Multiple Vulnerabilities in Mozilla Firefox 2.0.x

 firefoxMozilla Firefox Multiple Vulnerabilities

Multiple vulnerabilities been found in  Mozilla Firefox 2.0.x by secunia security analyses.

Secunia Advisory:

SA26095

 

Release Date:

2007-07-18

 

Critical:

Highly critical

Impact:

Cross Site Scripting
Spoofing
DoS
System access

Where:

From remote

Solution Status:

Vendor Patch

 

Software:

Mozilla Firefox 2.0.x

 

CVE reference:

CVE-2007-3734 (Secunia mirror)
CVE-2007-3735 (Secunia mirror)
CVE-2007-3736 (Secunia mirror)
CVE-2007-3737 (Secunia mirror)
CVE-2007-3738 (Secunia mirror)
CVE-2007-3089 (Secunia mirror)

 

Description:
Some vulnerabilities have been reported in Mozilla Firefox, which can be exploited by malicious people to conduct spoofing and cross-site scripting attacks and potentially to compromise a user’s system.

1) Various errors in the browser engine can be exploited to cause memory corruption and potentially to execute arbitrary code.

2) Various errors in the Javascript engine can be exploited to cause memory corruption and potentially to execute arbitrary code.

3) An error in the “addEventListener” and “setTimeout” methods can be exploited to inject script into another site’s context, circumventing the browser’s same-origin policy.

4) An error in the cross-domain handling can be exploited to inject arbitrary HTML and script code in a sub-frame of another web site.

This is related to vulnerability #5 in:SA21906

5) An unspecified error in the handling of elements outside of documents allows an attacker to call an event handler and execute arbitrary code with chrome privileges.

6) An unspecified error in the handling of “XPCNativeWrapper” can lead to execution of user-supplied code.

Secunia has constructed the Secunia Software Inspector, which you can use to check if your system is vulnerable:http://secunia.com/software_inspector/

Solution:

firefox2.0.0.5
Update to version 2.0.0.5-Download Firefox – Free 2.0.0.5 for Windows, English (5.7MB)

Get free from Multiple vulnerabilities by secunia advisory, yup a better solution….
 

Advertisements

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s