Карточка уязвимости
Характеристики уязвимости
Уровень опасности
Оценка CVSS
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
Производитель ПО
Наименование ПО
Описание
Уязвимость в Mozilla Firefox и SeaMonkey позволяет злоумышленникам, действующим удаленно, вызвать отказ в обслуживании (аварийное завершение) и, возможно, выполнить произвольный код, используя векторы, связанные с ошибкой при работе с памятью.
Как исправить
Для устранения уязвимости необходимо установить последнюю версию продукта, соответствующую используемой платформе. Необходимую информацию можно получить по адресу:
http://www.mozilla.org/
http://www.mozilla.org/
Ссылки
http://www.mozilla.org/security/announce/2007/mfsa2007-38.html
DEBIAN (DSA-1424): http://www.debian.org/security/2007/dsa-1424
DEBIAN (DSA-1425): http://www.debian.org/security/2007/dsa-1425
REDHAT (RHSA-2007:1082): http://www.redhat.com/support/errata/RHSA-2007-1082.html
REDHAT (RHSA-2007:1084): http://www.redhat.com/support/errata/RHSA-2007-1084.html
SUSE (SUSE-SA:2007:066): http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00004.html
UBUNTU (USN-546-1): http://www.ubuntulinux.org/support/documentation/usn/usn-546-1
UBUNTU (USN-546-2): http://www.ubuntu.com/usn/usn-546-2
BID (26593): http://www.securityfocus.com/bid/26593
FRSIRT (ADV-2007-4002): http://www.frsirt.com/english/advisories/2007/4002
SECTRACK (1018994): http://securitytracker.com/id?1018994
http://bugs.gentoo.org/show_bug.cgi?id=198965
http://bugs.gentoo.org/show_bug.cgi?id=200909
https://issues.rpath.com/browse/RPL-1984
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0260
GENTOO (GLSA-200712-21): http://security.gentoo.org/glsa/glsa-200712-21.xml
MANDRIVA (MDKSA-2007:246): http://www.mandriva.com/security/advisories?name=MDKSA-2007:246
REDHAT (RHSA-2007:1083): http://www.redhat.com/support/errata/RHSA-2007-1083.html
http://browser.netscape.com/releasenotes/
HP (HPSBUX02153): http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
SLACKWARE (SSA:2007-331-01): http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374833
SLACKWARE (SSA:2007-333-01): http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.365006
FRSIRT (ADV-2007-4018): http://www.frsirt.com/english/advisories/2007/4018
FRSIRT (ADV-2008-0083): http://www.frsirt.com/english/advisories/2008/0083
FEDORA (FEDORA-2007-3952): https://www.redhat.com/archives/fedora-package-announce/2007-November/msg01011.html
FEDORA (FEDORA-2007-4098): https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00168.html
FEDORA (FEDORA-2007-4106): https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00135.html
FEDORA (FEDORA-2007-756): https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00115.html
BUGTRAQ (20080212 FLEA-2008-0001-1 firefox): http://www.securityfocus.com/archive/1/archive/1/488002/100/0/threaded
XF (mozilla-multiple-memcorrupt-code-execution(38643)): http://xforce.iss.net/xforce/xfdb/38643
DEBIAN (DSA-1424): http://www.debian.org/security/2007/dsa-1424
DEBIAN (DSA-1425): http://www.debian.org/security/2007/dsa-1425
REDHAT (RHSA-2007:1082): http://www.redhat.com/support/errata/RHSA-2007-1082.html
REDHAT (RHSA-2007:1084): http://www.redhat.com/support/errata/RHSA-2007-1084.html
SUSE (SUSE-SA:2007:066): http://lists.opensuse.org/opensuse-security-announce/2007-12/msg00004.html
UBUNTU (USN-546-1): http://www.ubuntulinux.org/support/documentation/usn/usn-546-1
UBUNTU (USN-546-2): http://www.ubuntu.com/usn/usn-546-2
BID (26593): http://www.securityfocus.com/bid/26593
FRSIRT (ADV-2007-4002): http://www.frsirt.com/english/advisories/2007/4002
SECTRACK (1018994): http://securitytracker.com/id?1018994
http://bugs.gentoo.org/show_bug.cgi?id=198965
http://bugs.gentoo.org/show_bug.cgi?id=200909
https://issues.rpath.com/browse/RPL-1984
http://wiki.rpath.com/wiki/Advisories:rPSA-2007-0260
GENTOO (GLSA-200712-21): http://security.gentoo.org/glsa/glsa-200712-21.xml
MANDRIVA (MDKSA-2007:246): http://www.mandriva.com/security/advisories?name=MDKSA-2007:246
REDHAT (RHSA-2007:1083): http://www.redhat.com/support/errata/RHSA-2007-1083.html
http://browser.netscape.com/releasenotes/
HP (HPSBUX02153): http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=c00771742
SLACKWARE (SSA:2007-331-01): http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.374833
SLACKWARE (SSA:2007-333-01): http://slackware.com/security/viewer.php?l=slackware-security&y=2007&m=slackware-security.365006
FRSIRT (ADV-2007-4018): http://www.frsirt.com/english/advisories/2007/4018
FRSIRT (ADV-2008-0083): http://www.frsirt.com/english/advisories/2008/0083
FEDORA (FEDORA-2007-3952): https://www.redhat.com/archives/fedora-package-announce/2007-November/msg01011.html
FEDORA (FEDORA-2007-4098): https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00168.html
FEDORA (FEDORA-2007-4106): https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00135.html
FEDORA (FEDORA-2007-756): https://www.redhat.com/archives/fedora-package-announce/2007-December/msg00115.html
BUGTRAQ (20080212 FLEA-2008-0001-1 firefox): http://www.securityfocus.com/archive/1/archive/1/488002/100/0/threaded
XF (mozilla-multiple-memcorrupt-code-execution(38643)): http://xforce.iss.net/xforce/xfdb/38643
