The remote host is affected by the vulnerability described in GLSA-201512-10 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox and       Mozilla Thunderbird. Please review the CVE identifiers referenced below       for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The version of Firefox installed on the remote Mac OS X host is prior to 43. It is, therefore, affected by the following vulnerabilities :

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues by convincing a user     to visit a specially crafted web page, resulting in the     execution of arbitrary code. (CVE-2015-7201)

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues by convincing a user     to visit a specially crafted web page, resulting in the     execution of arbitrary code. (CVE-2015-7202)

  - An overflow condition exists in the LoadFontFamilyData()     function due to improper validation of user-supplied     input. A remote attacker can exploit this to cause a     buffer overflow, resulting in the execution of arbitrary     code. (CVE-2015-7203)

  - A flaw exists in the PropertyWriteNeedsTypeBarrier()     function due to improper handling of unboxed objects     during JavaScript variable assignments. A remote     attacker can exploit this to execute arbitrary code.
    (CVE-2015-7204)

  - A flaw exists in the RtpHeaderParser::Parse() function     due to improper handling of RTP headers. An     unauthenticated, remote attacker can exploit this, via     specially crafted RTP headers, to execute arbitrary     code. (CVE-2015-7205)

  - A same-origin bypass vulnerability exists that is     triggered after a redirect when the function is used     alongside an iframe to host a page. An attacker can     exploit this to gain access to cross-origin URL     information. (CVE-2015-7207)

  - The SetCookieInternal() function improperly allows     control characters (e.g. ASCII code 11) to be inserted     into cookies. An attacker can exploit this to inject     cookies. (CVE-2015-7208)

  - A use-after-free error exists due to improper prevention     of datachannel operations on closed PeerConnections. An     attacker can exploit this to dereference already freed     memory, resulting in the execution of arbitrary code.
    (CVE-2015-7210)

  - A flaw exists in the ParseURI() function due to improper     handling of a hash (#) character in the data: URI. An     attacker can exploit this to spoof the URL bar.
    (CVE-2015-7211)

  - An integer overflow condition exists in the     readMetaData() function due to improper validation of     user-supplied input when handling a specially crafted     MP4 file. An attacker can exploit this to execute     arbitrary code. (CVE-2015-7213)

  - A same-origin bypass vulnerability exists due to     improper handling of 'data:' and 'view-source:' URIs. An     attacker can exploit this to read data from cross-site     URLs and local files. (CVE-2015-7214)

  - An information disclosure vulnerability exists due to     improper handling of error events in web workers. An     attacker can exploit this to gain access to sensitive     cross-origin information. (CVE-2015-7215)

  - Multiple integer underflow conditions exist due to     improper  validation of user-supplied input when     handling HTTP2 frames. An attacker can exploit these to     crash the application, resulting in a denial of service.
    (CVE-2015-7218, CVE-2015-7219)

  - An overflow condition exists in the XDRBuffer::grow()     function due to improper validation of user-supplied     input. An attacker can exploit this to cause a buffer     overflow, resulting in the execution of arbitrary code.
    (CVE-2015-7220)

  - An overflow condition exists in the GrowCapacity()     function due to improper validation of user-supplied     input. An attacker can exploit this to cause a buffer     overflow, resulting in the execution of arbitrary code.
    (CVE-2015-7221)

  - An integer underflow condition exists in the bundled     version of libstagefright in the parseChunk() function     that is triggered when handling 'covr' chunks. An     unauthenticated, remote attacker can exploit this, via     specially crafted media content, to crash the     application or execute arbitrary code. (CVE-2015-7222)

  - A privilege escalation vulnerability exists in the     Extension.jsm script due to a failure to restrict     WebExtension APIs from being injected into documents     without WebExtension principals. An attacker can exploit     this to conduct a cross-site scripting attack, resulting     in the execution of arbitrary script code in a user's     browser session. (CVE-2015-7223)

SeaMonkey was updated to 2.40 (boo#959277) to fix security issues and bugs.

