Lucene search

K
openvasCopyright (C) 2021 Greenbone AGOPENVAS:13614125623121201440
HistoryNov 11, 2021 - 12:00 a.m.

Mozilla Firefox Security Advisory (MFSA2014-40) - Deprecated

2021-11-1100:00:00
Copyright (C) 2021 Greenbone AG
plugins.openvas.org
6
security update
mozilla firefox
deprecated
functional
vulnerable package
security researcher
addressbar suppression
android
script
phishing attacks
update
vendorfix
executable version unreliable

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

70.0%

This host is missing a security update for Mozilla Firefox.

This VT has been deprecated and is therefore no longer functional.

# SPDX-FileCopyrightText: 2021 Greenbone AG
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-only

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.2.1.2014.40");
  script_cve_id("CVE-2014-1527");
  script_tag(name:"creation_date", value:"2021-11-11 09:42:47 +0000 (Thu, 11 Nov 2021)");
  script_version("2024-04-04T05:05:25+0000");
  script_tag(name:"last_modification", value:"2024-04-04 05:05:25 +0000 (Thu, 04 Apr 2024)");
  script_tag(name:"cvss_base", value:"5.0");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:L/Au:N/C:N/I:P/A:N");

  script_name("Mozilla Firefox Security Advisory (MFSA2014-40) - Deprecated");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2021 Greenbone AG");
  script_family("General");

  script_xref(name:"Advisory-ID", value:"MFSA2014-40");
  script_xref(name:"URL", value:"https://www.mozilla.org/en-US/security/advisories/mfsa2014-40/");
  script_xref(name:"URL", value:"https://bugzilla.mozilla.org/show_bug.cgi?id=960146");

  script_tag(name:"summary", value:"This host is missing a security update for Mozilla Firefox.

  This VT has been deprecated and is therefore no longer functional.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"Firefox for Android addressbar suppression
Security researcher Juho Nurminen reported that on Firefox
for Android, when the addressbar has been scrolled off screen, an attacker can
prevent it from rendering again through the use of script interacting DOM
events. This allows an attacker to present a fake addressbar to the user,
possibly leading to successful phishing attacks.");

  script_tag(name:"affected", value:"Firefox version(s) below 29.");

  script_tag(name:"solution", value:"The vendor has released an update. Please see the reference(s) for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version_unreliable");

  script_tag(name:"deprecated", value:TRUE);

  exit(0);
}

exit(66);

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

9.6

Confidence

High

EPSS

0.003

Percentile

70.0%