Summary
The remote host is missing an update to firefox
announced via advisory MDVSA-2009:075.
Solution
To upgrade automatically use MandrakeUpdate or urpmi. The verification of md5 checksums and GPG signatures is performed automatically for you.
https://secure1.securityspace.com/smysecure/catid.html?in=MDVSA-2009:075 http://www.mozilla.org/security/known-vulnerabilities/firefox30.html#firefox3.0.7
Insight
Security vulnerabilities have been discovered and corrected in the latest Mozilla Firefox 3.x, version 3.0.7 (CVE-2009-0040, CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774, CVE-2009-0775, CVE-2009-0776, CVE-2009-0777).
This update provides the latest Mozilla Firefox 3.x to correct these issues.
As Mozilla Firefox 2.x has been phased out, version 3.x is also being provided for Mandriva Linux 2008 Spring.
Additionally some softwares has also been rebuilt against Mozilla Firefox 3.0.7 which should take care of upgrade problems.
Affected: 2008.1, 2009.0
Severity
Classification
-
CVE CVE-2009-0040, CVE-2009-0771, CVE-2009-0772, CVE-2009-0773, CVE-2009-0774, CVE-2009-0775, CVE-2009-0776, CVE-2009-0777 -
CVSS Base Score: 10.0
AV:N/AC:L/Au:N/C:C/I:C/A:C
Related Vulnerabilities