Tenable5580.PRMMozilla Firefox 3.6.x < 3.6.4 Multiple Vulnerabilities
Versions of Firefox 3.6.x prior to 3.6.4 are potentially affected by multiple vulnerabilities :
- Multiple crashes can result in code execution. (MFSA 2010-26)
- Freed object reuse across plugin instances. (MFSA 2010-28)
- A heap buffer overflow in ‘nsGenericDOMDataNode::SetTextInternal’. (MFSA 2010-29)
- An integer overflow in XSLT node sorting. (MFSA 2010-30)
- The ‘focus()’ behavior can be used to inject or steal keystrokes. (MFSA 2010-31)
- The ‘Content-Disposition: attachment’ HTTP header is ignored when ‘Content-Type: multipart’ is also present. (MFSA 2010-32)
- It is possible to reverse engineer the value used to seed ‘Math.random()’. (MFSA 2008-33)
Binary data 5580.prmReferences
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-5913
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1125
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1196
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1197
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1198
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1199
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1200
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1202
cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2010-1203
www.mozilla.org/security/announce/2010/mfsa2010-26.html
www.mozilla.org/security/announce/2010/mfsa2010-28.html
www.mozilla.org/security/announce/2010/mfsa2010-29.html
www.mozilla.org/security/announce/2010/mfsa2010-30.html
www.mozilla.org/security/announce/2010/mfsa2010-31.html
www.mozilla.org/security/announce/2010/mfsa2010-32.html
www.mozilla.org/security/announce/2010/mfsa2010-33.html
www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.4