最新上游　Firefox 43　的更新

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端主機受到 GLSA-201512-10 中所述的弱點影響 (Mozilla 產品：多個弱點)

在 Mozilla Firefox 和 Mozilla Thunderbird 中發現多個弱點。如需詳細資訊，請檢閱以下提及的 CVE 識別碼。
 影響：

遠端攻擊者可引誘使用者檢視特製的網頁或電子郵件，進而可能導致執行任意程式碼或拒絕服務情況。
 因應措施：

目前尚無已知的因應措施。

The version of Firefox is prior to 43.0 and is affected by multiple vulnerabilities : 

 - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues by convincing a user to visit a specially crafted web page, resulting in the execution of arbitrary code. (CVE-2015-7201) 
 - Multiple unspecified memory corruption issues exist due to improper validation of user-supplied input. A remote attacker can exploit these issues by convincing a user to visit a specially crafted web page, resulting in the execution of arbitrary code. (CVE-2015-7202) 
 - An overflow condition exists in the 'LoadFontFamilyData()' function due to improper validation of user-supplied input. A remote attacker can exploit this to cause a buffer overflow, resulting in the execution of arbitrary code. (CVE-2015-7203) 
 - A flaw exists in the 'PropertyWriteNeedsTypeBarrier()' function due to improper handling of unboxed objects during JavaScript variable assignments. A remote attacker can exploit this to execute arbitrary code. (CVE-2015-7204) 
 - A flaw exists in the 'RtpHeaderParser::Parse()' function due to improper handling of RTP headers. An unauthenticated, remote attacker can exploit this, via specially crafted RTP headers, to execute arbitrary code. (CVE-2015-7205) 
 - A same-origin bypass vulnerability exists that is triggered after a redirect when the function is used alongside an iframe to host a page. An attacker can exploit this to gain access to cross-origin URL information. (CVE-2015-7207) 
 - The 'SetCookieInternal()' function improperly allows control characters (e.g. ASCII code 11) to be inserted into cookies. An attacker can exploit this to inject cookies. (CVE-2015-7208) 
 - A use-after-free error exists due to improper prevention of datachannel operations on closed PeerConnections. An attacker can exploit this to dereference already freed memory, resulting in the execution of arbitrary code. (CVE-2015-7210) 
 - A flaw exists in the 'ParseURI()' function due to improper handling of a hash (#) character in the 'data:' URI. An attacker can exploit this to spoof the URL bar. (CVE-2015-7211) 
 - An overflow condition exists in the 'AllocateForSurface()' function due to improper validation of user-supplied input when handling texture allocation in graphics operations. An attacker can exploit this to execute arbitrary code. (CVE-2015-7212) 
 - An integer overflow condition exists in the 'readMetaData()' function due to improper validation of user-supplied input when handling a specially crafted MP4 file. An attacker can exploit this to execute arbitrary code. (CVE-2015-7213) 
 - A same-origin bypass vulnerability exists due to improper handling of 'data:' and 'view-source:' URIs. An attacker can exploit this to read data from cross-site URLs and local files. (CVE-2015-7214) 
 - An information disclosure vulnerability exists due to improper handling of error events in web workers. An attacker can exploit this to gain access to sensitive cross-origin information. (CVE-2015-7215) 
 - The gdk-pixbuf configuration on Linux GNOME platforms incorrectly enables the JasPer decoder, which allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted JPEG 2000 image. (CVE-2015-7216) 
 - The gdk-pixbuf configuration on Linux GNOME platforms incorrectly enables the TGA decoder, which allows remote attackers to cause a denial of service (heap-based buffer overflow) via a crafted Truevision TGA image. (CVE-2015-7217) 
 - Multiple integer underflow conditions exist due to improper validation of user-supplied input when handling HTTP2 frames. An attacker can exploit these to crash the application, resulting in a denial of service. (CVE-2015-7218, CVE-2015-7219) 
 - An overflow condition exists in the 'XDRBuffer::grow()' function due to improper validation of user-supplied input. An attacker can exploit this to cause a buffer overflow, resulting in the execution of arbitrary code. (CVE-2015-7220) 
 - An overflow condition exists in the 'GrowCapacity()' function due to improper validation of user-supplied input. An attacker can exploit this to cause a buffer overflow, resulting in the execution of arbitrary code. (CVE-2015-7221) 
 - An integer underflow condition exists in the bundled version of libstagefright in the 'parseChunk()' function that is triggered when handling 'covr' chunks. An unauthenticated, remote attacker can exploit this, via specially crafted media content, to crash the application or execute arbitrary code. (CVE-2015-7222) 
 - A privilege escalation vulnerability exists in the Extension.jsm script due to a failure to restrict WebExtension APIs from being injected into documents without WebExtension principals. An attacker can exploit this to conduct a cross-site scripting attack, resulting in the execution of arbitrary script code in a user's browser session. (CVE-2015-7223)

ID	名前	製品	ファミリー	公開日	更新日	深刻度
89241	Fedora 23：firefox-43.0-1.fc23 (2015-51b1105902)	Nessus	Fedora Local Security Checks	2016/3/4	2021/1/11	critical
87710	GLSA-201512-10：Mozilla 產品：多個弱點 (Bar Mitzvah) (Logjam)	Nessus	Gentoo Local Security Checks	2016/1/4	2022/12/5	critical
9058	Mozilla Firefox < 43.0 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2016/1/27	2019/3/6	critical

検出

プラグインの検索

critical

critical

critical