Test Kennung:	1.3.6.1.4.1.25623.1.0.805516
Kategorie:	Privilege escalation
Titel:	Mozilla Firefox ESR SVG Privilege Escalation Vulnerability (Mar 2015) - Windows
Zusammenfassung:	Mozilla Firefox ESR is prone to a privilege escalation vulnerability.
Beschreibung:	Summary: Mozilla Firefox ESR is prone to a privilege escalation vulnerability. Vulnerability Insight: The flaw exists due to an error in docshell/base/nsDocShell.cpp within the SVG format content navigation functionality. Vulnerability Impact: Successful exploitation will allow remote attackers to gain elevated privileges and execute arbitrary scripts with the elevated privileges. Affected Software/OS: Mozilla Firefox ESR 31.x before 31.5.3 on Windows Solution: Upgrade to Mozilla Firefox ESR version 31.5.3 or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2015-0818 BugTraq ID: 73265 http://www.securityfocus.com/bid/73265 Debian Security Information: DSA-3201 (Google Search) http://www.debian.org/security/2015/dsa-3201 https://security.gentoo.org/glsa/201504-01 RedHat Security Advisories: RHSA-2015:0718 http://rhn.redhat.com/errata/RHSA-2015-0718.html http://www.securitytracker.com/id/1031959 SuSE Security Announcement: SUSE-SU-2015:0593 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00029.html SuSE Security Announcement: SUSE-SU-2015:0630 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00035.html SuSE Security Announcement: openSUSE-SU-2015:0567 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2015-03/msg00026.html SuSE Security Announcement: openSUSE-SU-2015:0636 (Google Search) http://lists.opensuse.org/opensuse-updates/2015-03/msg00096.html http://www.ubuntu.com/usn/USN-2538-1
Copyright	Copyright (C) 2015 Greenbone AG

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.