The following vulnerabilities were fixed :

  - CVE-2015-7575: MD5 signatures accepted within TLS 1.2     ServerKeyExchange in server signature

  - CVE-2015-7201/CVE-2015-7202: Miscellaneous memory safety     hazards

  - CVE-2015-7204: Crash with JavaScript variable assignment     with unboxed objects

  - CVE-2015-7207: Same-origin policy violation using     perfomance.getEntries and history navigation

  - CVE-2015-7208: Firefox allows for control characters to     be set in cookies

  - CVE-2015-7210: Use-after-free in WebRTC when datachannel     is used after being destroyed

  - CVE-2015-7212: Integer overflow allocating extremely     large textures

  - CVE-2015-7215: Cross-origin information leak through web     workers error events

  - CVE-2015-7211: Hash in data URI is incorrectly parsed

  - CVE-2015-7218/CVE-2015-7219: DOS due to malformed frames     in HTTP/2

  - CVE-2015-7216/CVE-2015-7217: Linux file chooser crashes     on malformed images due to flaws in Jasper library

  - CVE-2015-7203/CVE-2015-7220/CVE-2015-7221: Buffer     overflows found through code inspection

  - CVE-2015-7205: Underflow through code inspection

  - CVE-2015-7213: Integer overflow in MP4 playback in     64-bit versions

  - CVE-2015-7222: Integer underflow and buffer overflow     processing MP4 metadata in libstagefright

  - CVE-2015-7223: Privilege escalation vulnerabilities in     WebExtension APIs

  - CVE-2015-7214: Cross-site reading attack through data     and view-source URIs

This update for SeaMonkey fixes the following issues :

  - update to SeaMonkey 2.40 (bnc#959277)

  - requires NSS 3.20.2 to fix MFSA 2015-150/CVE-2015-7575     (bmo#1158489) MD5 signatures accepted within TLS 1.2     ServerKeyExchange in server signature

  - MFSA 2015-134/CVE-2015-7201/CVE-2015-7202 Miscellaneous     memory safety hazards

  - MFSA 2015-135/CVE-2015-7204 (bmo#1216130) Crash with     JavaScript variable assignment with unboxed objects

  - MFSA 2015-136/CVE-2015-7207 (bmo#1185256) Same-origin     policy violation using perfomance.getEntries and history     navigation

  - MFSA 2015-137/CVE-2015-7208 (bmo#1191423) Firefox allows     for control characters to be set in cookies

  - MFSA 2015-138/CVE-2015-7210 (bmo#1218326) Use-after-free     in WebRTC when datachannel is used after being destroyed

  - MFSA 2015-139/CVE-2015-7212 (bmo#1222809) Integer     overflow allocating extremely large textures

  - MFSA 2015-140/CVE-2015-7215 (bmo#1160890) Cross-origin     information leak through web workers error events

  - MFSA 2015-141/CVE-2015-7211 (bmo#1221444) Hash in data     URI is incorrectly parsed

  - MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818,     bmo#1194820) DOS due to malformed frames in HTTP/2

  - MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059,     bmo#1203078) Linux file chooser crashes on malformed     images due to flaws in Jasper library

  - MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221     (bmo#1201183, bmo#1178033, bmo#1199400)

Update to latest upstream - Firefox 43

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Firefox installed on the remote Windows host is prior to 44. It is, therefore, affected by the following vulnerabilities :

  - A cookie injection vulnerability exists due to illegal     control characters being stored as cookie values in     violation of RFC6265. A remote attacker can exploit this     to inject cookies. (CVE-2015-7208)

  - Multiple unspecified memory corruption issues exist that     allow a remote attacker to execute arbitrary code.
    (CVE-2016-1930, CVE-2016-1931)

  - An integer overflow condition exists due to improper     parsing of GIF images during deinterlacing. A remote     attacker can exploit this, via a specially crafted GIF     image, to cause a denial of service condition or the     execution of arbitrary code. (CVE-2016-1933)

