Lucene search

K
openvasCopyright (C) 2010 Greenbone AGOPENVAS:1361412562310902207
HistoryJul 01, 2010 - 12:00 a.m.

Mozilla Products Unspecified Vulnerability (Jun 2010) - Windows

2010-07-0100:00:00
Copyright (C) 2010 Greenbone AG
plugins.openvas.org
12

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.077 Low

EPSS

Percentile

94.2%

Mozilla Firefox/Seamonkey/Thunderbird is prone to an unspecified vulnerability.

# SPDX-FileCopyrightText: 2010 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.0.902207");
  script_version("2024-02-28T05:05:37+0000");
  script_tag(name:"last_modification", value:"2024-02-28 05:05:37 +0000 (Wed, 28 Feb 2024)");
  script_tag(name:"creation_date", value:"2010-07-01 15:58:11 +0200 (Thu, 01 Jul 2010)");
  script_cve_id("CVE-2010-1201");
  script_tag(name:"cvss_base", value:"9.3");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:C/I:C/A:C");
  script_name("Mozilla Products Unspecified Vulnerability (Jun 2010) - Windows");

  script_xref(name:"URL", value:"https://bugzilla.mozilla.org/show_bug.cgi?id=524921");
  script_xref(name:"URL", value:"http://www.securityfocus.com/bid/41050");
  script_xref(name:"URL", value:"http://www.mozilla.org/security/announce/2010/mfsa2010-26.html");

  script_tag(name:"qod_type", value:"registry");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2010 Greenbone AG");
  script_family("General");
  script_dependencies("gb_firefox_detect_portable_win.nasl", "gb_seamonkey_detect_win.nasl",
                      "gb_thunderbird_detect_portable_win.nasl");
  script_mandatory_keys("Mozilla/Firefox_or_Seamonkey_or_Thunderbird/Installed");

  script_tag(name:"impact", value:"Successful exploitation will let attackers to cause a denial of service
  or execute arbitrary code.");

  script_tag(name:"affected", value:"Seamonkey version prior to 2.0.5,

  Thunderbird version proior to 3.0.5,

  Firefox version 3.5.x before 3.5.10");

  script_tag(name:"insight", value:"The flaw is due to an unspecified error in the browser engine, which allows
  remote attackers to cause a denial of service or execute arbitrary code via unknown vectors.");

  script_tag(name:"summary", value:"Mozilla Firefox/Seamonkey/Thunderbird is prone to an unspecified vulnerability.");

  script_tag(name:"solution", value:"Upgrade to Firefox version 3.5.10,

  Upgrade to Seamonkey version 2.0.5,

  Upgrade to Thunderbird version 3.0.5.");

  script_tag(name:"solution_type", value:"VendorFix");

  exit(0);
}

include("version_func.inc");

ffVer = get_kb_item("Firefox/Win/Ver");
if(ffVer)
{
  if(version_in_range(version:ffVer, test_version:"3.5.0", test_version2:"3.5.9"))
  {
    report = report_fixed_ver(installed_version:ffVer, vulnerable_range:"3.5.0 - 3.5.9");
    security_message(port: 0, data: report);
    exit(0);
  }
}

smVer = get_kb_item("Seamonkey/Win/Ver");
if(smVer != NULL)
{
  if(version_is_less(version:smVer, test_version:"2.0.5"))
  {
    report = report_fixed_ver(installed_version:smVer, fixed_version:"2.0.5");
    security_message(port: 0, data: report);
    exit(0);
  }
}

tbVer = get_kb_item("Thunderbird/Win/Ver");
if(tbVer != NULL)
{
  if(version_is_less(version:tbVer, test_version:"3.0.5")){
    report = report_fixed_ver(installed_version:tbVer, fixed_version:"3.0.5");
    security_message(port: 0, data: report);
  }
}

9.4 High

AI Score

Confidence

High

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.077 Low

EPSS

Percentile

94.2%