The remote MiracleLinux 3 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2012-468:03 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and     portability.
    Upgraded from version 3.6.26 to version 10.0.3     Security issues fixed with this release:
     CVE-2012-0451     CRLF injection vulnerability in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3,     Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allows remote     web servers to bypass intended Content Security Policy (CSP) restrictions and possibly conduct cross-site     scripting (XSS) attacks via crafted HTTP headers.
     CVE-2012-0455     Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before     3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly     restrict drag-and-drop operations on javascript: URLs, which allows user-assisted remote attackers to     conduct cross-site scripting (XSS) attacks via a crafted web page, related to a DragAndDropJacking     issue.
     CVE-2012-0456     The SVG Filters implementation in Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x     before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and     SeaMonkey before 2.8 might allow remote attackers to obtain sensitive information from process memory via     vectors that trigger an out-of-bounds read.
     CVE-2012-0457     Use-after-free vulnerability in the nsSMILTimeValueSpec::ConvertBetweenTimeContainer function in Mozilla     Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and     5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 might allow remote     attackers to execute arbitrary code via an SVG animation.
     CVE-2012-0458     Mozilla Firefox before 3.6.28 and 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before     3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly     restrict setting the home page through the dragging of a URL to the home button, which allows user-     assisted remote attackers to execute arbitrary JavaScript code with chrome privileges via a javascript:
    URL that is later interpreted in the about:sessionrestore context.
     CVE-2012-0459     The Cascading Style Sheets (CSS) implementation in Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x     before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8     allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary     code via dynamic modification of a keyframe followed by access to the cssText of the keyframe.
     CVE-2012-0460     Mozilla Firefox 4.x through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0,     Thunderbird ESR 10.x before 10.0.3, and SeaMonkey before 2.8 do not properly restrict write access to the     window.fullScreen object, which allows remote attackers to spoof the user interface via a crafted web     page.
     CVE-2012-0461     Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 3.6.28 and 4.x     through 10.0, Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird     ESR 10.x before 10.0.3, and SeaMonkey before 2.8 allow remote attackers to cause a denial of service     (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.
     CVE-2012-0462     Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox 4.x through 10.0, Firefox     ESR 10.x before 10.0.3, Thunderbird 5.0 through 10.0, Thunderbird ESR 10.x before 10.0.3, and SeaMonkey     before 2.8 allow remote attackers to cause a denial of service (memory corruption and application crash)     or possibly execute arbitrary code via unknown vectors.
     CVE-2012-0464     Use-after-free vulnerability in the browser engine in Mozilla Firefox before 3.6.28 and 4.x through 10.0,     Firefox ESR 10.x before 10.0.3, Thunderbird before 3.1.20 and 5.0 through 10.0, Thunderbird ESR 10.x     before 10.0.3, and SeaMonkey before 2.8 allows remote attackers to execute arbitrary code via vectors     involving an empty argument to the array.join function in conjunction with the triggering of garbage     collection.
     Important: Firefox 10 is not completely backwards-compatible with all Mozilla add-ons and Firefox plug-     ins that worked with Firefox 3.6. Firefox 10 checks compatibility on first-launch, and, depending on the     individual configuration and the installed add-ons and plug-ins, may disable said Add-ons and plug-ins, or     attempt to check for updates and upgrade them. Add-ons and plug-ins may have to be manually updated.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0387 advisory.

    Mozilla Firefox is an open source web browser.

    Several flaws were found in the processing of malformed web content. A web     page containing malicious content could cause Firefox to crash or,     potentially, execute arbitrary code with the privileges of the user     running Firefox. (CVE-2012-0461, CVE-2012-0462, CVE-2012-0464)

    Two flaws were found in the way Firefox parsed certain Scalable Vector     Graphics (SVG) image files. A web page containing a malicious SVG image     file could cause an information leak, or cause Firefox to crash or,     potentially, execute arbitrary code with the privileges of the user running     Firefox. (CVE-2012-0456, CVE-2012-0457)

    A flaw could allow a malicious site to bypass intended restrictions,     possibly leading to a cross-site scripting (XSS) attack if a user were     tricked into dropping a javascript: link onto a frame. (CVE-2012-0455)

    It was found that the home page could be set to a javascript: link. If a     user were tricked into setting such a home page by dragging a link to the     home button, it could cause Firefox to repeatedly crash, eventually     leading to arbitrary code execution with the privileges of the user     running Firefox. (CVE-2012-0458)

    A flaw was found in the way Firefox parsed certain web content containing     cssText. A web page containing malicious content could cause Firefox to     crash or, potentially, execute arbitrary code with the privileges of the     user running Firefox. (CVE-2012-0459)

    It was found that by using the DOM fullscreen API, untrusted content could     bypass the mozRequestFullscreen security protections. A web page containing     malicious web content could exploit this API flaw to cause user interface     spoofing. (CVE-2012-0460)

    A flaw was found in the way Firefox handled pages with multiple Content     Security Policy (CSP) headers. This could lead to a cross-site scripting     attack if used in conjunction with a website that has a header injection     flaw. (CVE-2012-0451)

    For technical details regarding these flaws, refer to the Mozilla security     advisories for Firefox 10.0.3 ESR. You can find a link to the Mozilla     advisories in the References section of this erratum.

