Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable6307.PRM
HistoryFeb 07, 2012 - 12:00 a.m.

Mozilla Firefox 3.6.x < 3.6.26 Multiple Vulnerabilities

2012-02-0700:00:00
Tenable
www.tenable.com
12

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.898

Percentile

98.8%

JSON

The remote host has a web browser installed that is vulnerable to multiple attack vectors.

Versions of Firefox 3.6.x earlier than 3.6.26 are potentially affected by the following security issues :

  • A use-after-free error exists related to removed nsDOMAttribute child nodes. (CVE-2011-3659)
  • The IPv6 literal syntax in web addresses is not being properly enforced. (CVE-2011-3670)
  • Various memory safety issues exist. (CVE-2012-0442)
  • Memory corruption errors exist related to the decoding of Ogg Vorbis files and processing of malformed XSLT stylesheets. (CVE-2012-0444, CVE-2012-0449)
Binary data 6307.prm

Related

nessus 58
openvas 71
redhat 4
suse 3
centos 5
oraclelinux 4
ubuntu 6
osv 3
debian 3
securityvulns 7
freebsd 1
cve 3
veracode 3
saint 4
cvelist 4
prion 3
ubuntucve 3
exploitdb 1
zdt 1
mozilla 3
nvd 5
metasploit 1
packetstorm 1
zdi 2
nessus
nessus
SuSE 11.1 Security Update : Mozilla XULrunner (SAT Patch Number 5764)
2012-02-10 00:00:00
Ubuntu 10.04 LTS / 10.10 / 11.04 : thunderbird vulnerabilities (USN-1350-1)
2012-02-09 00:00:00
Scientific Linux Security Update : firefox on SL4.x, SL5.x, SL6.x i386/x86_64 (20120131)
2012-08-01 00:00:00
openvas
openvas
CentOS Update for firefox CESA-2012:0079 centos5
2012-07-30 00:00:00
Ubuntu Update for xulrunner-1.9.2 USN-1353-1
2012-02-13 00:00:00
Ubuntu: Security Advisory (USN-1350-1)
2012-02-13 00:00:00
redhat
redhat
(RHSA-2012:0079) Critical: firefox security update
2012-01-31 00:00:00
(RHSA-2012:0080) Critical: thunderbird security update
2012-01-31 00:00:00
(RHSA-2012:0085) Critical: thunderbird security update
2012-02-01 00:00:00
suse
suse
Security update for Mozilla Firefox (important)
2012-02-09 19:10:22
Security update for Mozilla XULrunner (important)
2012-02-09 19:07:25
MozillaFirefox: Version 10 (important)
2012-02-09 19:10:49
centos
centos
firefox, xulrunner security update
2012-02-01 03:34:27
thunderbird security update
2012-02-01 11:56:07
thunderbird security update
2012-02-01 12:31:49
oraclelinux
oraclelinux
firefox security update
2012-01-31 00:00:00
thunderbird security update
2012-01-31 00:00:00
thunderbird security update
2012-02-01 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2012-02-08 00:00:00
Xulrunnner vulnerabilities
2012-02-08 00:00:00
Mozvoikko update
2012-02-03 00:00:00
osv
osv
iceweasel - several
2012-02-02 00:00:00
iceape - several
2012-02-02 00:00:00
icedove - several
2012-02-09 00:00:00
debian
debian
[SECURITY] [DSA 2400-1] iceweasel security update
2012-02-02 19:52:15
[SECURITY] [DSA 2402-1] iceape security update
2012-02-02 19:53:30
[SECURITY] [DSA 2406-1] icedove security update
2012-02-09 12:07:23
securityvulns
securityvulns
Mozilla Firefox / Thunderbird / Seamonkey multiple security vulnerabilities
2012-02-03 00:00:00
Mozilla Foundation Security Advisory 2012-02
2012-02-03 00:00:00
Mozilla Foundation Security Advisory 2012-04
2012-02-03 00:00:00
freebsd
freebsd
mozilla -- multiple vulnerabilities
2012-01-31 00:00:00
cve
cve
CVE-2011-3670
2012-02-01 16:55:00
CVE-2011-3659
2012-02-01 16:55:00
CVE-2012-0449
2012-02-01 16:55:01
veracode
veracode
Arbitrary Code Execution
2020-04-10 01:07:17
Arbitrary Code Execution
2020-04-10 01:07:21
Information Disclosure
2020-04-10 01:07:18
saint
saint
Firefox AttributeChildRemoved Use After Free
2012-05-21 00:00:00
Firefox AttributeChildRemoved Use After Free
2012-05-21 00:00:00
Firefox AttributeChildRemoved Use After Free
2012-05-21 00:00:00
cvelist
cvelist
CVE-2012-0449
2012-02-01 16:00:00
CVE-2011-3670
2012-02-01 16:00:00
CVE-2011-3659
2012-02-01 16:00:00
prion
prion
Memory corruption
2012-02-01 16:55:00
Design/Logic Flaw
2012-02-01 16:55:00
Information disclosure
2012-02-01 16:55:00
ubuntucve
ubuntucve
CVE-2011-3659
2012-02-01 00:00:00
CVE-2012-0449
2012-02-01 00:00:00
CVE-2011-3670
2012-02-01 00:00:00
exploitdb
exploitdb
Mozilla Firefox 8/9 - &#039;AttributeChildRemoved()&#039; Use-After-Free (Metasploit)
2012-05-13 00:00:00
zdt
zdt
Firefox 8/9 AttributeChildRemoved() Use-After-Free
2012-05-13 00:00:00
mozilla
mozilla
Crash with malformed embedded XSLT stylesheets — Mozilla
2012-01-31 00:00:00
Overly permissive IPv6 literal syntax — Mozilla
2012-01-31 00:00:00
Child nodes from nsDOMAttribute still accessible after removal of nodes — Mozilla
2012-01-31 00:00:00
nvd
nvd
CVE-2012-0449
2012-02-01 16:55:01
CVE-2011-3659
2012-02-01 16:55:00
CVE-2012-0444
2012-02-01 16:55:01
metasploit
metasploit
Firefox 8/9 AttributeChildRemoved() Use-After-Free
2012-05-13 09:31:46
packetstorm
packetstorm
Firefox 8/9 AttributeChildRemoved() Use-After-Free
2012-05-14 00:00:00
zdi
zdi
Mozilla Firefox AttributeChildRemoved Use-After-Free Remote Code Execution Vulnerability
2012-06-28 00:00:00
Mozilla Firefox Ogg Vorbis Decoding Memory Corruption Remote Code Execution Vulnerability
2012-04-09 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.898

Percentile

98.8%

JSON
Related for 6307.PRM
nessus58openvas71redhat4suse3centos5oraclelinux4ubuntu6osv3debian3securityvulns7freebsd1cve3veracode3saint4cvelist4prion3ubuntucve3exploitdb1zdt1mozilla3nvd5metasploit1packetstorm1zdi2