Lucene search

K
openvasCopyright (C) 2010 Greenbone AGOPENVAS:1361412562310801469
HistoryOct 28, 2010 - 12:00 a.m.

Mozilla Products Unspecified Vulnerability (MFSA2010-64, CVE-2010-3174) - Windows

2010-10-2800:00:00
Copyright (C) 2010 Greenbone AG
plugins.openvas.org
32

9.5 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.068 Low

EPSS

Percentile

93.8%

Mozilla Firefox/Seamonkey/Thunderbird is prone to an unspecified vulnerability.

# SPDX-FileCopyrightText: 2010 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.801469");
  script_version("2024-02-23T14:36:45+0000");
  script_tag(name:"last_modification", value:"2024-02-23 14:36:45 +0000 (Fri, 23 Feb 2024)");
  script_tag(name:"creation_date", value:"2010-10-28 11:50:37 +0200 (Thu, 28 Oct 2010)");
  script_cve_id("CVE-2010-3174");
  script_tag(name:"cvss_base", value:"9.3");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_name("Mozilla Products Unspecified Vulnerability (MFSA2010-64, CVE-2010-3174) - Windows");

  script_xref(name:"URL", value:"http://www.mozilla.org/security/announce/2010/mfsa2010-64.html");

  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2010 Greenbone AG");
  script_family("General");
  script_dependencies("gb_firefox_detect_portable_win.nasl", "gb_thunderbird_detect_portable_win.nasl",
                      "gb_seamonkey_detect_win.nasl");
  script_mandatory_keys("Mozilla/Firefox_or_Seamonkey_or_Thunderbird/Installed");

  script_tag(name:"impact", value:"Successful exploitation will let attackers to cause a denial of service
  or execute arbitrary code.");

  script_tag(name:"affected", value:"SeaMonkey version before 2.0.9

  Thunderbird version before 3.0.9

  Firefox version 3.5.x before 3.5.14");

  script_tag(name:"insight", value:"The flaw is due to an unspecified vulnerability in the browser engine.");

  script_tag(name:"summary", value:"Mozilla Firefox/Seamonkey/Thunderbird is prone to an unspecified vulnerability.");

  script_tag(name:"solution", value:"Upgrade to Firefox version 3.5.14 or later

  Upgrade to Thunderbird version 3.0.9 or later

  Upgrade to Seamonkey version 2.0.9 or later");

  script_tag(name:"qod_type", value:"registry");
  script_tag(name:"solution_type", value:"VendorFix");

  exit(0);
}

include("version_func.inc");

ffVer = get_kb_item("Firefox/Win/Ver");
if(ffVer)
{
  if(version_in_range(version:ffVer, test_version:"3.5.0", test_version2:"3.5.13"))
  {
    report = report_fixed_ver(installed_version:ffVer, vulnerable_range:"3.5.0 - 3.5.13");
    security_message(port: 0, data: report);
    exit(0);
  }
}

smVer = get_kb_item("Seamonkey/Win/Ver");
if(smVer)
{
  if(version_is_less(version:smVer, test_version:"2.0.9"))
  {
    report = report_fixed_ver(installed_version:smVer, fixed_version:"2.0.9");
    security_message(port: 0, data: report);
    exit(0);
  }
}

tbVer = get_kb_item("Thunderbird/Win/Ver");
if(tbVer)
{
  if(version_is_less(version:tbVer, test_version:"3.0.9")){
    report = report_fixed_ver(installed_version:tbVer, fixed_version:"3.0.9");
    security_message(port: 0, data: report);
  }
}

9.5 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.068 Low

EPSS

Percentile

93.8%