The installed version of Firefox 3.6 is earlier than 3.6.18.  Such versions are potentially affected by the following security issues :

  - Multiple memory safety issues can lead to application     crashes and possibly remote code execution.
    (CVE-2011-2374, CVE-2011-2376, CVE-2011-2364,     CVE-2011-2365)

  - A use-after-free issue when viewing XUL documents with     scripts disabled could lead to code execution.
    (CVE-2011-2373)

  - A memory corruption issue due to multipart /     x-mixed-replace images could lead to memory corruption.
    (CVE-2011-2377)

  - When a JavaScript Array object has its length set to an     extremely large value, the iteration of array elements     that occurs when its reduceRight method is called could     result in code execution due to an invalid index value     being used. (CVE-2011-2371)

  - Multiple dangling pointer vulnerabilities could lead to     code execution. (CVE-2011-0083, CVE-2011-2363,     CVE-2011-0085)

  - An error in the way cookies are handled could lead to     information disclosure. (CVE-2011-2362)

Updated firefox packages that fix several security issues and one bug are now available for Red Hat Enterprise Linux 4, 5, and 6.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox.

A flaw was found in the way Firefox handled malformed JPEG images. A website containing a malicious JPEG image could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-2377)

Multiple dangling pointer flaws were found in Firefox. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-0083, CVE-2011-0085, CVE-2011-2363)

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-2364, CVE-2011-2365, CVE-2011-2374, CVE-2011-2375, CVE-2011-2376)

An integer overflow flaw was found in the way Firefox handled JavaScript Array objects. A website containing malicious JavaScript could cause Firefox to execute that JavaScript with the privileges of the user running Firefox. (CVE-2011-2371)

A use-after-free flaw was found in the way Firefox handled malformed JavaScript. A website containing malicious JavaScript could cause Firefox to execute that JavaScript with the privileges of the user running Firefox. (CVE-2011-2373)

It was found that Firefox could treat two separate cookies as interchangeable if both were for the same domain name but one of those domain names had a trailing '.' character. This violates the same-origin policy and could possibly lead to data being leaked to the wrong domain. (CVE-2011-2362)

For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 3.6.18. You can find a link to the Mozilla advisories in the References section of this erratum.

This update also fixes the following bug :

* With previous versions of Firefox on Red Hat Enterprise Linux 5, the 'background-repeat' CSS (Cascading Style Sheets) property did not work (such images were not displayed and repeated as expected). (BZ#698313)

All Firefox users should upgrade to these updated packages, which contain Firefox version 3.6.18, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

Security issues were identified and fixed in mozilla firefox and thunderbird :

Security researcher regenrecht reported via TippingPoint's Zero Day Initiative two instances of code which modifies SVG element lists failed to account for changes made to the list by user-supplied callbacks before accessing list elements. If a user-supplied callback deleted such an object, the element-modifying code could wind up accessing deleted memory and potentially executing attacker-controlled memory. regenrecht also reported via TippingPoint's Zero Day Initiative that a XUL document could force the nsXULCommandDispatcher to remove all command updaters from the queue, including the one currently in use. This could result in the execution of deleted memory which an attacker could use to run arbitrary code on a victim's computer (CVE-2011-0083, CVE-2011-0085, CVE-2011-2363).

Mozilla security researcher David Chan reported that cookies set for example.com. (note the trailing dot) and example.com were treated as interchangeable. This is a violation of same-origin conventions and could potentially lead to leakage of cookie data to the wrong party (CVE-2011-2362).

Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products.
Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code (CVE-2011-2364, CVE-2011-2365, CVE-2011-2374, CVE-2011-2375, CVE-2011-2376).

Security researchers Chris Rohlf and Yan Ivnitskiy of Matasano Security reported that when a JavaScript Array object had its length set to an extremely large value, the iteration of array elements that occurs when its reduceRight method was subsequently called could result in the execution of attacker controlled memory due to an invalid index value being used to access element properties (CVE-2011-2371).

Security researcher Martin Barbella reported that under certain conditions, viewing a XUL document while JavaScript was disabled caused deleted memory to be accessed. This flaw could potentially be used by an attacker to crash a victim's browser and run arbitrary code on their computer (CVE-2011-2373).

Security researcher Jordi Chancel reported a crash on multipart/x-mixed-replace images due to memory corruption (CVE-2011-2377).

