运行版本 MAIN 4.05 的远程 NewStart CGSL 主机安装有受多个漏洞影响的 firefox 程序包：- 使用 blob: 和数据解码的文件下载：尽管存在钓鱼和恶意软件保护功能及其可疑站点和文件的阻止列表，URL 元素仍可绕过正常文件下载检查。这会造成恶意站点诱使用户下载本应检测为可疑的可执行文件。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7814) - 当调整图像对象大小时，如果调整大小期间引用的对象已经从内存中释放，则在设计模式中可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7819) - 内容安全策略 (CSP) 沙盒指令未创建文档的唯一来源，造成其表现为似乎总是指明 allow-same-origin 关键字。这会允许从不安全的内容发起跨站脚本 (XSS) 攻击。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7823) - 当在树遍历期间过早删除编辑器 DOM 节点，并且仍然与文件绑定时，可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7809) - Firefox 54、Firefox ESR 52.2 和 Thunderbird 52.2 中已报告内存安全错误。有迹象表明其中某些错误可导致内存损坏，我们推测若攻击者有意操控，就能利用其中部分错误来运行任意代码。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7779) - 当使用缓存的样式数据将样式规则应用于伪元素（例如 ::first-line）时出现越界读取。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7753) - 当在 DOM 内操纵可访问富互联网应用程序 (ARIA) 属性时，可能出现缓冲区溢出。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7785) - 当图像渲染器尝试绘制不可显示的 SVG 元素时，可能出现缓冲区溢出。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7786) - 在页面重新加载期间，可以在含有内嵌的 iframe 页面上绕过同源策略保护，允许 iframes 在顶级页面上访问内容，导致信息泄露。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7787) - 如果证书中拥有极长的对象标识符 (OID)，当在证书管理器中查看证书时，将会发生缓冲区溢出。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7792) - 在包含 iframe 的页面，data: 协议可用于创建模态警告，将在页面导航后在任意域上呈现，欺骗来自 iframe 内容的模态警告来源。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7791) - 当保持连接的对象在断开连接操作完成前释放，在 WebSockets 中可能出现释放后使用漏洞。这会导致可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7800) - 开发人员工具功能受到 XUL 注入漏洞影响，原因在于不当清理 Web 页面源代码。在最糟糕的情况下，当打开带有样式编辑器工具的恶意页面时，可允许任意代码执行。该漏洞影响 Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7798) - 在调整图像元素大小的事件期间，操纵 DOM 时可能出现释放后使用漏洞。如果由于缺少强引用造成已经释放此类元素，当访问已经释放的元素时，可能出现潜在的可利用崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7802) - 当更新的样式对象在仍使用时遭到释放，在窗口调整大小期间，重新计算 marquee 元素的布局时，可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7801) - 一种机制使用 AppCache 劫持域中的 URL，从域中的子路径通过提供文件来使用回退。已经通过要求将回退文件放在清单目录中来解决此问题。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7807) - 当页面的内容安全策略 (CSP) 标头包含沙盒指令时，会忽略其他指令。这会导致不正确执行 CSP。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7803) - 在已经释放观察者后，在帧重建期间，当读取图像观察者时，可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7784) - 当通过 DOM 在容器内操纵可访问富互联网应用程序 (ARIA) 元素的数组时，可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7818) - 以用于 WebGL 内容的 ANGLE 图库绘制及验证元素时，会发生缓冲区溢出情况。这是由于在检查期间在库内传递不正确的值所致，并导致潜在可利用的崩溃。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7824) - Firefox 55 和 Firefox ESR 52.3 中已报告内存安全错误。有迹象表明其中某些错误可导致内存损坏，我们推测若攻击者有意操控，就能利用其中部分错误来运行任意代码。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7810) - 当工作进程或相关窗口在仍使用时遭到释放，Fetch API 中会发生释放后使用漏洞，导致潜在的可利用崩溃。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7793) - 在 Firefox 中发现隐私缺陷。在私人浏览模式下，工作线程可将持久性数据写入 IndexedDB，该数据在退出时不会被清除，并且会在多个会话间持久保存。恶意网站可利用此缺陷绕过隐私浏览保护和唯一指纹访客。(CVE-2017-7843) - 刷新和调整布局大小时出现释放后使用漏洞，原因在于 PressShell 对象在仍然使用时已经释放。这会导致在此类操作中造成潜在可利用的崩溃。该漏洞影响 Firefox < 57、Firefox ESR < 52.5 和 Thunderbird < 52.5。(CVE-2017-7828) - Firefox 56 和 Firefox ESR 52.4 中已报告内存安全错误。有迹象表明其中某些错误可导致内存损坏，我们推测若攻击者有意操控，就能利用其中部分错误来运行任意代码。该漏洞影响 Firefox < 57、Firefox ESR < 52.5 和 Thunderbird < 52.5。(CVE-2017-7826) - Resource Timing API 错误显示了跨源 iframe 中的导航。这是同源策略违规，可能导致用户加载的 URL 数据遭窃。该漏洞影响 Firefox < 57、Firefox ESR < 52.5 和 Thunderbird < 52.5。(CVE-2017-7830) 请注意，Nessus 并未针对此问题进行测试，而仅依赖应用程序自我报告的版本号。

