CERTA-2005-AVI-256
Vulnerability from certfr_avis - Published: 2005-07-13 - Updated: 2005-07-29None
Description
Plusieurs vulnérabilités présentes dans les produits Mozilla peuvent être exploitées par un utilisateur mal intentionné afin de réaliser un déni de service, exécuter du code arbitraire ou encore récupérer des informations sensibles sur le système vulnérable.
Remarque : Mozilla Thunderbird est uniquement concerné par la vulnérabilité décrite dans le bulletin de sécurité mozilla mfsa2005-46 (cf. Documentation).
Solution
Mettre à jour Mozilla Firefox en version 1.0.5, Mozilla Thunderbird en
version 1.0.5 et la suite Mozilla en version 1.7.9.
Se référer au bulletin de sécurité de l'éditeur pour l'obtention des
mises à jour (cf. section Documentation).
Impacted products
References
{
"$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
"affected_systems": [
{
"description": "Mozilla Thunderbird version 1.0.2 et versions ant\u00e9rieures ;",
"product": {
"name": "Thunderbird",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Mozilla Suite version 1.7.8 et versions ant\u00e9rieures.",
"product": {
"name": "N/A",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
},
{
"description": "Mozilla Firefox version 1.0.4 et versions ant\u00e9rieures ;",
"product": {
"name": "Firefox",
"vendor": {
"name": "Mozilla",
"scada": false
}
}
}
],
"affected_systems_content": null,
"content": "## Description\n\nPlusieurs vuln\u00e9rabilit\u00e9s pr\u00e9sentes dans les produits Mozilla peuvent\n\u00eatre exploit\u00e9es par un utilisateur mal intentionn\u00e9 afin de r\u00e9aliser un\nd\u00e9ni de service, ex\u00e9cuter du code arbitraire ou encore r\u00e9cup\u00e9rer des\ninformations sensibles sur le syst\u00e8me vuln\u00e9rable.\n\nRemarque : Mozilla Thunderbird est uniquement concern\u00e9 par la\nvuln\u00e9rabilit\u00e9 d\u00e9crite dans le bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-46\n(cf. Documentation).\n\n## Solution\n\nMettre \u00e0 jour Mozilla Firefox en version 1.0.5, Mozilla Thunderbird en\nversion 1.0.5 et la suite Mozilla en version 1.7.9. \nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\nmises \u00e0 jour (cf. section Documentation).\n",
"cves": [],
"initial_release_date": "2005-07-13T00:00:00",
"last_revision_date": "2005-07-29T00:00:00",
"links": [
{
"title": "Bulletin de s\u00e9curit\u00e9 SUSE SUSE-SR:2005:018 du 28 juillet 2005 :",
"url": "http://www.novell.com/linux/security/advisories/2005_18_sr.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-56 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-56.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-46 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-46.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-51 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-51.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200507-24 du 26 juillet 2005 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200507-24.xml"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-52 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-52.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:127 du 28 juillet 2005 :",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:127"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-49 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-49.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:586 du 21 juillet 2005 :",
"url": "http://rhn.redhat.com/errata/RHSA-2005-586.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-50 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-50.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200507-14 du 15 juillet 2005 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200507-14.xml"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 FreeBSD pour firefox, linux-firefox, mozilla, linux-mozilla du 16 juillet 2005 :",
"url": "http://www.vuxml.org/freebsd/pkg-linux-firefox.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 FreeBSD pour firefox, linux-firefox, mozilla, linux-mozilla du 16 juillet 2005 :",
"url": "http://www.vuxml.org/freebsd/pkg-firefox.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-53 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-53.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:120-1 du 22 juillet 2005 :",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:120-1"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 FreeBSD pour firefox, linux-firefox, mozilla, linux-mozilla du 16 juillet 2005 :",
"url": "http://www.vuxml.org/freebsd/pkg-mozilla.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-45 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-45.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 FreeBSD pour firefox, linux-firefox, mozilla, linux-mozilla du 16 juillet 2005 :",
"url": "http://www.vuxml.org/freebsd/pkg-linux-mozilla.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:587 du 22 juillet 2005 :",
"url": "http://rhn.redhat.com/errata/RHSA-2005-587.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 RedHat RHSA-2005:601 du 21 juillet 2005 :",
"url": "http://rhn.redhat.com/errata/RHSA-2005-601.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-48 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-48.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:120 du 13 juillet 2005 :",
"url": "http://www.mandriva.com/security/advisories?name=MDKSA-2005:120"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-55 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-55.html"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200507-17 du 18 juillet 2005 :",
"url": "http://www.gentoo.org/security/en/glsa/glsa-200507-17.xml"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-54 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-54.html"
},
{
"title": "Site Interent de Mozilla :",
"url": "http://www.mozilla.org"
},
{
"title": "Bulletin de s\u00e9curit\u00e9 mozilla mfsa2005-47 :",
"url": "http://www.mozilla.org/security/announce/mfsa2005-47.html"
}
],
"reference": "CERTA-2005-AVI-256",
"revisions": [
{
"description": "suppression de Mozilla Thunderbird 1.0.2 dans les syst\u00e8mes affect\u00e9es.",
"revision_date": "2005-07-13T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Mandriva MDKSA-2005:120 et Gentoo GLSA 200507-14.",
"revision_date": "2005-07-15T00:00:00.000000"
},
{
"description": "ajout de Mozilla Thunderbird dans la liste des syst\u00e8mes affect\u00e9s ainsi que de la remarque dans la description.",
"revision_date": "2005-07-18T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 RedHat RHSA-2005:586, RHSA-2005:587 et RHSA-2005:601.",
"revision_date": "2005-07-22T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Mandriva MDKSA-2005:120-1.",
"revision_date": "2005-07-25T00:00:00.000000"
},
{
"description": "ajout de la r\u00e9f\u00e9rence au bulletin de s\u00e9curit\u00e9 Gentoo GLSA 200507-24.",
"revision_date": "2005-07-27T00:00:00.000000"
},
{
"description": "ajout des r\u00e9f\u00e9rences aux bulletins de s\u00e9curit\u00e9 Mandriva MDKSA-2005:127 et SUSE SUSE-SR:2005:018.",
"revision_date": "2005-07-29T00:00:00.000000"
}
],
"risks": [
{
"description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
},
{
"description": "Diffusion d\u0027informations sensibles"
}
],
"summary": null,
"title": "Multiples vuln\u00e9rabilit\u00e9 dans les produits Mozilla",
"vendor_advisories": [
{
"published_at": null,
"title": "Bulletins de s\u00e9curit\u00e9 Mozilla",
"url": null
}
]
}
Loading…
Loading…
Sightings
| Author | Source | Type | Date |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…