The version of Firefox installed on the remote Windows host is prior to 41. It is, therefore, affected by the following vulnerabilities :

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues to corrupt memory and     execute arbitrary code. (CVE-2015-4500)

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues to corrupt memory and     execute arbitrary code. (CVE-2015-4501)

  - A flaw exists that allows scripted proxies to access the     inner window. (CVE-2015-4502)

  - An out-of-bounds read issue exists in TCPSocket.js     related to the sending of strings over TCPSocket. A     remote attacker can exploit this disclose memory     contents. (CVE-2015-4503)

  - An out-of-bounds read error exists in the QCMS color     management library that is triggered when manipulating     an image with specific attributes in its ICC V4 profile.
    A remote attacker can exploit this to cause a denial of     service condition or to disclose sensitive information.
    (CVE-2015-4504)

  - A flaw exists in the Mozilla updater that allows a local     attacker to replace arbitrary files on the system,     resulting in the execution of arbitrary code.
    (CVE-2015-4505)

  - A buffer overflow condition exists in the libvpx     component when parsing vp9 format video. A remote     attacker can exploit this, via a specially crafted vp9     format video, to execute arbitrary code. (CVE-2015-4506)

  - A flaw exists in the debugger API that is triggered when     using the debugger with SavedStacks in JavaScript. An     attacker can exploit this to cause a denial of service     condition. (CVE-2015-4507)

  - A flaw exists in reader mode that allows an attacker to     spoof the URL displayed in the address bar.
    (CVE-2015-4508)

  - A user-after-free error exists when manipulating HTML     media elements on a page during script manipulation of     the URI table of these elements. An attacker can exploit     this to cause a denial of service condition.
    (CVE-2015-4509)

  - A use-after-free error exists when using a shared worker     with IndexedDB due to a race condition with the worker.
    A remote attacker can exploit this, via specially     crafted content, to cause a denial of service condition.
    (CVE-2015-4510)

  - A buffer overflow condition exists in the nestegg     library when decoding a WebM format video with     maliciously formatted headers. An attacker can exploit     this to cause a denial of service condition or the     execution of arbitrary code. (CVE-2015-4511)

  - An out-of-bounds read error exists during 2D canvas     rendering due to an issue in the cairo graphics library.
    An attacker can exploit this to read random memory,     resulting in the disclosure of sensitive information.
    (CVE-2015-4512)

  - A security bypass vulnerability exists due to a flaw in     Gecko's implementation of the ECMAScript 5 API. An     attacker can exploit this to run web content in a     privileged context, resulting in the execution of     arbitrary code. (CVE-2015-4516)

  - A memory corruption issue exists in NetworkUtils.cpp. An     attacker can potentially exploit this issue to cause a     denial of service condition or to execute arbitrary     code. (CVE-2015-4517)

  - An information disclosure vulnerability exists due to a     flaw that occurs when a previously loaded image on a     page is dropped into content after a redirect, resulting     in the redirected URL being available to scripts.
    (CVE-2015-4519)

  - Multiple security bypass vulnerabilities exist due to     errors in the handling of CORS preflight request     headers. (CVE-2015-4520)

  - A memory corruption issue exists in the     ConvertDialogOptions() function. An attacker can     potentially exploit this issue to cause a denial of     service condition or to execute arbitrary code.
    (CVE-2015-4521)

  - An overflow condition exists in the GetMaxLength()     function. An attacker can potentially exploit this to     cause a denial of service condition or to execute     arbitrary code. (CVE-2015-4522)

  - An overflow condition exists in the GrowBy() function.
    An attacker can potentially exploit this to cause a     denial of service condition or to execute arbitrary     code. (CVE-2015-7174)

  - An overflow condition exists in the AddText() function.
    An attacker can potentially exploit this to cause a     denial of service condition or to execute arbitrary     code. (CVE-2015-7175)

