Lucene search

K

Mozilla Firefox Security Advisory (MFSA2016-16) - Linux

🗓️ 08 Nov 2021 00:00:00Reported by Copyright (C) 2021 Greenbone Networks GmbHType 
openvas
 openvas
🔗 plugins.openvas.org👁 14 Views

This host is missing a security update for Mozilla Firefo

Show more
Related
Refs
Code
ReporterTitlePublishedViews
Family
Mozilla
Miscellaneous memory safety hazards (rv:45.0 / rv:38.7) — Mozilla
8 Mar 201600:00
mozilla
Debian CVE
CVE-2016-1953
13 Mar 201618:59
debiancve
Debian CVE
CVE-2016-1952
13 Mar 201618:59
debiancve
Prion
Memory corruption
13 Mar 201618:59
prion
Prion
Memory corruption
13 Mar 201618:59
prion
UbuntuCve
CVE-2016-1953
8 Mar 201600:00
ubuntucve
UbuntuCve
CVE-2016-1952
8 Mar 201600:00
ubuntucve
CVE
CVE-2016-1953
13 Mar 201618:59
cve
CVE
CVE-2016-1952
13 Mar 201618:59
cve
NVD
CVE-2016-1953
13 Mar 201618:59
nvd
Rows per page
# Copyright (C) 2021 Greenbone Networks GmbH
# Some text descriptions might be excerpted from (a) referenced
# source(s), and are Copyright (C) by the respective right holder(s).
#
# SPDX-License-Identifier: GPL-2.0-or-later
#
# This program is free software; you can redistribute it and/or
# modify it under the terms of the GNU General Public License
# as published by the Free Software Foundation; either version 2
# of the License, or (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.

CPE = "cpe:/a:mozilla:firefox";

if(description)
{
  script_oid("1.3.6.1.4.1.25623.1.2.1.2016.16");
  script_cve_id("CVE-2016-1952", "CVE-2016-1953");
  script_tag(name:"creation_date", value:"2021-11-08 15:21:25 +0000 (Mon, 08 Nov 2021)");
  script_version("2021-11-08T15:21:25+0000");
  script_tag(name:"last_modification", value:"2021-11-08 15:21:25 +0000 (Mon, 08 Nov 2021)");
  script_tag(name:"cvss_base", value:"6.8");
  script_tag(name:"cvss_base_vector", value:"AV:N/AC:M/Au:N/C:P/I:P/A:P");
  script_tag(name:"severity_vector", value:"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H");
  script_tag(name:"severity_origin", value:"NVD");
  script_tag(name:"severity_date", value:"2019-12-27 15:08:00 +0000 (Fri, 27 Dec 2019)");

  script_name("Mozilla Firefox Security Advisory (MFSA2016-16) - Linux");
  script_category(ACT_GATHER_INFO);
  script_copyright("Copyright (C) 2021 Greenbone Networks GmbH");
  script_family("General");
  script_dependencies("gb_firefox_detect_lin.nasl");
  script_mandatory_keys("mozilla/firefox/linux/detected");

  script_xref(name:"Advisory-ID", value:"MFSA2016-16");
  script_xref(name:"URL", value:"https://www.mozilla.org/en-US/security/advisories/mfsa2016-16/");
  script_xref(name:"URL", value:"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1207958,1245866,1238558,1241731,1199171,1234425,1236519,1238935,1225618,1243555,1243583,1247236,1224361,1224363,1224369,1205163,1248794");
  script_xref(name:"URL", value:"https://bugzilla.mozilla.org/buglist.cgi?bug_id=1221872,1224979,1123661,1242279,1249685,1244250,1244995,1234578,1241217");

  script_tag(name:"summary", value:"This host is missing a security update for Mozilla Firefox.");

  script_tag(name:"vuldetect", value:"Checks if a vulnerable package version is present on the target host.");

  script_tag(name:"insight", value:"Miscellaneous memory safety hazards (rv:45.0 / rv:38.7)
Mozilla developers fixed several memory safety bugs in the browser engine used in
Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory
corruption under certain circumstances, and we presume that with enough effort at least
some of these could be exploited to run arbitrary code.");

  script_tag(name:"affected", value:"Firefox version(s) below 45.");

  script_tag(name:"solution", value:"The vendor has released an update. Please see the reference(s) for more information.");

  script_tag(name:"solution_type", value:"VendorFix");
  script_tag(name:"qod_type", value:"executable_version_unreliable");

  exit(0);
}

include("host_details.inc");
include("version_func.inc");

if (!infos = get_app_version_and_location(cpe: CPE, exit_no_version: TRUE))
  exit(0);

version = infos["version"];
location = infos["location"];

if (version_is_less(version: version, test_version: "45")) {
  report = report_fixed_ver(installed_version: version, fixed_version: "45", install_path: location);
  security_message(port: 0, data: report);
  exit(0);
}

exit(99);

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo
08 Nov 2021 00:00Current
9.4High risk
Vulners AI Score9.4
CVSS26.8
CVSS38.8
EPSS0.017
14
.json
Report