| VID |
28866 |
| Severity |
40 |
| Port |
139,445 |
| Protocol |
TCP |
| Class |
SMB |
| Detailed Description |
A version of Mozilla Firefox which is 10.0.x before 10.0.12 has been installed on the host. Mozilla Firefox is an open-source based Web browser, developed by the Mozilla project. Mozilla Firefox 10.0.x before 10.0.12 versions are multiple vulnerable to vulnerability.
- Multiple, unspecified use-after-free, out-of-bounds read and buffer overflow errors exist. (CVE-2013-0761, CVE-2013-0762, CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-0771)
- Two intermediate certificates were improperly issued by TURKTRUST certificate authority. (CVE-2013-0743)
- A use-after-free error exists related to displaying HTML tables with many columns and column groups. (CVE-2013-0744)
- An error exists related to the 'AutoWrapperChanger' class that does not properly manage objects during garbage collection. (CVE-2012-0745)
- An error exists related to 'jsval', 'quickstubs', and compartmental mismatches that could lead to potentially exploitable crashes. (CVE-2013-0746)
- Errors exist related to events in the plugin handler that could allow same-origin policy bypass. (CVE-2013-0747)
- An error related to the 'toString' method of XBL objects could lead to address information leakage. (CVE-2013-0748)
- An unspecified memory corruption issue exists. (CVE-2013-0749, CVE-2013-0769)
- A buffer overflow exists related to JavaScript string concatenation. (CVE-2013-0750)
- An error exists related to multiple XML bindings with SVG content, contained in XBL files. (CVE-2013-0752)
- A use-after-free error exists related to 'XMLSerializer' and 'serializeToStream'. (CVE-2013-0753)
- A use-after-free error exists related to garbage collection and 'ListenManager'. (CVE-2013-0754)
- A use-after-free error exists related to the 'Vibrate' library and 'domDoc'. (CVE-2013-0755)
- A use-after-free error exists related to JavaScript 'Proxy' objects. (CVE-2013-0756)
- 'Chrome Object Wrappers' (COW) can be bypassed by changing object prototypes, which could allow arbitrary code execution. (CVE-2013-0757)
- An error related to SVG elements and plugins could allow privilege escalation. (CVE-2013-0758)
- An error exists related to the address bar that could allow URL spoofing attacks. (CVE-2013-0759)
- An error exists related to SSL and threading that could result in potentially exploitable crashes. (CVE-2013-0764)
- An error exists related to 'Canvas' and bad height or width values passed to it from HTML. (CVE-2013-0768)
Please note the 10.x ESR branch will no longer be supported as of 02/13/2013. Only the 17.x ESR branch will receive security updates after that date.
* Note: This check requires an account with Guest or upper privileges which can access the registry of the remote host to scan. Absence of this condition will result in the check not being performed and a False Negative for all vulnerable hosts.
* References:
http://www.zerodayinitiative.com/advisories/ZDI-13-003/
http://www.zerodayinitiative.com/advisories/ZDI-13-006/
http://www.zerodayinitiative.com/advisories/ZDI-13-037/
http://www.zerodayinitiative.com/advisories/ZDI-13-038/
http://www.zerodayinitiative.com/advisories/ZDI-13-039/
* Platforms Affected:
Mozilla Foundation, Firefox versions prior to 10.0.12
Any operating system Any version |
| Recommendation |
Upgrade to the latest version of Firefox (10.0.12 or later), available from the Mozilla Web site at http://www.mozilla.com/firefox/ |
| Related URL |
CVE-2013-0744,CVE-2013-0745,CVE-2013-0746,CVE-2013-0747,CVE-2013-0748,CVE-2013-0749,CVE-2013-0750,CVE-2013-0752,CVE-2013-0753,CVE-2013-0754 (CVE) |
| Related URL |
57193,57194,57195,57196,57197,57198,57203,57204,57205,57209,57211,57213 (SecurityFocus) |
| Related URL |
(ISS) |
|