  - A buffer overflow condition exists in WebGL that is     triggered when handling cache out-of-memory error     conditions. A remote attacker can exploit this to     execute arbitrary code. (CVE-2016-1935)

  - A content spoofing vulnerability exists due to the     protocol handler dialog treating double click events as     two single click events. A remote attacker can exploit     this to spoof content, allowing the attacker to trick a     user into performing malicious actions. (CVE-2016-1937)

  - A cryptographic weakness exists in Network Security     Services (NSS) due to incorrect calculations with     'mp_div' and 'mp_exptmod'. (CVE-2016-1938)

  - A cookie injection vulnerability exists due to illegal     control characters being permitted in cookie names. A     remote attacker can exploit this to inject cookies.
    (CVE-2016-1939)

  - An URL spoofing vulnerability exists due to a flaw that     is triggered during the handling of a URL that invalid     for the internal protocol, causing the URL to be pasted     into the address bar. A remote attacker can exploit this     spoof URLs, allowing the attacker to trick a     user into visiting a malicious website. (CVE-2016-1942)

  - An unspecified memory corruption issue exists in the     ANGLE graphics library implementation. A remote attacker     can exploit this to corrupt memory, resulting in the     execution of arbitrary code. (CVE-2016-1944)

  - A wild pointer flaw exists due to improper handling of     ZIP files. A remote attacker can exploit this, via a     crafted ZIP file, to have an unspecified impact.
    (CVE-2016-1945)

  - An integer overflow condition exists in the bundled     version of libstagefright due to improper handling of     MP4 file metadata. A remote attacker can exploit this     to execute arbitrary code. (CVE-2016-1946)

  - A flaw exists in the safe browsing feature due to the     Application Reputation service being unreachable. A     remote attacker can exploit this to convince a user     into downloading a malicious executable without being     warned. (CVE-2016-1947)

  - A use-after-free error exists in Network Security     Services (NSS) due to improper handling of failed     allocations during DHE and ECDHE handshakes. An attacker     can exploit this to dereference already freed memory,     resulting in the execution of arbitrary code.
    (CVE-2016-1978)

This update to MozillaFirefox fixes several security issues and bugs.

Mozilla Firefox was updated to 44.0. Mozilla NSS was updated to 3.21 Mozilla NSPR was updated to 4.11.

The following vulnerabilities were fixed :

  - CVE-2016-1930/CVE-2016-1931: Miscellaneous memory safety     hazards (boo#963633)

  - CVE-2016-1933: Out of Memory crash when parsing GIF     format images (boo#963634)

  - CVE-2016-1935: Buffer overflow in WebGL after out of     memory allocation (boo#963635)

  - CVE-2015-7208/CVE-2016-1939: Firefox allows for control     characters to be set in cookie names (boo#963637)

  - CVE-2016-1937: Missing delay following user click events     in protocol handler dialog (boo#963641)

  - CVE-2016-1938: Errors in mp_div and mp_exptmod     cryptographic functions in NSS (boo#963731)

  - CVE-2016-1942/CVE-2016-1943: Addressbar spoofing attacks     (boo#963643)

  - CVE-2016-1944/CVE-2016-1945/CVE-2016-1946: Unsafe memory     manipulation found through code inspection (boo#963644)

  - CVE-2016-1947: Application Reputation service disabled     in Firefox 43 (boo#963645)

The following change from Mozilla Firefox 43.0.4 is included :

  - Re-enable SHA-1 certificates to prevent outdated     man-in-the-middle security devices from interfering with     properly secured SSL/TLS connections

The version of Firefox installed on the remote Windows host is prior to 43. It is, therefore, affected by the following vulnerabilities :

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues by convincing a user     to visit a specially crafted web page, resulting in the     execution of arbitrary code. (CVE-2015-7201)

