The remote host is affected by the vulnerability described in GLSA-201301-01 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox,       Thunderbird, SeaMonkey, NSS, GNU IceCat, and XULRunner. Please review the       CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition. Furthermore, a remote attacker may be able       to perform Man-in-the-Middle attacks, obtain sensitive information,       bypass restrictions and protection mechanisms, force file downloads,       conduct XML injection attacks, conduct XSS attacks, bypass the Same       Origin Policy, spoof URL&rsquo;s for phishing attacks, trigger a vertical       scroll, spoof the location bar, spoof an SSL indicator, modify the       browser&rsquo;s font, conduct clickjacking attacks, or have other unspecified       impact.
    A local attacker could gain escalated privileges, obtain sensitive       information, or replace an arbitrary downloaded file.
  Workaround :

    There is no known workaround at this time.

This update to version 3.13.1 of mozilla-nss fixes the following issues :

  - Explicitly distrust DigiCert Sdn. Bhd (bmo#698753)

  - Better SHA-224 support (bmo#647706)

  - Fix a regression (causing hangs in some situations)     introduced in 3.13 (bmo#693228)

  - SSL 2.0 is disabled by default

  - A defense against the SSL 3.0 and TLS 1.0 CBC chosen     plaintext attack demonstrated by Rizzo and Duong     (CVE-2011-3389) has been enabled by default. Set the     SSL_CBC_RANDOM_IV SSL option to PR_FALSE to disable it.

  - Support SHA-224

  - Add PORT_ErrorToString and PORT_ErrorToName to return     the error message and symbolic name of an NSS error code

  - Add NSS_GetVersion to return the NSS version string

  - Add experimental support of RSA-PSS to the softoken only

  - NSS_NoDB_Init does not try to open /pkcs11.txt and     /secmod.db anymore (bmo#641052)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:1437 advisory.

    Mozilla Firefox is an open source web browser. XULRunner provides the XUL     Runtime environment for Mozilla Firefox.

    A flaw was found in the way Firefox handled certain add-ons. A web page     containing malicious content could cause an add-on to grant itself full     browser privileges, which could lead to arbitrary code execution with the     privileges of the user running Firefox. (CVE-2011-3647)

    A cross-site scripting (XSS) flaw was found in the way Firefox handled     certain multibyte character sets. A web page containing malicious content     could cause Firefox to run JavaScript code with the permissions of a     different website. (CVE-2011-3648)

    A flaw was found in the way Firefox handled large JavaScript scripts. A web     page containing malicious JavaScript could cause Firefox to crash or,     potentially, execute arbitrary code with the privileges of the user running     Firefox. (CVE-2011-3650)

    For technical details regarding these flaws, refer to the Mozilla security     advisories for Firefox 3.6.24. You can find a link to the Mozilla     advisories in the References section of this erratum.

    All Firefox users should upgrade to these updated packages, which contain     Firefox version 3.6.24, which corrects these issues. After installing the     update, Firefox must be restarted for the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security issues were identified and fixed in mozilla NSS, firefox and thunderbird :

22 weak 512-bit certificates issued by the DigiCert Sdn. Bhd certificate authority has been revoked from the root CA storage. This was fixed with rootcerts-20111103.00 and nss-3.13. DigiCert Sdn. Bhd is a Malaysian subordinate CA under Entrust and Verizon (GTE CyberTrust). It bears no affiliation whatsoever with the US-based corporation DigiCert, Inc., which is a member of Mozilla's root program.

Untrusted search path vulnerability in Mozilla Network Security Services (NSS) might allow local users to gain privileges via a Trojan horse pkcs11.txt file in a top-level directory (CVE-2011-3640).

Cross-site scripting (XSS) vulnerability in Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 allows remote attackers to inject arbitrary web script or HTML via crafted text with Shift JIS encoding (CVE-2011-3648).

Mozilla Firefox before 3.6.24 and 4.x through 7.0 and Thunderbird before 3.1.6 and 5.0 through 7.0 do not properly handle JavaScript files that contain many functions, which allows user-assisted remote attackers to cause a denial of service (memory corruption and application crash) or possibly have unspecified other impact via a crafted file that is accessed by debugging APIs, as demonstrated by Firebug (CVE-2011-3650).

The following vulnerabilities affetst Mandriva Linux 2011 only :

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 7.0 and Thunderbird 7.0 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors (CVE-2011-3651).

The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly allocate memory, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors (CVE-2011-3652).

The browser engine in Mozilla Firefox before 8.0 and Thunderbird before 8.0 does not properly handle links from SVG mpath elements to non-SVG elements, which allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via unspecified vectors (CVE-2011-3654).

