Tenable5579.PRMMozilla Firefox < 3.5.10 Multiple Vulnerabilities
Versions of Firefox earlier than 3.5.10 are potentially affected by multiple vulnerabilities :
-
A re-use of a freed object due to scope confusion. (MFSA 2010-25)
-
Multiple crashes can result in code execution. (MFSA 2010-26)
-
A use-after-free error in nsCycleCollector::MarkRoots(). (MFSA 2010-27)
-
Freed object reuse across plugin instances. (MFSA 2010-28)
-
A heap buffer overflow in nsGenericDOMDataNode::SetTextInternal. (MFSA 2010-29)
-
An integer overflow in XSLT node sorting. (MFSA 2010-30)
The focus() behavior can be used to inject or steal keystrokes. (MFSA 2010-31) -
The ‘Content-Disposition: attachment’ HTTP header is ignored when ‘Content-Type: multipart’ is also present. (MFSA 2010-32)
It is possible to reverse engineer the value used to seed Math.random(). (MFSA 2008-33)
Binary data 5579.prmReferences
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-0183
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1121
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1201
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203
www.mozilla.org/security/announce/2010/mfsa2010-25.html
www.mozilla.org/security/announce/2010/mfsa2010-26.html
www.mozilla.org/security/announce/2010/mfsa2010-27.html
www.mozilla.org/security/announce/2010/mfsa2010-28.html
www.mozilla.org/security/announce/2010/mfsa2010-29.html
www.mozilla.org/security/announce/2010/mfsa2010-30.html
www.mozilla.org/security/announce/2010/mfsa2010-31.html
www.mozilla.org/security/announce/2010/mfsa2010-32.html
www.mozilla.org/security/announce/2010/mfsa2010-33.html
www.mozilla.org/security/known-vulnerabilities/firefox35.html#firefox3.5.10