This host is installed with Mozilla firefox/thunderbird and is prone to denial of service vulnerability.

Successful exploitation could allow attackers to execute arbitrary code in the context of the browser or cause a denial of service. Impact Level: System/Application

Upgrade to Mozilla Firefox ESR version 10.0.5 or later, For updates refer to http://www.mozilla.com/en-US/firefox/all.html Upgrade to Mozilla Thunderbird ESR version 10.0.5 or later, http://www.mozilla.org/en-US/thunderbird/

The 'jsinfer.cpp' function in ESR versions fails to determine data types, which allows to cause a denial of service via crafted JavaScript code.

Thunderbird ESR version 10.x before 10.0.5, Mozilla Firefox ESR version 10.x before 10.0.5 on Mac OS X

• http://secunia.com/advisories/49366
• http://secunia.com/advisories/49368
• http://securitytracker.com/id/1027120
• http://www.mozilla.org/security/announce/2012/mfsa2012-34.html

---

Updated on 2015-03-25