The host is installed with Mozilla Firefox/Seamonkey and is prone to multiple vulnerabilities.

Successful exploitation will let attackers to to cause a denial of service or execute arbitrary code. Impact Level: Application

Upgrade to Firefox version 3.5.10, 3.6.4 http://www.mozilla.com/en-US/firefox/all.html Upgrade to Seamonkey version 2.0.5 http://www.seamonkey-project.org/releases/

The flaws are due to: - Use-after-free vulnerability exists in the application, which allows attackers to execute arbitrary code via multiple plugin instances. - Error in the handling of HTTP headers, which does not properly handle situations in which both 'Content-Disposition: attachment' and 'Content-Type: multipart' are present in HTTP headers, which allows attackers to conduct cross-site scripting (XSS) attacks via an uploaded HTML document.

Seamonkey version prior to 2.0.5, Firefox version 3.5.x before 3.5.10 and 3.6.x before 3.6.4

• http://www.mozilla.org/security/announce/2010/mfsa2010-28.html
• http://www.mozilla.org/security/announce/2010/mfsa2010-32.html

---

Updated on 2015-03-25