can allow arbitrary code execution. (MFSA 2011-03)

  - A buffer-overflow vulnerability exists in the JavaScript engine's internal memory mapping of non-local variables and may lead to cde execution. (MFSA 2011-04)

  - A buffer overflow vulnerability exists in the JavaScript engine's internal mapping of string values and may lead to code execution. (MFSA 2011-05)

  - A use-after-free error exists such that a JavaScript 'Worker' can be used to keep a reference to an object which can be freed during garbage collection. This vulnerability may lead to arbitrary code execution. (MFSA 2011-06)

  - A buffer overflow error exists related to the creation of very long strings and the insertion of those strings into an HTML document.  This vulnerability may lead to arbitrary code execution. (MFSA 2011-07)

  - An input validation error exists int he class, 'ParanoidFragmentSink', which allows inline JavaScript and 'javascript:' URLs in a chrome document.  Note that no unsafe usage occurs in Mozilla products, however community generated extensions could. (MFSA 2011-08)

  - A buffer overflow exist related to JPEG decoding and may lead to arbitrary code execution. (MFSA 2011-09)

  - A cross-site request forgery (CSRF) vulnerability exists when an HTTP 307 redirect is received in response to a plugin's request.  The request is forwarded to the new location without the plugin's knowledge and with custom headers intact, even across origins. (MFSA 2011-10)

Versions of Thunderbird 3.1.x earlier than 3.1.8 are potentially affected by multiple vulnerabilities :

  - Multiple memory corruption issues exists which could lead to arbitrary code execution. (MFSA 2011-01)

  - An input validation error exists int he class, 'ParanoidFragmentSink', which allows inline JavaScript and 'javascript:' URLs in a chrome document.  Note that no unsafe usage occurs in Mozilla products, however community generated extensions could. (MFSA 2011-08)

  - A buffer overflow exist related to JPEG decoding and may lead to arbitrary code execution. (MFSA 2011-09)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
52507	CentOS 4 : firefox (CESA-2011:0310)	Nessus	CentOS Local Security Checks	2011/3/3	2021/1/4	critical
63402	GLSA-201301-01：Mozilla 產品：多個弱點 (BEAST)	Nessus	Gentoo Local Security Checks	2013/1/8	2022/12/5	critical
5811	SeaMonkey 2.0.x < 2.0.12 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2011/3/7	2019/3/6	high
5808	Mozilla Firefox 3.6.x < 3.6.14 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2011/3/7	2019/3/6	high
5810	Mozilla Thunderbird 3.1.x < 3.1.8 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	2011/3/7	2019/3/6	high
801270	Mozilla Firefox 3.6.x < 3.6.14 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2011/3/7		high
801234	Mozilla Thunderbird 3.1.x < 3.1.8 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients	2011/3/7		high
801265	Mozilla SeaMonkey 2.0.x < 2.0.12 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	2011/3/7		high

检测

插件搜索

critical

critical

high

high

high

high

high

high