Avaya Products Vulnerable to Firefox CVEs (CVE-2010-1585) Security Advisory

From this webpage screenshot, the following key vulnerability information can be obtained: 1. CVE Numbers and Descriptions - CVE-2010-1585: A vulnerability in Firefox when handling XULRunner content with increasingly complex HTML, potentially allowing execution of arbitrary JavaScript. - CVE-2011-0051: A vulnerability in dialog box handling that could lead to privilege escalation. - CVE-2011-0053, CVE-2011-0055, CVE-2011-0058, CVE-2011-0062: Multiple vulnerabilities when processing malicious web content. - CVE-2011-0054, CVE-2011-0056, CVE-2011-0057: Multiple vulnerabilities when processing malicious JavaScript. - CVE-2011-0061: A vulnerability when processing malicious JPEG images. - CVE-2011-0059: A vulnerability in plugin handling of HTTP requests. 2. Affected Avaya Products and Versions - CS1000E, CS1000M, CS1000E/CS1000M Signaling Servers: Versions 7.0 and 7.5. - IQ: Versions 4.0.x to 5.1.x. - Message Network, Message Store Server, Aura™ Presence Service, Aura™ Session Manager, Aura™ System Manager: Specific versions listed for each. - Software-only products are dependent on the underlying operating system and may be indirectly affected. 3. Risk Level - Most vulnerabilities are classified as "Low" risk. 4. Mitigation Measures - MN, MSS, PS, SM, and SMGR: Require non-standard direct user interaction, thus posing low risk. - IQ and CS1000: Do not install Firefox; only use XULRunner, therefore no risk. 5. Recommended Actions - Specific upgrade recommendations for system product versions. - Mitigation for software-only products depends on guidance from the underlying operating system vendor. 6. Additional Information - Contact information for Avaya support and links to further details are provided. This document primarily provides Avaya product users with updates and protective recommendations regarding specific Firefox vulnerabilities.

Goal Reached Thanks to every supporter — we hit 100%!

Avaya Products Vulnerable to Firefox CVEs (CVE-2010-1585) Security Advisory