Alert GCSA-15029 - Vulnerabilita' nei prodotti Mozilla (Firefox)
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 ****************************************************************** Alert ID: GCSA-15029 Data: 12 agosto 2015 Titolo: Vulnerabilita' nei prodotti Mozilla (Firefox) ****************************************************************** :: Descrizione del problema E' stata rilasciata una nuova versione del browser Mozilla Firefox che risolve varie vulnerabilita' potenzialmente sfruttabili da aggressori per condurre attacchi. :: Software interessato Firefox versioni precedenti alla 40.0 :: Impatto Denial of service Esecuzione di codice arbitrario da remoto Accesso al sistema Modifica di informazioni di sistema :: Soluzioni Aggiornare Firefox alla versione 40.0 https://www.mozilla.org/it/firefox/new/ :: Riferimenti Mozilla Security Advisory https://www.mozilla.org/en-US/firefox/40.0/releasenotes/ https://www.mozilla.org/security/known-vulnerabilities/firefox.html https://www.mozilla.org/security/advisories/mfsa2015-92/ https://www.mozilla.org/security/advisories/mfsa2015-91/ https://www.mozilla.org/security/advisories/mfsa2015-90/ https://www.mozilla.org/security/advisories/mfsa2015-89/ https://www.mozilla.org/security/advisories/mfsa2015-88/ https://www.mozilla.org/security/advisories/mfsa2015-87/ https://www.mozilla.org/security/advisories/mfsa2015-86/ https://www.mozilla.org/security/advisories/mfsa2015-85/ https://www.mozilla.org/security/advisories/mfsa2015-84/ https://www.mozilla.org/security/advisories/mfsa2015-83/ https://www.mozilla.org/security/advisories/mfsa2015-82/ https://www.mozilla.org/security/advisories/mfsa2015-81/ https://www.mozilla.org/security/advisories/mfsa2015-80/ https://www.mozilla.org/security/advisories/mfsa2015-79/ Mitre CVE http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4473 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4474 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4475 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4477 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4478 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4479 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4480 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4484 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4485 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4486 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4487 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4488 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4489 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4490 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4491 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4492 http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-4493 Ubuntu Security Notice http://www.ubuntu.com/usn/usn-2702-1/ http://www.ubuntu.com/usn/usn-2702-2/ Red Hat Security Advisory https://rhn.redhat.com/errata/RHSA-2015-1586.html GARR CERT Newsletter subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert -----BEGIN PGP SIGNATURE----- iD8DBQFVy103wZxMk2USYEIRAs2IAJ9WHQuR8PTv1Ol04t6TBZlFpUH1eQCcCfGJ gFhOxq4P0XpsVtzkw2lnBGU= =KyYf -----END PGP SIGNATURE-----