The host is installed with Firefox browser and is prone to multiple vulnerabilities.

Successful exploitation allows attackers to cause Denial of Service and conduct cross site scripting attacks. Impact Level: Application.

Upgrade to Firefox version 3.6.2, For updates refer to http://www.mozilla.com/en-US/firefox/all.html

The multiple flaws are due to: - An use-after-free error in the 'imgContainer::InternalAddFrameHelper' function in 'src/imgContainer.cpp' in 'libpr0n' allows to cause denial of service via a multipart/x-mixed-replace animation. - An error in 'TraceRecorder::traverseScopeChain()' wthin 'js/src/jstracer.cpp' allows to cause a memory corruption via vectors involving certain indirect calls to the JavaScript eval function. - An error while offering plugins in expected window which allows to conduct cross site scripting attacks via vectors that are specific to each affected plugin.

Firefox version 3.6 before 3.6.2 on Windows.

• http://www.mozilla.org/security/announce/2010/mfsa2010-09.html
• http://www.mozilla.org/security/announce/2010/mfsa2010-10.html
• http://www.mozilla.org/security/announce/2010/mfsa2010-11.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=547143

---

Updated on 2015-03-25