The host is installed with Mozilla Firefox and is prone to multiple vulnerabilities.

Successful exploitation will let attackers to conduct cross-site scripting, clickjacking attacks or cause a denial of service or possibly execute arbitrary code. Impact Level: System/Application

Upgrade to Mozilla Firefox version 16.0 or later, For updates refer to http://www.mozilla.com/en-US/firefox/all.html

The flaws are due to - An error while handling navigation away from a web page that has multiple menus of SELECT elements active, which allows remote attackers to conduct clickjacking attacks. - An invalid cast when using the instance of operator on certain types of JavaScript objects. - An error when implementing the HTML5 Same Origin Policy, which allows remote attackers to conduct cross-site scripting (XSS) attacks by leveraging initial-origin access after document.domain has been set.

Mozilla Firefox versions before 16.0 on Windows

• http://secunia.com/advisories/50856
• http://secunia.com/advisories/50935
• http://www.mozilla.org/security/announce/2012/mfsa2012-75.html
• http://www.mozilla.org/security/announce/2012/mfsa2012-76.html
• http://www.mozilla.org/security/announce/2012/mfsa2012-80.html

---

Updated on 2015-03-25