Summary
Ubuntu Update for Linux kernel vulnerabilities USN-493-1
Solution
Please Install the Updated Packages.
Insight
A flaw was discovered in handling of "
about:blank"
windows used by
addons. A malicious web site could exploit this to modify the contents, or steal confidential data (such as passwords), of other web pages.
(CVE-2007-3844)
Jesper Johansson discovered that spaces and double-quotes were not correctly handled when launching external programs. In rare configurations, after tricking a user into opening a malicious web page, an attacker could execute helpers with arbitrary arguments with the user's privileges. (CVE-2007-3845)
Affected
firefox vulnerabilities on Ubuntu 6.06 LTS ,
Ubuntu 6.10 ,
Ubuntu 7.04
Severity
Classification
-
CVE CVE-2007-3844, CVE-2007-3845 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities