The host is installed with Mozilla Firefox browser and is prone to XSL File Parsing Vulnerability.

Successful exploitation will let the attacker cause remote code execution through a specially crafted malicious XSL file or can cause application termination at runtime. Impact Level: System/Application

Upgrade to Firefox version 3.0.8 http://www.mozilla.com/en-US/firefox/firefox.html

This flaw is due to improper handling of errors encountered when transforming an XML document which can be exploited to cause memory corrpution through a specially crafted XSLT code.

Firefox version 3.0 to 3.0.7 on Linux.

• http://secunia.com/advisories/34471
• http://securitytracker.com/alerts/2009/Mar/1021941.html
• http://www.mozilla.org/security/announce/2009/mfsa2009-12.html

---

Updated on 2017-03-28