运行版本 MAIN 4.05 的远程 NewStart CGSL 主机安装有受多个漏洞影响的 thunderbird 程序包：- 使用 blob: 和数据解码的文件下载：尽管存在钓鱼和恶意软件保护功能及其可疑站点和文件的阻止列表，URL 元素仍可绕过正常文件下载检查。这会造成恶意站点诱使用户下载本应检测为可疑的可执行文件。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7814) - 当调整图像对象大小时，如果调整大小期间引用的对象已经从内存中释放，则在设计模式中可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7819) - 内容安全策略 (CSP) 沙盒指令未创建文档的唯一来源，造成其表现为似乎总是指明 allow-same-origin 关键字。这会允许从不安全的内容发起跨站脚本 (XSS) 攻击。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7823) - 当在树遍历期间过早删除编辑器 DOM 节点，并且仍然与文件绑定时，可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7809) - Firefox 54、Firefox ESR 52.2 和 Thunderbird 52.2 中已报告内存安全错误。有迹象表明其中某些错误可导致内存损坏，我们推测若攻击者有意操控，就能利用其中部分错误来运行任意代码。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7779) - 当使用缓存的样式数据将样式规则应用于伪元素（例如 ::first-line）时出现越界读取。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7753) - 当在 DOM 内操纵可访问富互联网应用程序 (ARIA) 属性时，可能出现缓冲区溢出。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7785) - 当图像渲染器尝试绘制不可显示的 SVG 元素时，可能出现缓冲区溢出。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7786) - 在页面重新加载期间，可以在含有内嵌的 iframe 页面上绕过同源策略保护，允许 iframes 在顶级页面上访问内容，导致信息泄露。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7787) - 如果证书中拥有极长的对象标识符 (OID)，当在证书管理器中查看证书时，将会发生缓冲区溢出。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7792) - 在包含 iframe 的页面，data: 协议可用于创建模态警告，将在页面导航后在任意域上呈现，欺骗来自 iframe 内容的模态警告来源。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7791) - 当保持连接的对象在断开连接操作完成前释放，在 WebSockets 中可能出现释放后使用漏洞。这会导致可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7800) - 在调整图像元素大小的事件期间，操纵 DOM 时可能出现释放后使用漏洞。如果由于缺少强引用造成已经释放此类元素，当访问已经释放的元素时，可能出现潜在的可利用崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7802) - 当更新的样式对象在仍使用时遭到释放，在窗口调整大小期间，重新计算 marquee 元素的布局时，可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7801) - 一种机制使用 AppCache 劫持域中的 URL，从域中的子路径通过提供文件来使用回退。已经通过要求将回退文件放在清单目录中来解决此问题。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7807) - 当页面的内容安全策略 (CSP) 标头包含沙盒指令时，会忽略其他指令。这会导致不正确执行 CSP。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7803) - 在已经释放观察者后，在帧重建期间，当读取图像观察者时，可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。此漏洞会影响 Thunderbird < 52.3、Firefox ESR < 52.3 和 Firefox < 55。(CVE-2017-7784) - 当通过 DOM 在容器内操纵可访问富互联网应用程序 (ARIA) 元素的数组时，可能出现释放后使用漏洞。这会导致潜在可利用的崩溃。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7818) - 以用于 WebGL 内容的 ANGLE 图库绘制及验证元素时，会发生缓冲区溢出情况。这是由于在检查期间在库内传递不正确的值所致，并导致潜在可利用的崩溃。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7824) - Firefox 55 和 Firefox ESR 52.3 中已报告内存安全错误。有迹象表明其中某些错误可导致内存损坏，我们推测若攻击者有意操控，就能利用其中部分错误来运行任意代码。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7810) - 当工作进程或相关窗口在仍使用时遭到释放，Fetch API 中会发生释放后使用漏洞，导致潜在的可利用崩溃。该漏洞影响 Firefox < 56、Firefox ESR < 52.4 和 Thunderbird < 52.4。(CVE-2017-7793) - 刷新和调整布局大小时出现释放后使用漏洞，原因在于 PressShell 对象在仍然使用时已经释放。这会导致在此类操作中造成潜在可利用的崩溃。该漏洞影响 Firefox < 57、Firefox ESR < 52.5 和 Thunderbird < 52.5。(CVE-2017-7828) - Firefox 56 和 Firefox ESR 52.4 中已报告内存安全错误。有迹象表明其中某些错误可导致内存损坏，我们推测若攻击者有意操控，就能利用其中部分错误来运行任意代码。该漏洞影响 Firefox < 57、Firefox ESR < 52.5 和 Thunderbird < 52.5。(CVE-2017-7826) - Resource Timing API 错误显示了跨源 iframe 中的导航。这是同源策略违规，可能导致用户加载的 URL 数据遭窃。该漏洞影响 Firefox < 57、Firefox ESR < 52.5 和 Thunderbird < 52.5。(CVE-2017-7830) 请注意，Nessus 并未针对此问题进行测试，而仅依赖应用程序自我报告的版本号。