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues by convincing a user     to visit a specially crafted web page, resulting in the     execution of arbitrary code. (CVE-2015-7202)

  - An overflow condition exists in the LoadFontFamilyData()     function due to improper validation of user-supplied     input. A remote attacker can exploit this to cause a     buffer overflow, resulting in the execution of arbitrary     code. (CVE-2015-7203)

  - A flaw exists in the PropertyWriteNeedsTypeBarrier()     function due to improper handling of unboxed objects     during JavaScript variable assignments. A remote     attacker can exploit this to execute arbitrary code.
    (CVE-2015-7204)

  - A flaw exists in the RtpHeaderParser::Parse() function     due to improper handling of RTP headers. An     unauthenticated, remote attacker can exploit this, via     specially crafted RTP headers, to execute arbitrary     code. (CVE-2015-7205)

  - A same-origin bypass vulnerability exists that is     triggered after a redirect when the function is used     alongside an iframe to host a page. An attacker can     exploit this to gain access to cross-origin URL     information. (CVE-2015-7207)

  - The SetCookieInternal() function improperly allows     control characters (e.g. ASCII code 11) to be inserted     into cookies. An attacker can exploit this to inject     cookies. (CVE-2015-7208)

  - A use-after-free error exists due to improper prevention     of datachannel operations on closed PeerConnections. An     attacker can exploit this to dereference already freed     memory, resulting in the execution of arbitrary code.
    (CVE-2015-7210)

  - A flaw exists in the ParseURI() function due to improper     handling of a hash (#) character in the data: URI. An     attacker can exploit this to spoof the URL bar.
    (CVE-2015-7211)

  - An overflow condition exists in the AllocateForSurface()     function due to improper validation of user-supplied     input when handling texture allocation in graphics     operations. An attacker can exploit this to execute     arbitrary code. (CVE-2015-7212)

  - An integer overflow condition exists in the     readMetaData() function due to improper validation of     user-supplied input when handling a specially crafted     MP4 file. An attacker can exploit this to execute     arbitrary code. (CVE-2015-7213)

  - A same-origin bypass vulnerability exists due to     improper handling of 'data:' and 'view-source:' URIs. An     attacker can exploit this to read data from cross-site     URLs and local files. (CVE-2015-7214)

  - An information disclosure vulnerability exists due to     improper handling of error events in web workers. An     attacker can exploit this to gain access to sensitive     cross-origin information. (CVE-2015-7215)

  - Multiple integer underflow conditions exist due to     improper  validation of user-supplied input when     handling HTTP2 frames. An attacker can exploit these to     crash the application, resulting in a denial of service.
    (CVE-2015-7218, CVE-2015-7219)

  - An overflow condition exists in the XDRBuffer::grow()     function due to improper validation of user-supplied     input. An attacker can exploit this to cause a buffer     overflow, resulting in the execution of arbitrary code.
    (CVE-2015-7220)

  - An overflow condition exists in the GrowCapacity()     function due to improper validation of user-supplied     input. An attacker can exploit this to cause a buffer     overflow, resulting in the execution of arbitrary code.
    (CVE-2015-7221)

  - An integer underflow condition exists in the bundled     version of libstagefright in the parseChunk() function     that is triggered when handling 'covr' chunks. An     unauthenticated, remote attacker can exploit this, via     specially crafted media content, to crash the     application or execute arbitrary code. (CVE-2015-7222)

  - A privilege escalation vulnerability exists in the     Extension.jsm script due to a failure to restrict     WebExtension APIs from being injected into documents     without WebExtension principals. An attacker can exploit     this to conduct a cross-site scripting attack, resulting     in the execution of arbitrary script code in a user's     browser session. (CVE-2015-7223)

Mozilla Foundation reports :

MFSA 2016-01 Miscellaneous memory safety hazards (rv:44.0 / rv:38.6)

