The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2702-1 advisory.

    Gary Kwong, Christian Holler, Byron Campen, Tyson Smith, Bobby Holley, Chris Coulson, and Eric Rahm     discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service via application     crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2015-4473,     CVE-2015-4474)

    Aki Helin discovered an out-of-bounds read when playing malformed MP3 content in some circumstances. If a     user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to     obtain sensitive information, cause a denial of service via application crash, or execute arbitrary code     with the privileges of the user invoking Firefox. (CVE-2015-4475)

    A use-after-free was discovered during MediaStream playback in some circumstances. If a user were tricked     in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of     service via application crash or execute arbitrary code with the priviliges of the user invoking Firefox.
    (CVE-2015-4477)

    Andr Bargull discovered that non-configurable properties on javascript objects could be redefined when     parsing JSON. If a user were tricked in to opening a specially crafted website, an attacker could     potentially exploit this to bypass same-origin restrictions. (CVE-2015-4478)

    Multiple integer overflows were discovered in libstagefright. If a user were tricked in to opening a     specially crafted website, an attacker could potentially exploit these to cause a denial of service via     application crash, or execute arbitrary code with the privileges of the user invoking Firefox.
    (CVE-2015-4479, CVE-2015-4480, CVE-2015-4493)

    Jukka Jylnki discovered a crash that occurs because javascript does not properly gate access to Atomics     or SharedArrayBuffers in some circumstances. If a user were tricked in to opening a specially crafted     website, an attacker could potentially exploit this to cause a denial of service. (CVE-2015-4484)

    Abhishek Arya discovered 2 buffer overflows in libvpx when decoding malformed WebM content in some     circumstances. If a user were tricked in to opening a specially crafted website, an attacker could     potentially exploit these to cause a denial of service via application crash, or execute arbitrary code     with the privileges of the user invoking Firefox. (CVE-2015-4485, CVE-2015-4486)

    Ronald Crane reported 3 security issues. If a user were tricked in to opening a specially crafted website,     an attacker could potentially exploit these, in combination with another security vulnerability, to cause     a denial of service via application crash, or execute arbitrary code with the privileges of the user     invoking Firefox. (CVE-2015-4487, CVE-2015-4488, CVE-2015-4489)

    Christoph Kerschbaumer discovered an issue with Mozilla's implementation of Content Security Policy (CSP),     which could allow for a more permissive usage in some cirucumstances. An attacker could potentially     exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2015-4490)

    Gustavo Grieco discovered a heap overflow in gdk-pixbuf. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit this to cause a denial of service via application     crash or execute arbitrary code with the priviliges of the user invoking Firefox. (CVE-2015-4491)

    Looben Yang discovered a use-after-free when using XMLHttpRequest with shared workers in some     circumstances. If a user were tricked in to opening a specially crafted website, an attacker could     potentially exploit this to cause a denial of service via application crash or execute arbitrary code with     the priviliges of the user invoking Firefox. (CVE-2015-4492)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

MozillaFirefox ESR was updated to version 38.4.0ESR to fix multiple security issues.

MFSA 2015-116/CVE-2015-4513 Miscellaneous memory safety hazards (rv:42.0 / rv:38.4)

MFSA 2015-122/CVE-2015-7188 Trailing whitespace in IP address hostnames can bypass same-origin policy

MFSA 2015-123/CVE-2015-7189 Buffer overflow during image interactions in canvas

MFSA 2015-127/CVE-2015-7193 CORS preflight is bypassed when non-standard Content-Type headers are received

MFSA 2015-128/CVE-2015-7194 Memory corruption in libjar through zip files

MFSA 2015-130/CVE-2015-7196 JavaScript garbage collection crash with Java applet

MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200 Vulnerabilities found through code inspection

MFSA 2015-132/CVE-2015-7197 Mixed content WebSocket policy bypass through workers

MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183 NSS and NSPR memory corruption issues

It also includes fixes from 38.3.0ESR :

MFSA 2015-96/CVE-2015-4500/CVE-2015-4501 Miscellaneous memory safety hazards (rv:41.0 / rv:38.3)

MFSA 2015-101/CVE-2015-4506 Buffer overflow in libvpx while parsing vp9 format video

MFSA 2015-105/CVE-2015-4511 Buffer overflow while decoding WebM video

MFSA 2015-106/CVE-2015-4509 Use-after-free while manipulating HTML media content

MFSA 2015-110/CVE-2015-4519 Dragging and dropping images exposes final URL after redirects

MFSA 2015-111/CVE-2015-4520 Errors in the handling of CORS preflight request headers

MFSA 2015-112/CVE-2015-4517/CVE-2015-4521/CVE-2015-4522 CVE-2015-7174/CVE-2015-7175/CVE-2015-7176/CVE-2015-7177 CVE-2015-7180 Vulnerabilities found through code inspection

It also includes fixes from the Firefox 38.2.1ESR release :

MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free when resizing canvas element during restyling

MFSA 2015-95/CVE-2015-4498 (bsc#943558) Add-on notification bypass through data URLs

It also includes fixes from the Firefox 38.2.0ESR release :

MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)

MFSA 2015-80/CVE-2015-4475 Out-of-bounds read with malformed MP3 file

MFSA 2015-82/CVE-2015-4478 Redefinition of non-configurable JavaScript object properties

MFSA 2015-83/CVE-2015-4479 Overflow issues in libstagefright

MFSA 2015-87/CVE-2015-4484 Crash when using shared memory in JavaScript

MFSA 2015-88/CVE-2015-4491 Heap overflow in gdk-pixbuf when scaling bitmap images

MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 Buffer overflows on Libvpx when decoding WebM video

MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489 Vulnerabilities found through code inspection

MFSA 2015-92/CVE-2015-4492 Use-after-free in XMLHttpRequest with shared workers

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues have been found in Icedove, Debian's version of the Mozilla Thunderbird mail client: Multiple memory safety errors, integer overflows, buffer overflows and other implementation errors may lead to the execution of arbitrary code or denial of service.