Packages for 2009.0 are provided as of the Extended Maintenance Program. Please visit this link to learn more:
http://store.mandriva.com/product_info.php?cPath=149 products_id=490

Additionally, some packages which require so, have been rebuilt and are being provided as updates.

USN-1157-1 fixed vulnerabilities in Firefox. Unfortunately, this update produced the side effect of pulling in Firefox on some systems that did not have it installed during a dist-upgrade due to changes in the Ubuntu language packs. This update fixes the problem. We apologize for the inconvenience.

Bob Clary, Kevin Brosnan, Gary Kwong, Jesse Ruderman, Christian Biesinger, Bas Schouten, Igor Bukanov, Bill McCloskey, Olli Pettay, Daniel Veditz and Marcia Knous discovered multiple memory vulnerabilities in the browser rendering engine. An attacker could possibly execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2011-2374, CVE-2011-2375)

Martin Barbella discovered that under certain conditions, viewing a XUL document while JavaScript was disabled caused deleted memory to be accessed. An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2011-2373)

Jordi Chancel discovered a vulnerability on multipart/x-mixed-replace images due to memory corruption.
An attacker could potentially use this to crash Firefox or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2011-2377)

Chris Rohlf and Yan Ivnitskiy discovered an integer overflow vulnerability in JavaScript Arrays. An attacker could potentially use this to execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2011-2371)

It was discovered that Firefox's WebGL textures did not honor same-origin policy. If a user were tricked into viewing a malicious site, an attacker could potentially view image data from a different site. (CVE-2011-2366)

Christoph Diehl discovered an out-of-bounds read vulnerability in WebGL code. An attacker could potentially read data that other processes had stored in the GPU.
(CVE-2011-2367)

Christoph Diehl discovered an invalid write vulnerability in WebGL code. An attacker could potentially use this to execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2011-2368)

It was discovered that an unauthorized site could trigger an installation dialog for addons and themes. If a user were tricked into viewing a malicious site, an attacker could possibly trick the user into installing a malicious addon or theme. (CVE-2011-2370)

Mario Heiderich discovered a vulnerability in displaying decoded HTML-encoded entities inside SVG elements. An attacker could utilize this to perform cross-site scripting attacks. (CVE-2011-2369).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey :

  - CVE-2011-0083 / CVE-2011-2363     'regenrecht' discovered two use-after-frees in SVG     processing, which could lead to the execution of     arbitrary code.

  - CVE-2011-0085     'regenrecht' discovered a use-after-free in XUL     processing, which could lead to the execution of     arbitrary code.

  - CVE-2011-2362     David Chan discovered that cookies were insufficiently     isolated.

  - CVE-2011-2371     Chris Rohlf and Yan Ivnitskiy discovered an integer     overflow in the JavaScript engine, which could lead to     the execution of arbitrary code.

  - CVE-2011-2373     Martin Barbella discovered a use-after-free in XUL     processing, which could lead to the execution of     arbitrary code.

  - CVE-2011-2374     Bob Clary, Kevin Brosnan, Nils, Gary Kwong, Jesse     Ruderman and Christian Biesinger discovered memory     corruption bugs, which may lead to the execution of     arbitrary code.

  - CVE-2011-2376     Luke Wagner and Gary Kwong discovered memory corruption     bugs, which may lead to the execution of arbitrary code.

The oldstable distribution (lenny) is not affected. The iceape package only provides the XPCOM code.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0885 advisory.

    firefox:

    [3.6.18-1.0.1.el6_1]
    - Added firefox-oracle-default-prefs.js and removed firefox-redhat-default-prefs.js

    [3.6.18-1]
    - Update to 3.6.18

    xulrunner:

    [1.9.2.18-2.0.1.el6_1]
    - Replace xulrunner-redhat-default-prefs.js with       xulrunner-oracle-default-prefs.js

    [1.9.2.18-2]
    - Update to 1.9.2.18

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Mozilla Firefox was updated to the 3.6.18 security release.

  - MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364     CVE-2011-2365 Miscellaneous memory safety hazards

  - MFSA 2011-20/CVE-2011-2373 (bmo#617247) Use-after-free     vulnerability when viewing XUL document with script     disabled

  - MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303)     Memory corruption due to multipart/x-mixed-replace     images

  - MFSA 2011-22/CVE-2011-2371 (bmo#664009) Integer overflow     and arbitrary code execution in Array.reduceRight()

  - MFSA 2011-23/CVE-2011-0083 CVE-2011-0085 CVE-2011-2363     Multiple dangling pointer vulnerabilities

  - MFSA 2011-24/CVE-2011-2362 (bmo#616264) Cookie isolation     error

mozilla-xulrunner192 was updated to the 1.9.2.18 security release.

dbg114-mozilla-js192-4771 mozilla-js192-4771 new_updateinfo MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards

dbg114-mozilla-js192-4771 mozilla-js192-4771 new_updateinfo MFSA 2011-20/CVE-2011-2373 (bmo#617247) Use-after-free vulnerability when viewing XUL document with script disabled

dbg114-mozilla-js192-4771 mozilla-js192-4771 new_updateinfo MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303) Memory corruption due to multipart/x-mixed-replace images

dbg114-mozilla-js192-4771 mozilla-js192-4771 new_updateinfo MFSA 2011-22/CVE-2011-2371 (bmo#664009) Integer overflow and arbitrary code execution in Array.reduceRight()

dbg114-mozilla-js192-4771 mozilla-js192-4771 new_updateinfo MFSA 2011-23/CVE-2011-0083 CVE-2011-0085 CVE-2011-2363 Multiple dangling pointer vulnerabilities

dbg114-mozilla-js192-4771 mozilla-js192-4771 new_updateinfo MFSA 2011-24/CVE-2011-2362 (bmo#616264) Cookie isolation error

Mozilla Thunderbird was updated to the 3.1.11 release.

It has new features, fixes lots of bugs, and also fixes the following security issues: dbg114-MozillaThunderbird-4800 MozillaThunderbird-4800 new_updateinfo MFSA 2011-19/CVE-2011-2374 CVE-2011-2376 CVE-2011-2364 CVE-2011-2365 Miscellaneous memory safety hazards dbg114-MozillaThunderbird-4800 MozillaThunderbird-4800 new_updateinfo MFSA 2011-20/CVE-2011-2373 (bmo#617247) Use-after-free vulnerability when viewing XUL document with script disabled dbg114-MozillaThunderbird-4800 MozillaThunderbird-4800 new_updateinfo MFSA 2011-21/CVE-2011-2377 (bmo#638018, bmo#639303) Memory corruption due to multipart/x-mixed-replace images dbg114-MozillaThunderbird-4800 MozillaThunderbird-4800 new_updateinfo MFSA 2011-22/CVE-2011-2371 (bmo#664009) Integer overflow and arbitrary code execution in Array.reduceRight() dbg114-MozillaThunderbird-4800 MozillaThunderbird-4800 new_updateinfo MFSA 2011-23/CVE-2011-0083 CVE-2011-0085 CVE-2011-2363 Multiple dangling pointer vulnerabilities dbg114-MozillaThunderbird-4800 MozillaThunderbird-4800 new_updateinfo MFSA 2011-24/CVE-2011-2362 (bmo#616264) Cookie isolation error

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
55287	Firefox 3.6 < 3.6.18 Multiple Vulnerabilities	Nessus	Windows	2011/6/21	2026/6/23	high
55398	RHEL 4 / 5 / 6 : firefox (RHSA-2011:0885)	Nessus	Red Hat Local Security Checks	2011/6/22	2021/1/14	critical
55406	Mandriva Linux Security Advisory : mozilla (MDVSA-2011:111)	Nessus	Mandriva Local Security Checks	2011/6/23	2021/1/6	critical
55413	Ubuntu 11.04 : firefox regression (USN-1157-3)	Nessus	Ubuntu Local Security Checks	2011/6/24	2019/9/19	critical
55489	Debian DSA-2269-1 : iceape - several vulnerabilities	Nessus	Debian Local Security Checks	2011/7/5	2021/1/4	critical
68293	Oracle Linux 5 / 6 : firefox (ELSA-2011-0885)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	high
75653	openSUSE Security Update : MozillaFirefox (MozillaFirefox-4761)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	critical
75957	openSUSE Security Update : mozilla-js192 (mozilla-js192-4771)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	critical
75965	openSUSE Security Update : MozillaThunderbird (MozillaThunderbird-4800)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	critical

检测

插件搜索

high

critical

critical

critical

critical

high

critical

critical

critical