This host is installed with Mozilla Firefox and is prone to Chrome Privilege Escalation vulnerability.

Successful exploitation will let attacker to execute arbitrary JavaScript with chrome privileges when certain add-ons are enabled. Impact Level: Application

Upgrade to Firefox version 3.5.2 http://www.mozilla.com/en-US/firefox/all.html

Error in 'nsDocument::SetScriptGlobalObject()' function in 'nsDocument.cpp' in content/base/src/ which does not properly handle a Link HTTP header, which allows remote attackers to execute arbitrary JavaScript with chrome privileges via a crafted web page, related to an incorrect security wrapper.

Firefox version 3.5 before 3.5.2 on Windows.

• http://www.mozilla.org/security/announce/2009/mfsa2009-46.html
• https://bugzilla.mozilla.org/show_bug.cgi?id=498897

---

Updated on 2015-03-25