Mozilla Firefox 4.x through 7.0 and Thunderbird 5.0 through 7.0 perform access control without checking for use of the NoWaiverWrapper wrapper, which allows remote attackers to gain privileges via a crafted web site (CVE-2011-3655).

The following vulnerabilities affects Mandriva Enterpriser Server 5.2 and Mandriva Linux 2010.2 only :

The JSSubScriptLoader in Mozilla Firefox before 3.6.24 and Thunderbird before 3.1.6 does not properly handle XPCNativeWrappers during calls to the loadSubScript method in an add-on, which makes it easier for remote attackers to gain privileges via a crafted web site that leverages certain unwrapping behavior, a related issue to CVE-2011-3004 (CVE-2011-3647).

Additionally, some packages which require so, have been rebuilt and are being provided as updates.

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 6.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

A flaw was found in the way Thunderbird handled certain add-ons.
Malicious, remote content could cause an add-on to elevate its privileges, which could lead to arbitrary code execution with the privileges of the user running Thunderbird. (CVE-2011-3647)

A cross-site scripting (XSS) flaw was found in the way Thunderbird handled certain multibyte character sets. Malicious, remote content could cause Thunderbird to run JavaScript code with the permissions of different remote content. (CVE-2011-3648)

A flaw was found in the way Thunderbird handled large JavaScript scripts. Malicious, remote content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2011-3650)

All Thunderbird users should upgrade to this updated package, which resolves these issues. All running instances of Thunderbird must be restarted for the update to take effect.

Mozilla Firefox and Thunderbird were updated to version 8.0 which fixes several security vulnerabilities :

  - MFSA 2011-52 - Code execution via NoWaiverWrapper     (CVE-2011-3655)

  - MFSA 2011-51 - Cross-origin image theft on Mac with     integrated Intel GPU (CVE-2011-3653)

  - MFSA 2011-50 - Cross-origin data theft using canvas and     Windows D2D (CVE-2011-3649)

  - MFSA 2011-49 - Memory corruption while profiling using     Firebug (CVE-2011-3650)

  - MFSA 2011-48 - Miscellaneous memory safety hazards     (rv:8.0) (CVE-2011-3651, CVE-2011-3652, CVE-2011-3654)

  - MFSA 2011-47 - Potential XSS against sites using     Shift-JIS (CVE-2011-3648)

The Mozilla Project reports :

MFSA 2011-46 loadSubScript unwraps XPCNativeWrapper scope parameter (1.9.2 branch)

MFSA 2011-47 Potential XSS against sites using Shift-JIS

MFSA 2011-48 Miscellaneous memory safety hazards (rv:8.0)

MFSA 2011-49 Memory corruption while profiling using Firebug

MFSA 2011-50 Cross-origin data theft using canvas and Windows D2D

MFSA 2011-51 Cross-origin image theft on Mac with integrated Intel GPU

MFSA 2011-52 Code execution via NoWaiverWrapper

It was discovered that CVE-2011-3004, which addressed possible privilege escalation in addons, also affected Thunderbird 3.1. An attacker could potentially exploit a user who had installed an add-on that used loadSubscript in vulnerable ways. (CVE-2011-3647)

Yosuke Hasegawa discovered that the Mozilla browser engine mishandled invalid sequences in the Shift-JIS encoding. It may be possible to trigger this crash without the use of debugging APIs, which might allow malicious websites to exploit this vulnerability. An attacker could possibly use this flaw this to steal data or inject malicious scripts into web content. (CVE-2011-3648)

Marc Schoenefeld discovered that using Firebug to profile a JavaScript file with many functions would cause Firefox to crash. An attacker might be able to exploit this without using the debugging APIs which would potentially allow an attacker to remotely crash Thunderbird.
(CVE-2011-3650).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-1437 advisory.

    firefox:
    [3.6.24-3.0.1.el6_1]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones

    [3.6.24-3]
    - Update to 3.6.24

    xulrunner:
    [1.9.2.24-2.0.1.el6_1.1]
    - Replace xulrunner-redhat-default-prefs.js with       xulrunner-oracle-default-prefs.js

    [1.9.2.24-2]
    - Update to 1.9.2.24

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of Thunderbird 3.1.x is earlier than 3.1.16 and is potentially affected by the following vulnerabilities:

  - There is an error within the JSSubScriptLoader that     incorrectly unwraps 'XPCNativeWrappers'. By tricking     a user into installing a malicious plug-in, an attacker     could exploit this issue to execute arbitrary code.
    (CVE-2011-3647)

  - Certain invalid sequences are not handled properly in     'Shift-JIS' encoding and can allow cross-site scripting     attacks. (CVE-2011-3648)

  - Profiling JavaScript files with many functions can cause     the application to crash. It may be possible to trigger     this behavior even when the debugging APIs are not being     used. (CVE-2011-3650)

Several vulnerabilities have been found in the Iceape internet suite, an unbranded version of SeaMonkey :

  - CVE-2011-3647     'moz_bug_r_a4' discovered a privilege escalation     vulnerability in addon handling.