Versions of Mozilla Firefox ESR earlier than 52.4 are unpatched for the following vulnerabilities :

 - A flaw exists in 'js/src/vm/StructuredClone.cpp' that is triggered when handling structured clone reads. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor.
 - A flaw exists in 'editor/libeditor/HTMLEditor.cpp' that is triggered when handling root elements in the editor. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in 'dom/media/GraphDriver.cpp' that is triggered when handling errors. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An overflow condition exists in the 'hnj_hyphen_hyphword()' function in 'hyphen.c' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause a buffer overflow and potentially execute arbitrary code within a process linked against the library.
 - A flaw exists in the 'EditorBase::FinalizeSelection()' function in 'editor/libeditor/EditorBase.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'DocAccessible::DoARIAOwnsRelocation()' function in 'accessible/generic/DocAccessible.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A use-after-free condition exists in the Fetch API related to missing thread safety. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free error exists in 'accessible/generic/DocAccessible.cpp' that is triggered when manipulating Accessible Rich Internet Applications (ARIA) elements. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free error exists in design mode that is triggered when objects are resized. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free error exists in the 'ssl3_HandleCertificateVerify()' function in 'lib/ssl/ssl3con.c' that is triggered when handling handshake hashes during TLS '1.2' exchanges. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A flaw exists in the PendingLookup class in 'toolkit/components/downloads/ApplicationReputation.cpp' that is triggered when handling downloads encoded with data: and blob: URL elements. This may allow a context-dependent attacker to bypass the phishing and malware protection feature.
 - A flaw exists in the 'MacOSFontEntry::ReadCMAP()' function in 'gfx/thebes/gfxMacPlatformFontList.mm' that is triggered as certain tibetan and arabic unicode characters are displayed as whitespace in combination with macOS fonts. With a specially crafted IDN domain, a context-dependent attacker can spoof a valid URL and conduct phishing attacks.
 - A flaw exists in the 'nsDocument::InitCSP()' function in 'dom/base/nsDocument.cpp' that is triggered as the sandbox directive does not create unique origin. This may result in incorrect enforcement of the content security policy (CSP).
 - An unspecified flaw exists that is triggered when drawing and validating elements with the ANGLE graphics library. This may allow a context-dependent attacker to cause a buffer overflow, potentially allowing the execution of arbitrary code.

Versions of Mozilla Firefox earlier than 56 are unpatched for the following vulnerabilities :

