Check: FFOX-00-000001
Mozilla Firefox STIG:
FFOX-00-000001
(in versions v6 r2 through v6 r1)
Title
The installed version of Firefox must be supported. (Cat I impact)
Discussion
Using versions of an application that are not supported by the vendor is not permitted. Vendors respond to security flaws with updates and patches. These updates are not available for unsupported versions, which can leave the application vulnerable to attack.
Check Content
Run Firefox. Click the ellipsis button >> Help >> About Firefox, and view the version number. If the Firefox version is not a supported version, this is a finding.
Fix Text
Upgrade the version of the browser to an approved version by obtaining software from the vendor or other trusted source.
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-002605 |
The organization installs security-relevant software updates within an organization-defined time period of the release of the updates. |
Controls
Number | Title |
---|---|
SI-2 |
Flaw Remediation |