The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The appendChild function in Mozilla Firefox before 3.6.20, Thunderbird 3.x before 3.1.12, SeaMonkey 2.x,     and possibly other products does not properly handle DOM objects, which allows remote attackers to execute     arbitrary code via unspecified vectors that lead to dereferencing of a dangling pointer. (CVE-2011-2378)

Note that Nessus relies on the presence of the package as reported by the vendor.

Several vulnerabilities have been discovered in Icedove, an unbranded version of the Thunderbird mail/news client.

  - CVE-2011-0084     'regenrecht' discovered that incorrect pointer handling     in the SVG processing code could lead to the execution     of arbitrary code.

  - CVE-2011-2378     'regenrecht' discovered that incorrect memory management     in DOM processing could lead to the execution of     arbitrary code.

  - CVE-2011-2981     'moz_bug_r_a_4' discovered a Chrome privilege escalation     vulnerability in the event handler code.

  - CVE-2011-2982     Gary Kwong, Igor Bukanov, Nils and Bob Clary discovered     memory corruption bugs, which may lead to the execution     of arbitrary code.

  - CVE-2011-2983     'shutdown' discovered an information leak in the     handling of RegExp.input.

  - CVE-2011-2984     'moz_bug_r_a4' discovered a Chrome privilege escalation     vulnerability.

As indicated in the Lenny (oldstable) release notes, security support for the Icedove packages in the oldstable needed to be stopped before the end of the regular Lenny security maintenance life cycle. You are strongly encouraged to upgrade to stable or switch to a different mail client.

Mozilla Firefox was updated to version 3.6.20.

It fixes bugs and security issues. Following security issues were fixed: Mozilla Foundation Security Advisory 2011-30 - MFSA 2011-30

  - Miscellaneous memory safety hazards Mozilla developers     and community members identified and fixed several     memory safety bugs in the browser engine used in Firefox     3.6 and other Mozilla-based products. Some of these bugs     showed evidence of memory corruption under certain     circumstances, and we presume that with enough effort at     least some of these could be exploited to run arbitrary     code.

    Gary Kwong, Igor Bukanov, Nils and Bob Clary reported     memory safety issues which affected Firefox 3.6.
    (CVE-2011-2982)

  - Crash in SVGTextElement.getCharNumAtPosition() Security     researcher regenrecht reported via TippingPoint's Zero     Day Initiative that a SVG text manipulation routine     contained a dangling pointer vulnerability.
    (CVE-2011-0084)

  - Privilege escalation using event handlers Mozilla     security researcher moz_bug_r_a_4 reported a     vulnerability in event management code that would permit     JavaScript to be run in the wrong context, including     that of a different website or potentially in a     chrome-privileged context. (CVE-2011-2981)

  - Dangling pointer vulnerability in appendChild Security     researcher regenrecht reported via TippingPoint's Zero     Day Initiative that appendChild did not correctly     account for DOM objects it operated upon and could be     exploited to dereference an invalid pointer.
    (CVE-2011-2378)

  - Privilege escalation dropping a tab element in content     area Mozilla security researcher moz_bug_r_a4 reported     that web content could receive chrome privileges if it     registered for drop events and a browser tab element was     dropped into the content area. (CVE-2011-2984)

  - Binary planting vulnerability in ThinkPadSensor::Startup     Security researcher Mitja Kolsek of Acros Security     reported that ThinkPadSensor::Startup could potentially     be exploited to load a malicious DLL into the running     process. (CVE-2011-2980) (This issue is likely Windows     only)

  - Private data leakage using RegExp.input Security     researcher shutdown reported that data from other     domains could be read when RegExp.input was set.
    (CVE-2011-2983)

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox.

Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-2982)

A dangling pointer flaw was found in the Firefox Scalable Vector Graphics (SVG) text manipulation routine. A web page containing a malicious SVG image could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-0084)

A dangling pointer flaw was found in the way Firefox handled a certain Document Object Model (DOM) element. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox.
(CVE-2011-2378)

A flaw was found in the event management code in Firefox. A website containing malicious JavaScript could cause Firefox to execute that JavaScript with the privileges of the user running Firefox.
(CVE-2011-2981)

A flaw was found in the way Firefox handled malformed JavaScript. A web page containing malicious JavaScript could cause Firefox to access already freed memory, causing Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-2983)

It was found that a malicious web page could execute arbitrary code with the privileges of the user running Firefox if the user dropped a tab onto the malicious web page. (CVE-2011-2984)

For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 3.6.20. You can find a link to the Mozilla advisories in the References section of this erratum.

All Firefox users should upgrade to these updated packages, which contain Firefox version 3.6.20, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

Mozilla Thunderbird was updated to 3.1.12 fixing various bugs and security issues :

Mozilla Foundation Security Advisory 2011-32 (MFSA 2011-32) http://www.mozilla.org/security/announce/2011/mfsa2011-32.html

Many of the issues listed below are not exploitable through mail since JavaScript is disabled by default in Thunderbird. These particular issues may be triggered while viewing RSS feeds and displaying full remote content rather than the feed summary. Addons that expose browser functionality may also enable such issues to be exploited.

  - Miscellaneous memory safety hazards (rv:1.9.2.20)

    Mozilla developers and community members identified and     fixed several memory safety bugs in the browser engine     used in Thunderbird 3.1 and other Mozilla-based     products. Some of these bugs showed evidence of memory     corruption under certain circumstances, and we presume     that with enough effort at least some of these could be     exploited to run arbitrary code.

    Gary Kwong, Igor Bukanov, Nils and Bob Clary reported     memory safety issues which affected Thunderbird 3.1.
    (CVE-2011-2982)

  - Crash in SVGTextElement.getCharNumAtPosition()

    Security researcher regenrecht reported via     TippingPoint's Zero Day Initiative that a SVG text     manipulation routine contained a dangling pointer     vulnerability. (CVE-2011-0084)

  - Privilege escalation using event handlers

    Mozilla security researcher moz_bug_r_a_4 reported a     vulnerability in event management code that would permit     JavaScript to be run in the wrong context, including     that of a different website or potentially in a     chrome-privileged context. (CVE-2011-2981)

  - Dangling pointer vulnerability in appendChild

    Security researcher regenrecht reported via     TippingPoint's Zero Day Initiative that appendChild did     not correctly account for DOM objects it operated upon     and could be exploited to dereference an invalid     pointer. (CVE-2011-2378)

  - Privilege escalation dropping a tab element in content     area

    Mozilla security researcher moz_bug_r_a4 reported that     web content could receive chrome privileges if it     registered for drop events and a browser tab element was     dropped into the content area. (CVE-2011-2984)

  - Binary planting vulnerability in ThinkPadSensor::Startup

    Security researcher Mitja Kolsek of Acros Security     reported that ThinkPadSensor::Startup could potentially     be exploited to load a malicious DLL into the running     process. (CVE-2011-2980)

  - Private data leakage using RegExp.input

    Security researcher shutdown reported that data from     other domains could be read when RegExp.input was set.
    (CVE-2011-2983)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
217559	Linux Distros Unpatched Vulnerability : CVE-2011-2378	Nessus	Misc.	2025/3/3	2025/9/14	critical
55942	Debian DSA-2297-1 : icedove - several vulnerabilities	Nessus	Debian Local Security Checks	2011/8/23	2021/1/11	critical
56003	SuSE 11.1 Security Update : Mozilla Firefox (SAT Patch Number 5057)	Nessus	SuSE Local Security Checks	2011/8/30	2021/1/19	critical
57150	SuSE 10 Security Update : Mozilla Firefox (ZYPP Patch Number 7713)	Nessus	SuSE Local Security Checks	2011/12/13	2021/1/19	critical
61112	Scientific Linux Security Update : firefox on SL4.x, SL5.x, SL6.x i386/x86_64	Nessus	Scientific Linux Local Security Checks	2012/8/1	2021/1/14	critical
75666	openSUSE Security Update : MozillaThunderbird (openSUSE-SU-2011:0935-2)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical