Test ID:	1.3.6.1.4.1.25623.1.2.1.2016.47
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2016-47) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: Write to invalid HashMap entry through JavaScript.watch() The CESG, the Information Security Arm of GCHQ, reported that the JavaScript .watch() method could be used to overflow the 32-bit generation count of the underlying HashMap, resulting in a write to an invalid entry. Under the right conditions this write could lead to arbitrary code execution. The overflow takes considerable time and a malicious page would require a user to keep it open for the duration of the attack. Affected Software/OS: Firefox version(s) below 46. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 5.1 CVSS Vector: AV:N/AC:H/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-2808 Debian Security Information: DSA-3559 (Google Search) http://www.debian.org/security/2016/dsa-3559 https://security.gentoo.org/glsa/201701-15 RedHat Security Advisories: RHSA-2016:0695 http://rhn.redhat.com/errata/RHSA-2016-0695.html http://www.securitytracker.com/id/1035692 SuSE Security Announcement: SUSE-SU-2016:1258 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00023.html SuSE Security Announcement: SUSE-SU-2016:1352 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00054.html SuSE Security Announcement: SUSE-SU-2016:1374 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00057.html SuSE Security Announcement: openSUSE-SU-2016:1211 (Google Search) http://lists.opensuse.org/opensuse-security-announce/2016-05/msg00005.html SuSE Security Announcement: openSUSE-SU-2016:1251 (Google Search) http://lists.opensuse.org/opensuse-updates/2016-05/msg00038.html http://www.ubuntu.com/usn/USN-2936-1 http://www.ubuntu.com/usn/USN-2936-2 http://www.ubuntu.com/usn/USN-2936-3
Copyright	Copyright (C) 2021 Greenbone Networks GmbH

This is only one of 146377 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.