    This update also fixes the following bugs:

    * When using the Traditional Chinese locale (zh-TW), a segmentation fault     sometimes occurred when closing Firefox. (BZ#729632)

    * Inputting any text in the Web Console (Tools -> Web Developer ->     Web Console) caused Firefox to crash. (BZ#784048)

    * The java-1.6.0-ibm-plugin and java-1.6.0-sun-plugin packages require the     /usr/lib/mozilla/plugins/ directory on 32-bit systems, and the     /usr/lib64/mozilla/plugins/ directory on 64-bit systems. These     directories are created by the xulrunner package; however, they were     missing from the xulrunner package provided by the RHEA-2012:0327 update.
    Therefore, upgrading to RHEA-2012:0327 removed those directories, causing     dependency errors when attempting to install the java-1.6.0-ibm-plugin or     java-1.6.0-sun-plugin package. With this update, xulrunner once again     creates the plugins directory. This issue did not affect users of Red Hat     Enterprise Linux 6. (BZ#799042)

    All Firefox users should upgrade to these updated packages, which contain     Firefox version 10.0.3 ESR, which corrects these issues. After installing     the update, Firefox must be restarted for the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An updated thunderbird package that fixes multiple security issues is now available for Red Hat Enterprise Linux 5 and 6.

The Red Hat Security Response Team has rated this update as having critical security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

Several flaws were found in the processing of malformed content.
Malicious content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-0461, CVE-2012-0462, CVE-2012-0464)

Two flaws were found in the way Thunderbird parsed certain Scalable Vector Graphics (SVG) image files. An HTML mail message containing a malicious SVG image file could cause an information leak, or cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-0456, CVE-2012-0457)

A flaw could allow malicious content to bypass intended restrictions, possibly leading to a cross-site scripting (XSS) attack if a user were tricked into dropping a 'javascript:' link onto a frame.
(CVE-2012-0455)

It was found that the home page could be set to a 'javascript:' link.
If a user were tricked into setting such a home page by dragging a link to the home button, it could cause Firefox to repeatedly crash, eventually leading to arbitrary code execution with the privileges of the user running Firefox. A similar flaw was found and fixed in Thunderbird. (CVE-2012-0458)

A flaw was found in the way Thunderbird parsed certain, remote content containing 'cssText'. Malicious, remote content could cause Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running Thunderbird. (CVE-2012-0459)

It was found that by using the DOM fullscreen API, untrusted content could bypass the mozRequestFullscreen security protections. Malicious content could exploit this API flaw to cause user interface spoofing.
(CVE-2012-0460)

A flaw was found in the way Thunderbird handled content with multiple Content Security Policy (CSP) headers. This could lead to a cross-site scripting attack if used in conjunction with a website that has a header injection flaw. (CVE-2012-0451)

Note: All issues except CVE-2012-0456 and CVE-2012-0457 cannot be exploited by a specially crafted HTML mail message as JavaScript is disabled by default for mail messages. It could be exploited another way in Thunderbird, for example, when viewing the full remote content of an RSS feed.

All Thunderbird users should upgrade to this updated package, which contains Thunderbird version 10.0.3 ESR, which corrects these issues.
After installing the update, Thunderbird must be restarted for the changes to take effect.

The installed version of Firefox 10.0.x is potentially affected by the following security issues :
  - Multiple memory corruption issues. By tricking a user     into visiting a specially crafted page, these issues may     allow an attacker to execute arbitrary code in the     context of the affected application. (CVE-2012-0454,     CVE-2012-0457, CVE-2012-0459, CVE-2012-0461,     CVE-2012-0462, CVE-2012-0463, CVE-2012-0464)

  - An HTTP Header security bypass vulnerability exists that     can be leveraged by attackers to bypass certain security     restrictions and conduct cross-site scripting attacks.     (CVE-2012-0451).

  - A security bypass vulnerability exists that can be     exploited by an attacker if the victim can be tricked     into setting a new home page by dragging a specially     crafted link to the 'home' button URL, which will set     the user's home page to a 'javascript:' URL.     (CVE-2012-0458) 

  - An information disclosure vulnerability exists due to an     out-of-bounds read in SVG filters. (CVE-2012-0456)

  - A cross-site scripting vulnerability exists that can be     triggered by dragging and dropping 'javascript:' links     onto a frame. (CVE-2012-0455)

  - 'window.fullScreen' is writeable by untrusted content,     allowing attackers to perform UI spoofing attacks.     (CVE-2012-0460)

Several vulnerabilities have been discovered in Iceweasel, a web browser based on Firefox. The included XULRunner library provides rendering services for several other applications included in Debian.

