This host is installed with Mozilla Firefox and is prone to multiple vulnerabilities.

Successful exploitation will allow attackers to conduct spoofing attacks, disclose potentially sensitive information, bypass certain security restrictions, and compromise a user's system. Impact Level: System/Application

Upgrade to Mozilla Firefox version 28.0 or later, For updates refer to http://www.mozilla.com/en-US/firefox/all.html

Multiple flaws are due to, - Local users can gain privileges by modifying the extracted Mar contents during an update. - A boundary error when decoding WAV audio files. - The crypto.generateCRMFRequest method does not properly validate a certain key type. - An error related to certain WebIDL-implemented APIs. - An error when performing polygon rendering in MathML. - The session-restore feature does not consider the Content Security Policy of a data URL. - A timing error when processing SVG format images with filters and displacements. - A use-after-free error when handling garbage collection of TypeObjects under memory pressure. - An error within the TypedArrayObject implementation when handling neutered ArrayBuffer objects. - And some unspecified errors exist.

Mozilla Firefox version before 28.0 on Mac OS X

Get the installed version with the help of detect NVT and check the version is vulnerable or not.

• http://secunia.com/advisories/57500
• http://www.mozilla.org/security/announce/2014/mfsa2014-15.html

---

Updated on 2017-03-28