  - A stack overflow condition exists in the     AnimationThread() function due to a bad sscanf     argument. An attacker can potentially exploit this to     cause a denial of service condition or to execute     arbitrary code. (CVE-2015-7176)

  - A memory corruption issue exists in the InitTextures()     function. An attacker can potentially exploit this issue     to cause a denial of service condition or to execute     arbitrary code. (CVE-2015-7177)

  - An out-of-bounds memory error exists in the     linkAttributes() function when manipulating shaders. An     attacker can potentially exploit this issue to cause a     denial of service condition or to execute arbitrary     code. (CVE-2015-7178)

  - An overflow condition exists in the reserveVertexSpace()     function due to an insufficient allocation of memory for     a shader attribute array. An attacker can potentially     exploit this issue to cause a denial of service     condition or to execute arbitrary code. (CVE-2015-7179)

  - A memory corruption issue exists in     ReadbackResultWriterD3D11::Run due to mishandling of the     return status. An attacker can potentially exploit this     issue to cause a denial of service condition or to     execute arbitrary code. (CVE-2015-7180)

  - An unspecified flaw exists in the nsPerformance::Now()     function in dom/base/nsPerformance.cpp that allows an     attacker to use a side-channel attack to disclose     sensitive information. (CVE-2015-7327)

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5, 6, and 7.

Red Hat Product Security has rated this update as having Critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

[Updated 25 August 2014] This erratum previously included an incorrect list of fixed issues. The issue list has been updated to reflect the CVEs that were fixed in this update. The firefox packages provided by this advisory have not been modified in any way.

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2015-4500, CVE-2015-4506, CVE-2015-4509, CVE-2015-4511, CVE-2015-4517, CVE-2015-4521, CVE-2015-4522, CVE-2015-7174, CVE-2015-7175, CVE-2015-7176, CVE-2015-7177, CVE-2015-7180)

Two information leak flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to disclose sensitive information or, in certain cases, crash.
(CVE-2015-4519, CVE-2015-4520)

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Andrew Osmond, Olli Pettay, Andrew Sutherland, Christian Holler, David Major, Andrew McCreight, Cameron McCormack, Khalil Zhani, Atte Kettunen, Ronald Crane, Mario Gomes, and Ehsan Akhgari as the original reporters of these issues.

All Firefox users should upgrade to these updated packages, which contain Firefox version 38.3.0 ESR, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

Mozilla Firefox was updated to version 38.3.0 ESR (bsc#947003), fixing bugs and security issues.

  - MFSA 2015-96/CVE-2015-4500/CVE-2015-4501 Miscellaneous     memory safety hazards (rv:41.0 / rv:38.3)

  - MFSA 2015-101/CVE-2015-4506 Buffer overflow in libvpx     while parsing vp9 format video

  - MFSA 2015-105/CVE-2015-4511 Buffer overflow while     decoding WebM video

  - MFSA 2015-106/CVE-2015-4509 Use-after-free while     manipulating HTML media content

  - MFSA 2015-110/CVE-2015-4519 Dragging and dropping images     exposes final URL after redirects

  - MFSA 2015-111/CVE-2015-4520 Errors in the handling of     CORS preflight request headers

  - MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522     CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177     CVE-2015-7180 Vulnerabilities found through code     inspection

More details can be found on https://www.mozilla.org/en-US/security/advisories/

The Mozilla NSPR library was updated to version 4.10.9, fixing various bugs.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
86071	Firefox < 41 Multiple Vulnerabilities	Nessus	Windows	2015/9/22	2018/7/16	high
86099	RHEL 5 / 6 / 7 : firefox (RHSA-2015:1834)	Nessus	Red Hat Local Security Checks	2015/9/23	2020/5/29	high
86307	SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nspr (SUSE-SU-2015:1680-1)	Nessus	SuSE Local Security Checks	2015/10/7	2021/1/6	high

检测

插件搜索

high

high

high