  - CVE-2011-3648     Yosuke Hasegawa discovered that incorrect handling of     Shift-JIS encodings could lead to cross-site scripting.

  - CVE-2011-3650     Marc Schoenefeld discovered that profiling the     JavaScript code could lead to memory corruption.

The oldstable distribution (lenny) is not affected. The iceape package only provides the XPCOM code.

Updated firefox packages that fix multiple security issues are now available for Red Hat Enterprise Linux 4, 5, and 6.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Mozilla Firefox is an open source web browser. XULRunner provides the XUL Runtime environment for Mozilla Firefox.

A flaw was found in the way Firefox handled certain add-ons. A web page containing malicious content could cause an add-on to grant itself full browser privileges, which could lead to arbitrary code execution with the privileges of the user running Firefox.
(CVE-2011-3647)

A cross-site scripting (XSS) flaw was found in the way Firefox handled certain multibyte character sets. A web page containing malicious content could cause Firefox to run JavaScript code with the permissions of a different website. (CVE-2011-3648)

A flaw was found in the way Firefox handled large JavaScript scripts.
A web page containing malicious JavaScript could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2011-3650)

For technical details regarding these flaws, refer to the Mozilla security advisories for Firefox 3.6.24. You can find a link to the Mozilla advisories in the References section of this erratum.

All Firefox users should upgrade to these updated packages, which contain Firefox version 3.6.24, which corrects these issues. After installing the update, Firefox must be restarted for the changes to take effect.

Several vulnerabilities have been discovered in Icedove, a mail client based on Thunderbird.

  - CVE-2011-3647     The JSSubScriptLoader does not properly handle     XPCNativeWrappers during calls to the loadSubScript     method in an add-on, which makes it easier for remote     attackers to gain privileges via a crafted website that     leverages certain unwrapping behavior.

  - CVE-2011-3648     A cross-site scripting (XSS) vulnerability allows remote     attackers to inject arbitrary web script or HTML via     crafted text with Shift JIS encoding.

  - CVE-2011-3650     Iceweasel does not properly handle JavaScript files that     contain many functions, which allows user-assisted     remote attackers to cause a denial of service (memory     corruption and application crash) or possibly have     unspecified other impact via a crafted file that is     accessed by debugging APIs, as demonstrated by Firebug.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
63402	GLSA-201301-01 : Mozilla Products: Multiple vulnerabilities (BEAST)	Nessus	Gentoo Local Security Checks	2013/1/8	2025/10/6	critical
57226	SuSE 10 Security Update : mozilla-nss (ZYPP Patch Number 7842) (BEAST)	Nessus	SuSE Local Security Checks	2011/12/13	2022/12/5	critical
56741	RHEL 6 : firefox (RHSA-2011:1437)	Nessus	Red Hat Local Security Checks	2011/11/9	2025/4/14	medium
56765	Mandriva Linux Security Advisory : mozilla (MDVSA-2011:169)	Nessus	Mandriva Local Security Checks	2011/11/10	2021/1/6	critical
56743	RHEL 6 : thunderbird (RHSA-2011:1439)	Nessus	Red Hat Local Security Checks	2011/11/9	2021/1/14	high
74542	openSUSE Security Update : firefox / thunderbird (openSUSE-2011-9)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/14	critical
56762	FreeBSD : mozilla -- multiple vulnerabilities (6c8ad3e8-0a30-11e1-9580-4061862b8c22)	Nessus	FreeBSD Local Security Checks	2011/11/10	2021/1/6	critical
57393	Ubuntu 10.04 LTS / 10.10 / 11.04 : thunderbird vulnerabilities (USN-1254-1)	Nessus	Ubuntu Local Security Checks	2011/12/23	2019/9/19	high
68384	Oracle Linux 5 / 6 : firefox (ELSA-2011-1437)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2025/4/29	medium
56752	Mozilla Thunderbird 3.1.x < 3.1.16 Multiple Vulnerabilities	Nessus	Windows	2011/11/9	2018/7/16	high
56760	Debian DSA-2342-1 : iceape - several vulnerabilities	Nessus	Debian Local Security Checks	2011/11/10	2021/1/11	high
56781	CentOS 4 / 5 : firefox (CESA-2011:1437)	Nessus	CentOS Local Security Checks	2011/11/14	2021/1/4	high
56786	Debian DSA-2345-1 : icedove - several vulnerabilities	Nessus	Debian Local Security Checks	2011/11/14	2021/1/11	high

检测

插件搜索

critical

critical

medium

critical

high

critical

critical

high

medium

high

high

high

high