Gentoo Linux: CVE-2011-0068: Mozilla Products: Multiple vulnerabilities
Description
A remote attacker could entice a user to view a specially crafted web page or email, possibly resulting in execution of arbitrary code or a Denial of Service condition. Furthermore, a remote attacker may be able to perform Man-in-the-Middle attacks, obtain sensitive information, bypass restrictions and protection mechanisms, force file downloads, conduct XML injection attacks, conduct XSS attacks, bypass the Same Origin Policy, spoof URL’s for phishing attacks, trigger a vertical scroll, spoof the location bar, spoof an SSL indicator, modify the browser’s font, conduct clickjacking attacks, or have other unspecified impact.
Solution(s)
- gentoo-linux-upgrade-dev-libs-nss
- gentoo-linux-upgrade-mail-client-mozilla-thunderbird
- gentoo-linux-upgrade-mail-client-mozilla-thunderbird-bin
- gentoo-linux-upgrade-mail-client-thunderbird
- gentoo-linux-upgrade-mail-client-thunderbird-bin
- gentoo-linux-upgrade-net-libs-xulrunner
- gentoo-linux-upgrade-net-libs-xulrunner-bin
- gentoo-linux-upgrade-www-client-firefox
- gentoo-linux-upgrade-www-client-firefox-bin
- gentoo-linux-upgrade-www-client-icecat
- gentoo-linux-upgrade-www-client-mozilla-firefox
- gentoo-linux-upgrade-www-client-mozilla-firefox-bin
- gentoo-linux-upgrade-www-client-seamonkey
- gentoo-linux-upgrade-www-client-seamonkey-bin
- Lightweight Endpoint Agent
- Live Dashboards
- Real Risk Prioritization
- IT-Integrated Remediation Projects
- Cloud, Virtual, and Container Assessment
- Integrated Threat Feeds
- Easy-to-Use RESTful API
- Automation-Assisted Patching
- Automated Containment
With Rapid7 live dashboards, I have a clear view of all the assets on my network, which ones can be exploited, and what I need to do in order to reduce the risk in my environment in real-time. No other tool gives us that kind of value and insight.
– Scott Cheney, Manager of Information Security, Sierra View Medical Center