| Description: | Description:
The remote host is missing an update to firefox
announced via advisory FEDORA-2009-13333.
For details, please visit the referenced advisories.
ChangeLog:
* Wed Dec 16 2009 Jan Horak - 3.5.6-1
- Update to 3.5.6
* Thu Nov 5 2009 Jan Horak - 3.5.5-1
- Update to 3.5.5
* Mon Oct 26 2009 Jan Horak - 3.5.4-1
- Updated to 3.5.4
References:
[ 1 ] Bug #546694 - CVE-2009-3979 Mozilla crash with evidence of memory corruption
https://bugzilla.redhat.com/show_bug.cgi?id=546694
[ 2 ] Bug #546720 - CVE-2009-3983 Mozilla NTLM reflection vulnerability
https://bugzilla.redhat.com/show_bug.cgi?id=546720
[ 3 ] Bug #546722 - CVE-2009-3984 Mozilla SSL spoofing with document.location and empty SSL response page
https://bugzilla.redhat.com/show_bug.cgi?id=546722
[ 4 ] Bug #546726 - CVE-2009-3985 Mozilla URL spoofing via invalid document.location
https://bugzilla.redhat.com/show_bug.cgi?id=546726
[ 5 ] Bug #546724 - CVE-2009-3986 Mozilla Chrome privilege escalation via window.opener
https://bugzilla.redhat.com/show_bug.cgi?id=546724
Solution: Apply the appropriate updates.
This update can be installed with the yum update program. Use
su -c 'yum update firefox' at the command line.
For more information, refer to Managing Software with yum,
available at http://docs.fedoraproject.org/yum/.
https://secure1.securityspace.com/smysecure/catid.html?in=FEDORA-2009-13333
CVSS Score:
9.3
CVSS Vector:
AV:N/AC:M/Au:N/C:C/I:C/A:C
|
