Mozilla Firefox Security Advisory (MFSA2011-22) - Linux

This host is missing a security update for Mozilla Firefox.

Integer overflow and arbitrary code execution in Array.reduceRight() Security researchers Chris Rohlf and Yan Ivnitskiy of Matasano Security reported that when a JavaScript Array object had its length set to an extremely large value, the iteration of array elements that occurs when its reduceRight method was subsequently called could result in the execution of attacker controlled memory due to an invalid index value being used to access element properties.

Firefox version(s) below 3.6.18 and below 5.

Checks if a vulnerable package version is present on the target host.

The vendor has released an update. Please see the reference(s) for more information.