(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe
installed version of Firefox is earlier than 3.0.13/3.5.0. Such versions are
reportedly potentially affected by the following security issues : \n\n - The browser
can be fooled into trusting a malicious SSL server certificate with a null character
in the host name. (MFSA 2009-42)\n\n - A heap overflow in the code that handles
regular expressions in certificate names can lead to arbitrary code execution.
(MFSA 2009-43)\n\nThe reported version of Firefox is: \n %L
Solution: Upgrade to Firefox 3.5.0/3.0.13 or later.
CVE-2009-2408
Mozilla Firefox < 3.5.2/3.0.12 Multiple Vulnerabilities
PVS ID: 5114 FAMILY: Web Clients RISK: HIGH NESSUS ID:40479
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe installed
version of Mozilla Firefox is earlier than 3.5.2/3.0.12. Such versions are potentially
affected by multiple issues : \n\n - A denial-of-service vulnerability when Firefox receives a
reply from a SOCKS5 proxy which contains a DNS name longer than 15 characters.
(CVE-2009-2470)\n\n - Multiple flaws exist in the 'libvorbis' library could lead to remote
code execution. (CVE-2009-2663)\n\nThe reported version of Mozilla Firefox was: \n %L
Solution: Upgrade to Mozilla Firefox 3.5.2/3.0.12 or later.
CVE-2009-2663
Mozilla Firefox < 3.0.13/3.5.2 Proxy Response DoS
PVS ID: 5115 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis : \n\nThe remote host is vulnerable to multiple attack vectors.\n\nThe installed
version of Firefox is earlier than 3.0.13/3.5.2. Such versions are reportedly affected by
multiple memory corruption vulnerabilities. An attacker could exploit one of these issues to
corrupt memory on the affected host and potentially run arbitrary code in the context of the
user running the affected application. The reported version of Mozilla Firefox was: \n %L
Solution: Upgrade to Mozilla Firefox 3.5.2/3.0.12 or later.
CVE-2009-2664
Mozilla Firefox 3.5 < 3.5.2 Proxy Response DoS
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 5116 FAMILY: Web Clients RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is affected by a privilege escalation vulnerability.\n\nThe
installed version of Mozilla Firefox 3.5 is earlier than 3.5.2. Such versions are potentially
affected by a privilege-escalation vulnerability. The issues exists when the browser with an
add-on implementing a Content Policy opens pages that have a 'Link:' HTTP header. An
attacker can exploit this issue to execute arbitrary JavaScript code with chrome
privileges.\n%L
Family Internet Services 1358