The version of Firefox installed on the remote Windows host is prior to 1.5.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2006-57 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=346794CVE-2006-4566 (CVE-2006-4566)

  - https://bugzilla.mozilla.org/showbug.cgi?id=346090CVE-2006-4565 (CVE-2006-4565)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 1.5.0.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2006-57 advisory.

  - https://bugzilla.mozilla.org/showbug.cgi?id=346794CVE-2006-4566 (CVE-2006-4566)

  - https://bugzilla.mozilla.org/showbug.cgi?id=346090CVE-2006-4565 (CVE-2006-4565)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Various flaws have been reported that allow an attacker to execute arbitrary code with user privileges by tricking the user into opening a malicious web page containing JavaScript. (CVE-2006-4253, CVE-2006-4565, CVE-2006-4566, CVE-2006-4568, CVE-2006-4569 CVE-2006-4571)

The NSS library did not sufficiently check the padding of PKCS #1 v1.5 signatures if the exponent of the public key is 3 (which is widely used for CAs). This could be exploited to forge valid signatures without the need of the secret key. (CVE-2006-4340)

Jon Oberheide reported a way how a remote attacker could trick users into downloading arbitrary extensions with circumventing the normal SSL certificate check. The attacker would have to be in a position to spoof the victim's DNS, causing them to connect to sites of the attacker's choosing rather than the sites intended by the victim. If they gained that control and the victim accepted the attacker's cert for the Mozilla update site, then the next update check could be hijacked and redirected to the attacker's site without detection.
(CVE-2006-4567).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The installed version of SeaMonkey has various security issues, some of which may lead to execution of arbitrary code on the affected host subject to the user's privileges.

Versions of Mozilla Firefox 1.5.x prior to 1.5.0.7 are affected by multiple security issues, some of which may lead to execution of arbitrary code on the affected host subject to the user's privileges.

The remote Windows host contains a mail client that is affected by multiple vulnerabilities.  The remote version of Mozilla Thunderbird has various security issues, at least one of which may lead to execution of arbitrary code on the affected host subject to the user's privileges.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
279216	Mozilla Firefox < 1.5.0.7	Nessus	Windows	2025/12/18	2025/12/18	high
279233	Mozilla Firefox < 1.5.0.7	Nessus	MacOS X Local Security Checks	2025/12/18	2025/12/18	high
27931	Ubuntu 6.06 LTS : firefox vulnerabilities (USN-351-1)	Nessus	Ubuntu Local Security Checks	2007/11/10	2021/1/19	critical
3744	SeaMonkey < 1.0.5 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2006/9/18	2019/3/6	medium
3743	Mozilla Firefox 1.5.x < 1.5.0.7 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2006/9/18	2019/3/6	medium
3745	Mozilla Thunderbird < 1.5.0.7 Multiple Vulnerabilities (deprecated)	Nessus Network Monitor	SMTP Clients	2006/9/18	2019/3/6	medium

检测

插件搜索

high

high

critical

medium

medium

medium