The host is installed with Mozilla Firefox ESR and is prone to multiple vulnerabilities.

Successful exploitation will let attackers to bypass the Same Origin Policy and read the properties of a Location object via a crafted web site. Impact Level: Application

Upgrade to Mozilla Firefox ESR 10.0.9 or later For updates refer to http://www.mozilla.com/en-US/firefox/all.html

Security wrappers are unwrapped without doing a security check in defaultValue(). This can allow for improper access to the Location object.

Mozilla Firefox ESR versions 10.x before 10.0.9 on Mac OS X

• http://secunia.com/advisories/50856
• http://secunia.com/advisories/50935
• http://www.mozilla.org/security/announce/2012/mfsa2012-89.html

---

Updated on 2015-03-25