Test Kennung:	1.3.6.1.4.1.25623.1.2.1.2013.38
Kategorie:	General
Titel:	Mozilla Firefox Security Advisory (MFSA2013-38) - Linux
Zusammenfassung:	This host is missing a security update for Mozilla Firefox.
Beschreibung:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: Cross-site scripting (XSS) using timed history navigations Security researcher Mariusz Mlynski reported a method to use browser navigations through history to load an arbitrary website with that page's baseURI property pointing to another site instead of the seemingly loaded one. The user will continue to see the incorrect site in the addressbar of the browser. This allows for a cross-site scripting (XSS) attack or the theft of data through a phishing attack. Affected Software/OS: Firefox version(s) below 20. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 4.3 CVSS Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2013-0793 BugTraq ID: 58837 http://www.securityfocus.com/bid/58837 Debian Security Information: DSA-2699 (Google Search) http://www.debian.org/security/2013/dsa-2699 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16928 RedHat Security Advisories: RHSA-2013:0696 http://rhn.redhat.com/errata/RHSA-2013-0696.html RedHat Security Advisories: RHSA-2013:0697 http://rhn.redhat.com/errata/RHSA-2013-0697.html SuSE Security Announcement: SUSE-SU-2013:0645 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00013.html SuSE Security Announcement: SUSE-SU-2013:0850 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-05/msg00019.html SuSE Security Announcement: openSUSE-SU-2013:0630 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00009.html SuSE Security Announcement: openSUSE-SU-2013:0631 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2013-04/msg00010.html SuSE Security Announcement: openSUSE-SU-2013:0875 (Google Search) http://lists.opensuse.org/opensuse-updates/2013-06/msg00012.html http://www.ubuntu.com/usn/USN-1791-1
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

Dies ist nur einer von 146377 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.