Debian DSA-2313-1 : iceweasel - several vulnerabilities

critical Nessus プラグイン ID 56340
New! Vulnerability Priority Rating (VPR)

Tenable では、すべての脆弱性に対して動的な VPR が計算されます。VPR は脆弱性の情報を、脅威インテリジェンスや機械学習アルゴリズムと組み合わせて、攻撃時に最も悪用される可能性の高い脆弱性を予測します。詳細は、 「VPR とは何で、CVSS とはどう違うのか」を参照してください。

VPR スコア : 5.9

概要

The remote Debian host is missing a security-related update.

説明

Several vulnerabilities have been found in Iceweasel, a web browser based on Firefox :

- CVE-2011-2372 Mariusz Mlynski discovered that websites could open a download dialog -- which has 'open' as the default action --, while a user presses the ENTER key.

- CVE-2011-2995 Benjamin Smedberg, Bob Clary and Jesse Ruderman discovered crashes in the rendering engine, which could lead to the execution of arbitrary code.

- CVE-2011-2998 Mark Kaplan discovered an integer underflow in the JavaScript engine, which could lead to the execution of arbitrary code.

- CVE-2011-2999 Boris Zbarsky discovered that incorrect handling of the window.location object could lead to bypasses of the same-origin policy.

- CVE-2011-3000 Ian Graham discovered that multiple Location headers might lead to CRLF injection.

ソリューション

Upgrade the iceweasel packages.

For the oldstable distribution (lenny), this problem has been fixed in version 1.9.0.19-14 of the xulrunner source package. This update also marks the compromised DigiNotar root certs as revoked rather then untrusted.

For the stable distribution (squeeze), this problem has been fixed in version 3.5.16-10. This update also marks the compromised DigiNotar root certs as revoked rather then untrusted.

関連情報

https://security-tracker.debian.org/tracker/CVE-2011-2372

https://security-tracker.debian.org/tracker/CVE-2011-2995

https://security-tracker.debian.org/tracker/CVE-2011-2998

https://security-tracker.debian.org/tracker/CVE-2011-2999

https://security-tracker.debian.org/tracker/CVE-2011-3000

https://packages.debian.org/source/squeeze/iceweasel

https://www.debian.org/security/2011/dsa-2313

プラグインの詳細

深刻度: Critical

ID: 56340

ファイル名: debian_DSA-2313.nasl

バージョン: 1.17

タイプ: local

エージェント: unix

公開日: 2011/9/30

更新日: 2021/1/11

依存関係: ssh_get_info.nasl

リスク情報

リスクファクター: Critical

VPR スコア: 5.9

CVSS v2.0

Base Score: 10

Temporal Score: 7.4

ベクトル: AV:N/AC:L/Au:N/C:C/I:C/A:C

現状ベクトル: E:U/RL:OF/RC:C

脆弱性の情報

CPE: p-cpe:/a:debian:debian_linux:iceweasel, cpe:/o:debian:debian_linux:5.0, cpe:/o:debian:debian_linux:6.0

必要な KB アイテム: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l

エクスプロイトの容易さ: No known exploits are available

パッチ公開日: 2011/9/29

参照情報

CVE: CVE-2011-2372, CVE-2011-2995, CVE-2011-2998, CVE-2011-2999, CVE-2011-3000

BID: 49809, 49810, 49811, 49848

DSA: 2313