The remote host is using a version of Mozilla or Mozilla Thunderbird that is vulnerable to a heap overflow vulnerability. A heap overflow has been reported for the Mozilla POP3 mail handler routines. An attacker controlled POP3 server may be able to execute arbitrary code on the client machine.

The remote host is using Mozilla, a web browser. The remote version of this software contains the following security flaws: 
1) There is a flaw in the way that the browser handles scripting within 'tabbed' cross-domains.  An attacker exploiting this flaw would need to be able to convince a user to click on a malicious URL which would then open a separate 'TAB' within the browser.  The attacker could then retrieve data relevant to other tabbed connections or execute code locally.
2)There is a flaw in the default about: config script that would allow an attacker to modify configuration data.  In order to execute such an attack, the attacker would need to be able to entice the user into visiting or clicking on a malicious URL.  A successful attacker would be able to modify the local configuration file, resulting in enhanced access rights or other potential exploits.  In addition, there are other unconfirmed flaws in Mozilla version 1.7.5 and lower.

The remote host is using a version of Mozilla that is vulnerable to cross-domain frame loading. It may allow an attacker to spoof the interface of a trusted web site. To exploit this vulnerability a victim will need to visit a web site operated by an attacker.

The remote host is using Mozilla, an alternative web browser. The installed version of Mozilla contains various security issues, several of which are critical as they can be easily exploited to execute arbitrary shell code on the remote host.

The remote host is using Mozilla.  The remote version of this software contains various security issues that may allow an attacker to execute arbitrary code on the remote host.

ID	名前	製品	ファミリー	深刻度
801211	Mozilla Browser <1.7.1 / Thunderbird < 0.7.1 SendUIDL POP3 Message Handling Remote Heap Overflow	Log Correlation Engine	Web Clients	medium
801215	Mozilla < 1.7.6 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801228	Mozilla < 1.7.1 Cross-Domain Frame Loading Vulnerability	Log Correlation Engine	Web Clients	medium
801294	Mozilla Browser < 1.7.12 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high
801318	Mozilla Browser < 1.7.8 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	high

検出

プラグインの検索

medium

high

medium

high

high