  - CVE-2012-0455     Soroush Dalili discovered that a cross-site scripting     countermeasure related to JavaScript URLs could be     bypassed.

  - CVE-2012-0456     Atte Kettunen discovered an out of bounds read in the     SVG Filters, resulting in memory disclosure.

  - CVE-2012-0458     Mariusz Mlynski discovered that privileges could be     escalated through a JavaScript URL as the home page.

  - CVE-2012-0461     Bob Clary discovered memory corruption bugs, which may     lead to the execution of arbitrary code.

Soroush Dalili discovered that Firefox did not adequately protect against dropping JavaScript links onto a frame. A remote attacker could, through cross-site scripting (XSS), exploit this to modify the contents or steal confidential data. (CVE-2012-0455)

Atte Kettunen discovered a use-after-free vulnerability in Firefox's handling of SVG animations. An attacker could potentially exploit this to execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2012-0457)

Atte Kettunen discovered an out of bounds read vulnerability in Firefox's handling of SVG Filters. An attacker could potentially exploit this to make data from the user's memory accessible to the page content. (CVE-2012-0456)

Mike Brooks discovered that using carriage return line feed (CRLF) injection, one could introduce a new Content Security Policy (CSP) rule which allows for cross-site scripting (XSS) on sites with a separate header injection vulnerability. With cross-site scripting vulnerabilities, if a user were tricked into viewing a specially crafted page, a remote attacker could exploit this to modify the contents, or steal confidential data, within the same domain.
(CVE-2012-0451)

Mariusz Mlynski discovered that the Home button accepted JavaScript links to set the browser Home page. An attacker could use this vulnerability to get the script URL loaded in the privileged about:sessionrestore context. (CVE-2012-0458)

Daniel Glazman discovered that the Cascading Style Sheets (CSS) implementation is vulnerable to crashing due to modification of a keyframe followed by access to the cssText of the keyframe. If the user were tricked into opening a specially crafted web page, an attacker could exploit this to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox. (CVE-2012-0459)

Matt Brubeck discovered that Firefox did not properly restrict access to the window.fullScreen object. If the user were tricked into opening a specially crafted web page, an attacker could potentially use this vulnerability to spoof the user interface. (CVE-2012-0460)

Bob Clary, Christian Holler, Jesse Ruderman, Michael Bebenita, David Anderson, Jeff Walden, Vincenzo Iozzo, and Willem Pinckaers discovered memory safety issues affecting Firefox. If the user were tricked into opening a specially crafted page, an attacker could exploit these to cause a denial of service via application crash, or potentially execute code with the privileges of the user invoking Firefox.
(CVE-2012-0461, CVE-2012-0462, CVE-2012-0464).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0387 advisory.

    firefox:

    [10.0.3-1.0.1.el6_2]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat ones

    [10.0.3-1]
    - Update to 10.0.3 ESR

    xulrunner:

    [10.0.3-1.0.1.el6_2]
    - Replace xulrunner-redhat-default-prefs.js with
    - xulrunner-oracle-default-prefs.js

    [10.0.3-1]
    - Update to 10.0.3 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
284409	MiracleLinux 3 : firefox-10.0.3-1.0.1.AXS3, xulrunner-10.0.3-1.0.1.AXS3 (AXSA:2012-468:03)	Nessus	Miracle Linux Local Security Checks	2026/1/14	2026/1/14	medium
58338	RHEL 6 : firefox (RHSA-2012:0387)	Nessus	Red Hat Local Security Checks	2012/3/14	2025/4/15	medium
58345	CentOS 5 / 6 : thunderbird (CESA-2012:0388)	Nessus	CentOS Local Security Checks	2012/3/15	2021/1/4	high
58348	Firefox 10.0.x < 10.0.3 Multiple Vulnerabilities	Nessus	Windows	2012/3/15	2026/6/23	high
58357	Debian DSA-2433-1 : iceweasel - several vulnerabilities	Nessus	Debian Local Security Checks	2012/3/16	2021/1/11	high
58383	Ubuntu 10.04 LTS / 10.10 / 11.04 / 11.10 : firefox vulnerabilities (USN-1400-1)	Nessus	Ubuntu Local Security Checks	2012/3/19	2019/9/19	high
68495	Oracle Linux 5 / 6 : firefox (ELSA-2012-0387)	Nessus	Oracle Linux Local Security Checks	2013/7/12	2024/10/22	medium

检测

插件搜索

medium

medium

high

high

high

high

medium