The remote Ubuntu 14.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-2712-1 advisory.

    Gary Kwong, Christian Holler, and Byron Campen discovered multiple memory safety issues in Thunderbird. If     a user were tricked in to opening a specially crafted message, an attacker could potentially exploit these     to cause a denial of service via application crash, or execute arbitrary code with the privileges ofthe     user invoking Thunderbird. (CVE-2015-4473)

    Ronald Crane reported 3 security issues. If a user were tricked in to opening a specially crafted message,     an attacker could potentially exploit these, in combination with another security vulnerability, to cause     a denial of service via application crash, or execute arbitrary code with the privileges of the user     invoking Thunderbird. (CVE-2015-4487, CVE-2015-4488, CVE-2015-4489)

    Gustavo Grieco discovered a heap overflow in gdk-pixbuf. If a user were tricked in to opening a specially     crafted message, an attacker could potentially exploit this to cause a denial of service via application     crash or execute arbitrary code with the priviliges of the user invoking Thunderbird. (CVE-2015-4491)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues have been found in Iceweasel, Debian's version of the Mozilla Firefox web browser: Multiple memory safety errors, integer overflows, buffer overflows, use-after-frees and other implementation errors may lead to the execution of arbitrary code, bypass of the same-origin policy or denial of service.

Debian follows the extended support releases (ESR) of Firefox. Support for the 31.x series has ended, so starting with this update we're now following the 38.x releases.

Mozilla Firefox was updated to version 38.2.1 ESR to fix several critical and non critical security vulnerabilities.

  - Firefox was updated to 38.2.1 ESR (bsc#943608)

  - MFSA 2015-94/CVE-2015-4497 (bsc#943557) Use-after-free     when resizing canvas element during restyling

  - MFSA 2015-95/CVE-2015-4498 (bsc#943558) Add-on     notification bypass through data URLs

  - Firefox was updated to 38.2.0 ESR (bsc#940806)

  - MFSA 2015-78/CVE-2015-4495 (bmo#1178058, bmo#1179262)     Same origin violation and local file stealing via PDF     reader

  - MFSA 2015-79/CVE-2015-4473/CVE-2015-4474 (bmo#1143130,     bmo#1161719, bmo#1177501, bmo#1181204, bmo#1184068,     bmo#1188590, bmo#1146213, bmo#1178890, bmo#1182711)     Miscellaneous memory safety hazards (rv:40.0 / rv:38.2)

  - MFSA 2015-80/CVE-2015-4475 (bmo#1175396) Out-of-bounds     read with malformed MP3 file

  - MFSA 2015-82/CVE-2015-4478 (bmo#1105914) Redefinition of     non-configurable JavaScript object properties

  - MFSA 2015-83/CVE-2015-4479 (bmo#1185115, bmo#1144107,     bmo#1170344, bmo#1186718) Overflow issues in     libstagefright

  - MFSA 2015-87/CVE-2015-4484 (bmo#1171540) Crash when     using shared memory in JavaScript

  - MFSA 2015-88/CVE-2015-4491 (bmo#1184009) Heap overflow     in gdk-pixbuf when scaling bitmap images

  - MFSA 2015-89/CVE-2015-4485/CVE-2015-4486 (bmo#1177948,     bmo#1178148) Buffer overflows on Libvpx when decoding     WebM video

  - MFSA 2015-90/CVE-2015-4487/CVE-2015-4488/CVE-2015-4489     (bmo#1176270, bmo#1182723, bmo#1171603) Vulnerabilities     found through code inspection

  - MFSA 2015-92/CVE-2015-4492 (bmo#1185820) Use-after-free     in XMLHttpRequest with shared workers

Mozilla NSS switched the CKBI ABI from 1.98 to 2.4, which is what Firefox 38ESR uses.

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
85344	Ubuntu 14.04 LTS : Firefox vulnerabilities (USN-2702-1)	Nessus	Ubuntu Local Security Checks	2015/8/12	2024/8/27	medium
87063	SUSE SLES10 Security Update : Mozilla Firefox (SUSE-SU-2015:2081-1)	Nessus	SuSE Local Security Checks	2015/11/25	2021/1/6	critical
87164	Debian DSA-3410-1 : icedove - security update	Nessus	Debian Local Security Checks	2015/12/2	2021/1/11	critical
85648	Ubuntu 14.04 LTS : Thunderbird vulnerabilities (USN-2712-1)	Nessus	Ubuntu Local Security Checks	2015/8/26	2024/8/28	critical
85356	Debian DSA-3333-1 : iceweasel - security update	Nessus	Debian Local Security Checks	2015/8/13	2021/1/11	critical
85763	SUSE SLED12 / SLES12 Security Update : MozillaFirefox, mozilla-nss (SUSE-SU-2015:1476-1)	Nessus	SuSE Local Security Checks	2015/9/3	2022/5/25	critical

检测

插件搜索

medium

critical

critical

critical

critical

critical