Test ID:	1.3.6.1.4.1.25623.1.0.850169
Category:	SuSE Local Security Checks
Title:	SUSE: Security Advisory for MozillaFirefox, MozillaThunderbird (SUSE-SA:2011:028)
Summary:	The remote host is missing an update for the 'MozillaFirefox, MozillaThunderbird'; package(s) announced via the referenced advisory.
Description:	Summary: The remote host is missing an update for the 'MozillaFirefox, MozillaThunderbird' package(s) announced via the referenced advisory. Vulnerability Insight: Mozilla Firefox and Thunderbird were updated to fix several security issues: * CVE-2011-2365 Miscellaneous memory safety hazards * CVE-2011-2373 Use-after-free vulnerability when viewing XUL document with script disabled * CVE-2011-2377 Memory corruption due to multipart/x-mixed-replace images * CVE-2011-2371 Integer overflow and arbitrary code execution in Array.reduceRight() * CVE-2011-2363 Multiple dangling pointer vulnerabilities * CVE-2011-2362 Cookie isolation error * CVE-2011-2366 Stealing of cross-domain images using WebGL textures * CVE-2011-2368 Multiple WebGL crashes * CVE-2011-2369 XSS encoding hazard with inline SVG * CVE-2011-2370 Non-whitelisted site can trigger xpinstall Vulnerability Impact: remote code execution Affected Software/OS: MozillaFirefox, MozillaThunderbird on openSUSE 11.3, openSUSE 11.4 Solution: Please install the updated package(s). CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2011-0083 Debian Security Information: DSA-2268 (Google Search) http://www.debian.org/security/2011/dsa-2268 Debian Security Information: DSA-2269 (Google Search) http://www.debian.org/security/2011/dsa-2269 Debian Security Information: DSA-2273 (Google Search) http://www.debian.org/security/2011/dsa-2273 http://www.mandriva.com/security/advisories?name=MDVSA-2011:111 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13543 http://www.redhat.com/support/errata/RHSA-2011-0885.html http://www.redhat.com/support/errata/RHSA-2011-0886.html http://www.redhat.com/support/errata/RHSA-2011-0887.html http://www.redhat.com/support/errata/RHSA-2011-0888.html http://secunia.com/advisories/45002 SuSE Security Announcement: SUSE-SA:2011:028 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2011-07/msg00001.html http://www.ubuntu.com/usn/USN-1149-1 Common Vulnerability Exposure (CVE) ID: CVE-2011-0085 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14432 Common Vulnerability Exposure (CVE) ID: CVE-2011-2362 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13693 Common Vulnerability Exposure (CVE) ID: CVE-2011-2363 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14046 Common Vulnerability Exposure (CVE) ID: CVE-2011-2364 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13318 Common Vulnerability Exposure (CVE) ID: CVE-2011-2365 BugTraq ID: 48368 http://www.securityfocus.com/bid/48368 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14184 Common Vulnerability Exposure (CVE) ID: CVE-2011-2366 http://www.contextis.co.uk/resources/blog/webgl/ http://lists.whatwg.org/pipermail/whatwg-whatwg.org/2011-March/030882.html https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14221 Common Vulnerability Exposure (CVE) ID: CVE-2011-2367 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14302 Common Vulnerability Exposure (CVE) ID: CVE-2011-2368 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13912 Common Vulnerability Exposure (CVE) ID: CVE-2011-2369 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14426 Common Vulnerability Exposure (CVE) ID: CVE-2011-2370 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14278 Common Vulnerability Exposure (CVE) ID: CVE-2011-2371 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13987 http://securityreason.com/securityalert/8472 Common Vulnerability Exposure (CVE) ID: CVE-2011-2373 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14178 XForce ISS Database: thunderbird-xul-code-exec(68133) https://exchange.xforce.ibmcloud.com/vulnerabilities/68133 Common Vulnerability Exposure (CVE) ID: CVE-2011-2374 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14123 XForce ISS Database: thunderbird-memory-ce(68128) https://exchange.xforce.ibmcloud.com/vulnerabilities/68128 Common Vulnerability Exposure (CVE) ID: CVE-2011-2376 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14396 Common Vulnerability Exposure (CVE) ID: CVE-2011-2377 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A13872
Copyright	Copyright (C) 2011 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.