The host is installed with Firefox browser and is prone to multiple Denial of Service vulnerabilities.

A remote, unauthenticated attacker could execute arbitrary code or cause a vulnerable application to crash. Impact Level: System/Application

Upgrade to Firefox version 3.0.14 or later http://www.mozilla.com/en-US/firefox/all.html

- Multiple errors in the browser and JavaScript engines can be exploited to corrupt memory. - The warning dialog displayed when adding or removing security modules via 'pkcs11.addmodule' or 'pkcs11.deletemodule' does not contain enough information. This can be exploited to potentially trick a user into installing a malicious PKCS11 module.

Mozilla Firefox version prior to 3.0.14 on Linux.

• http://secunia.com/advisories/36671/
• http://www.mozilla.org/security/announce/2009/mfsa2009-47.html
• http://www.mozilla.org/security/announce/2009/mfsa2009-48.html

---

Updated on 2015-03-25