Anfälligkeitssuche        Suche in 324607 CVE Beschreibungen
und 146377 Test Beschreibungen,
Zugriff auf 10,000+ Quellverweise.
Tests   CVE   Alle  

Test Kennung:1.3.6.1.4.1.25623.1.0.805514
Kategorie:Privilege escalation
Titel:Mozilla Firefox SVG Navigation Privilege Escalation Vulnerability (Mar 2015) - Windows
Zusammenfassung:Mozilla Firefox is prone to a privilege escalation vulnerability.
Beschreibung:Summary:
Mozilla Firefox is prone to a privilege escalation vulnerability.

Vulnerability Insight:
The flaw exists due to an error in
docshell/base/nsDocShell.cpp within the SVG format content navigation
functionality.

Vulnerability Impact:
Successful exploitation will allow remote
attackers to gain elevated privileges and execute arbitrary scripts with the
elevated privileges.

Affected Software/OS:
Mozilla Firefox before version 36.0.4 on
Windows

Solution:
Upgrade to Mozilla Firefox version 36.0.4
or later.

CVSS Score:
7.5

CVSS Vector:
AV:N/AC:L/Au:N/C:P/I:P/A:P

Querverweis: Common Vulnerability Exposure (CVE) ID: CVE-2015-0818
BugTraq ID: 73265
http://www.securityfocus.com/bid/73265
Debian Security Information: DSA-3201 (Google Search)
http://www.debian.org/security/2015/dsa-3201
https://security.gentoo.org/glsa/201504-01
RedHat Security Advisories: RHSA-2015:0718
http://rhn.redhat.com/errata/RHSA-2015-0718.html
http://www.securitytracker.com/id/1031959
SuSE Security Announcement: SUSE-SU-2015:0593 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html
SuSE Security Announcement: SUSE-SU-2015:0630 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html
SuSE Security Announcement: openSUSE-SU-2015:0567 (Google Search)
http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html
SuSE Security Announcement: openSUSE-SU-2015:0636 (Google Search)
http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html
http://www.ubuntu.com/usn/USN-2538-1
CopyrightCopyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus.

Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.




© 1998-2025 E-Soft Inc. Alle Rechte vorbehalten.