(PVS) Signatures - Tenable Network Security

Description: Synopsis : \n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running a version of Mozilla Firefox earlier than
3.0.19. Such versions are potentially affected by multiple security issues : \n\n - Multiple
crashes can result in arbitrary code execution. (MFSA 2010-16)\n\n - A select event
handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)\n\n -
An error exists in the way '' elements are inserted into a XUL tree ''.
(MFSA 2010-18)\n\n - An error exists in the implementation of the
'windows.navigator.plugins' object. (MFSA 2010-19)\n\n - A browser applet can be used to
turn a simple mouse click into a drag-and-drop action, potentially resulting in the
unintended loading of resources in a user's browser. (MFSA 2010-20)\n\n - The
XMLHttpRequestSpy module in the Firebug add-on exposes an underlying chrome
privilege escalation vulnerability. (MFSA 2010-21)\n\nFor your information, the observed
version of Firefox is: \n %L
Solution: Upgrade to Mozilla Firefox 3.0.19 or later.
CVE-2010-0179
Mozilla Firefox < 3.5.9 Multiple Vulnerabilities
PVS ID: 5494 FAMILY: Web Clients RISK: HIGH NESSUS ID:45393
Description: Synopsis : \n\nThe remote host has a web browser installed that is vulnerable to multiple
attack vectors.\n\nThe remote host is running a version of Mozilla Firefox earlier than
3.5.9. Such versions are potentially affected by multiple security issues : \n\n - Multiple
crashes can result in arbitrary code execution. (MFSA 2010-16)\n\n - A select event
handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)\n\n -
An error exists in the way '' elements are inserted into a XUL tree ''.
(MFSA 2010-18)\n\n - An error exists in the implementation of the
'windows.navigator.plugins' object. (MFSA 2010-19)\n\n - A browser applet can be used to
turn a simple mouse click into a drag-and-drop action, potentially resulting in the
unintended loading of resources in a user's browser. (MFSA 2010-20)\n\n Session
renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext
by a man-in-the-middle. (MFSA 2010-22)\n\n - When an image points to a resource that
redirects to a 'mailto: ' URL, the external mail handler application is launched. (MFSA
2010-23)\n\n - XML documents fail to call certain security checks when loading new
content. (MFSA 2010-24)\n\nFor your information, the observed version of Firefox is: \n
%L \nIAVA Reference : 2011-A-0107\nIAVB Reference : 2012-B-0038\nSTIG Finding
Severity : Category I
Solution: Upgrade to Mozilla Firefox 3.5.9 or later.
CVE-2010-0182
Passive Vulnerability Scanner (PVS) Signatures
Mozilla SeaMonkey < 2.0.4 Multiple Vulnerabilities
PVS ID: 5495 FAMILY: Web Clients RISK: HIGH NESSUS ID:45395
Family Internet Services 1469