 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor.
 - A flaw exists in the 'js::AddPropertyTypesAfterProtoChange()' function in 'js/src/vm/NativeObject.cpp' that is triggered when handling the 'unknown-properties' flag. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in 'layout/style/nsCSSPseudoElements.cpp' that is triggered when handling pseudo-element atoms. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor.
 - A flaw exists in 'dom/base/nsDocument.cpp' that is triggered when handling intersection observers. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'LayerTransactionParent::Destroy()' function in 'gfx/layers/ipc/LayerTransactionParent.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An overflow condition exists in the 'FPSCounter::PrintHistogram()' function in 'gfx/layers/composite/FPSCounter.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause a buffer overflow and potentially execute arbitrary code.
 - A flaw exists in the 'FlagAllOperandsAsHavingRemovedUses()' function in 'js/src/jit/IonAnalysis.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in 'memory/mozjemalloc/mozjemalloc.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'ReadCompressedIndexDataValuesFromBlob()' function in 'dom/indexedDB/ActorsParent.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor.
 - A flaw exists in 'js/src/vm/StructuredClone.cpp' that is triggered when handling structured clone reads. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor.
 - A flaw exists in 'editor/libeditor/HTMLEditor.cpp' that is triggered when handling root elements in the editor. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in 'dom/media/GraphDriver.cpp' that is triggered when handling errors. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An overflow condition exists in the 'hnj_hyphen_hyphword()' function in 'hyphen.c' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause a buffer overflow and potentially execute arbitrary code within a process linked against the library.
 - A flaw exists in the 'EditorBase::FinalizeSelection()' function in 'editor/libeditor/EditorBase.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the 'DocAccessible::DoARIAOwnsRelocation()' function in 'accessible/generic/DocAccessible.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An unspecified flaw exists that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. No further details have been provided by the vendor.
 - A use-after-free condition exists in the Fetch API related to missing thread safety. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A flaw exists that is triggered when pages enter fullscreen mode without user notification. This allows a context-dependent attacker to spoof the address bar.
 - A use-after-free error exists in 'accessible/generic/DocAccessible.cpp' that is triggered when manipulating Accessible Rich Internet Applications (ARIA) elements. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free error exists in design mode that is triggered when objects are resized. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free error exists in the 'ssl3_HandleCertificateVerify()' function in 'lib/ssl/ssl3con.c' that is triggered when handling handshake hashes during TLS '1.2' exchanges. This may allow a context-dependent attacker to dereference already freed memory and potentially execute arbitrary code.
 - A flaw exists that is triggered as the content principal is not properly checked when handling drag and drop actions onto the browser UI. With specially crafted web content including file: URLs, a context-dependent attacker can open local files.
 - A flaw exists in the PendingLookup class in 'toolkit/components/downloads/ApplicationReputation.cpp' that is triggered when handling downloads encoded with data: and blob: URL elements. This may allow a context-dependent attacker to bypass the phishing and malware protection feature.
 - An integer truncation flaw exists in the JavaScript parser that may allow a context-dependent attacker to potentially disclose memory contents.
 - A flaw exists in the 'MacOSFontEntry::ReadCMAP()' function in 'gfx/thebes/gfxMacPlatformFontList.mm' that is triggered as certain tibetan and arabic unicode characters are displayed as whitespace in combination with macOS fonts. With a specially crafted IDN domain, a context-dependent attacker can spoof a valid URL and conduct phishing attacks.
 - A flaw exists that is triggered when creating a modal dialog using the data: protocol via JavaScript. With a specially crafted web page, a context-dependent attacker can spoof the origin of the modal dialog.
 - A flaw exists in the WebExtensions component that is triggered when handling popups and panels in the extension UI. This may allow a context-dependent attacker to load an 'about:' URL.
 - A flaw exists in the WebExtensions component that is triggered when handling file downloads. This may allow a context-dependent attacker to download and open files without user interaction.
 - A flaw exists in the 'nsDocument::InitCSP()' function in 'dom/base/nsDocument.cpp' that is triggered as the sandbox directive does not create unique origin. This may result in incorrect enforcement of the content security policy (CSP).
 - A flaw exists in the WebCrypto API that is triggered as the AES-GCM implementation allows a zero-length IV. This may allow a context-dependent attacker to determine the authentication key.
 - A flaw exists that is is triggered as results of the 'instanceof' operator can be manipulated. With specially crafted web content, a context-dependent attacker can bypass the Xray wrapper mechanism.
 - An unspecified flaw exists that is triggered when drawing and validating elements with the ANGLE graphics library. This may allow a context-dependent attacker to cause a buffer overflow, potentially allowing the execution of arbitrary code.
 - A flaw exists related to speculative execution, which is used as a performance feature to speed up operations. This optimization can result in memory being cached during indirect branch prediction. This may allow a local attacker to train the Branch Target Buffer (BTB) to trigger a false prediction to a specially crafted memory location, causing a speculative execution of a crafted gadget and the caching of arbitrary memory. Using a side-channel attack on the cache the attacker can disclose parts of the privileged kernel memory.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
127356	NewStart CGSL MAIN 4.05：firefox 多个漏洞 (NS-SA-2019-0116)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2024/5/7	critical
127363	NewStart CGSL MAIN 4.05：thunderbird 多个漏洞 (NS-SA-2019-0119)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2024/5/7	critical
700331	Mozilla Firefox ESR < 52.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2018/8/21	2019/11/6	high
700321	Mozilla Firefox < 56 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2018/8/21	2019/3/6	high

检测

插件搜索

critical

critical

high

high