Synopsis :

These remote packages are missing security patches :
- abrowser
- abrowser-3.0-branding
- firefox
- firefox-3.0
- firefox-3.0-branding
- firefox-3.0-dev
- firefox-3.0-dom-inspector
- firefox-3.0-gnome-support
- firefox-3.0-venkman
- firefox-dev
- firefox-dom-inspector
- firefox-gnome-support
- firefox-granparadiso
- firefox-granparadiso-dev
- firefox-granparadiso-dom-inspector
- firefox-granparadiso-gnome-support
- firefox-libthai
- firefox-trunk
- firefox-trunk-dev
- firefox-trunk-dom-i
[...]

Description :

Several flaws were discovered in the Firefox browser and JavaScript
engines. If a user were tricked into viewing a malicious website, a remote
attacker could cause a denial of service or possibly execute arbitrary code
with the privileges of the user invoking the program. (CVE-2009-3070,
CVE-2009-3071, CVE-2009-3072, CVE-2009-3074, CVE-2009-3075)

Jesse Ruderman and Dan Kaminsky discovered that Firefox did not adequately
inform users when security modules were added or removed via PKCS11. If
a user visited a malicious website, an attacker could exploit this to
trick the user into installing a malicious PKCS11 module. (CVE-2009-3076)

It was discovered that Firefox did not properly manage memory when using
XUL tree elements. If a user were tricked into viewing a malicious website,
a remote attacker could cause a denial of service or possibly execute
arbitrary code with the privileges of the user invoking the program.
(CVE-2009-3077)

Juan Pablo Lopez Yacubian discovered that Firefox did properly display
certa
[...]

Solution :

Upgrade to :
- abrowser-3.0.14+build2+nobinonly-0ubuntu0.9.04.1 (Ubuntu 9.04)
- abrowser-3.0-branding-3.0.14+build2+nobinonly-0ubuntu0.9.04.1 (Ubuntu 9.04)
- firefox-3.0.14+build2+nobinonly-0ubuntu0.9.04.1 (Ubuntu 9.04)
- firefox-3.0-3.0.14+build2+nobinonly-0ubuntu0.9.04.1 (Ubuntu 9.04)
- firefox-3.0-branding-3.0.14+build2+nobinonly-0ubuntu0.9.04.1 (Ubuntu 9.04)
- firefox-3.0-dev-3.0.14+build2+nobinonly-0ubuntu0.9.04.1 (Ubuntu 9.04)
- firefox-3.0-dom-inspector-3.0.14+build2+nobinonly-0ubuntu0.9.04.1 (Ubun
[...]

Risk factor :

High



only registered users with at least 25 hack challenge points can see links:
  click here in order to visit the hack challenges