MFSA 2016-02 Out of Memory crash when parsing GIF format images

MFSA 2016-03 Buffer overflow in WebGL after out of memory allocation

MFSA 2016-04 Firefox allows for control characters to be set in cookie names

MFSA 2016-06 Missing delay following user click events in protocol handler dialog

MFSA 2016-09 Addressbar spoofing attacks

MFSA 2016-10 Unsafe memory manipulation found through code inspection

MFSA 2016-11 Application Reputation service disabled in Firefox 43

This update fixes the following security related issues by updating packages to a more recent version :

Update of NSPR to 4.11 Update of NSS to 3.21 Update of Firefox to 44.0

  - MFSA 2016-01/CVE-2016-1930/CVE-2016-1931 Miscellaneous     memory safety hazards

  - MFSA 2016-02/CVE-2016-1933 (bmo#1231761) Out of Memory     crash when parsing GIF format images

  - MFSA 2016-03/CVE-2016-1935 (bmo#1220450) Buffer overflow     in WebGL after out of memory allocation

  - MFSA 2016-04/CVE-2015-7208/CVE-2016-1939 (bmo#1191423,     bmo#1233784) Firefox allows for control characters to be     set in cookie names

  - MFSA 2016-06/CVE-2016-1937 (bmo#724353) Missing delay     following user click events in protocol handler dialog

  - MFSA 2016-07/CVE-2016-1938 (bmo#1190248) Errors in     mp_div and mp_exptmod cryptographic functions in NSS     (fixed by requiring NSS 3.21)

  - MFSA 2016-09/CVE-2016-1942/CVE-2016-1943 (bmo#1189082,     bmo#1228590) Addressbar spoofing attacks

  - MFSA 2016-10/CVE-2016-1944/CVE-2016-1945/CVE-2016-1946     (bmo#1186621, bmo#1214782, bmo#1232096) Unsafe memory     manipulation found through code inspection

  - MFSA 2016-11/CVE-2016-1947 (bmo#1237103) Application     Reputation service disabled in Firefox 43

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
87710	GLSA-201512-10 : Mozilla Products: Multiple vulnerabilities (Bar Mitzvah) (Logjam)	Nessus	Gentoo Local Security Checks	2016/1/4	2022/12/5	critical
87474	Firefox < 43 Multiple Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	2015/12/17	2026/3/3	critical
88547	openSUSE Security Update : seamonkey (openSUSE-2016-126) (SLOTH)	Nessus	SuSE Local Security Checks	2016/2/3	2021/1/19	medium
88550	openSUSE Security Update : SeaMonkey (openSUSE-2016-129) (SLOTH)	Nessus	SuSE Local Security Checks	2016/2/3	2021/1/19	medium
89241	Fedora 23 : firefox-43.0-1.fc23 (2015-51b1105902)	Nessus	Fedora Local Security Checks	2016/3/4	2021/1/11	critical
88461	Firefox < 44 Multiple Vulnerabilities	Nessus	Windows	2016/1/28	2026/6/23	critical
88549	openSUSE Security Update : the MozillaFirefox / mozilla-nss and mozilla-nspr (openSUSE-2016-128)	Nessus	SuSE Local Security Checks	2016/2/3	2021/1/19	critical
87476	Firefox < 43 Multiple Vulnerabilities	Nessus	Windows	2015/12/17	2026/6/23	critical
89295	Fedora 22 : firefox-43.0-1.fc22 (2015-7ab3d3afcf)	Nessus	Fedora Local Security Checks	2016/3/4	2021/1/11	critical
88512	FreeBSD : mozilla -- multiple vulnerabilities (4f00dac0-1e18-4481-95af-7aaad63fd303)	Nessus	FreeBSD Local Security Checks	2016/2/2	2021/1/4	critical
88552	openSUSE Security Update : Mozilla Firefox (openSUSE-2016-131)	Nessus	SuSE Local Security Checks	2016/2/3	2021/1/19	critical

检测

插件搜索

critical

critical

medium

medium

critical

critical

critical

critical

critical

critical

critical