The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - libical 1.0 allows remote attackers to cause a denial of     service (use-after-free) via a crafted ics file.
    (CVE-2016-5824)

  - A use-after-free vulnerability can occur while parsing     an HTML5 stream in concert with custom HTML elements.
    This results in the stream parser object being freed     while still in use, leading to a potentially exploitable     crash. This vulnerability affects Thunderbird < 60.5,     Firefox ESR < 60.5, and Firefox < 65. (CVE-2018-18500)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 64 and Firefox ESR 60.4.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort that some of     these could be exploited to run arbitrary code. This     vulnerability affects Thunderbird < 60.5, Firefox ESR <     60.5, and Firefox < 65. (CVE-2018-18501)

  - An earlier fix for an Inter-process Communication (IPC)     vulnerability, CVE-2011-3079, added authentication to     communication between IPC endpoints and server parents     during IPC process creation. This authentication is     insufficient for channels created after the IPC process     is started, leading to the authentication not being     correctly applied to later channels. This could allow     for a sandbox escape through IPC channels due to lack of     message validation in the listener process. This     vulnerability affects Thunderbird < 60.5, Firefox ESR <     60.5, and Firefox < 65. (CVE-2018-18505)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 63 and Firefox ESR 60.3.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort that some of     these could be exploited to run arbitrary code. This     vulnerability affects Thunderbird < 60.4, Firefox ESR <     60.4, and Firefox < 64. (CVE-2018-12405)

  - A use-after-free vulnerability can occur after deleting     a selection element due to a weak reference to the     select element in the options collection. This results     in a potentially exploitable crash. This vulnerability     affects Thunderbird < 60.4, Firefox ESR < 60.4, and     Firefox < 64. (CVE-2018-18492)

  - A buffer overflow can occur in the Skia library during     buffer offset calculations with hardware accelerated     canvas 2D actions due to the use of 32-bit calculations     instead of 64-bit. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox <     64. (CVE-2018-18493)

  - A same-origin policy violation allowing the theft of     cross-origin URL entries when using the Javascript     location property to cause a redirection to another site     using performance.getEntries(). This is a same-origin     policy violation and could allow for data theft. This     vulnerability affects Thunderbird < 60.4, Firefox ESR <     60.4, and Firefox < 64. (CVE-2018-18494)

  - A potential vulnerability leading to an integer overflow     can occur during buffer size calculations for images     when a raw value is used instead of the checked value.
    This leads to a possible out-of-bounds write. This     vulnerability affects Thunderbird < 60.4, Firefox ESR <     60.4, and Firefox < 64. (CVE-2018-18498)

  - Incorrect texture handling in Angle in Google Chrome     prior to 70.0.3538.67 allowed a remote attacker to     perform an out of bounds memory read via a crafted HTML     page. (CVE-2018-17466)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 4.06, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - libical 1.0 allows remote attackers to cause a denial of     service (use-after-free) via a crafted ics file.
    (CVE-2016-5824)

  - A use-after-free vulnerability can occur while parsing     an HTML5 stream in concert with custom HTML elements.
    This results in the stream parser object being freed     while still in use, leading to a potentially exploitable     crash. This vulnerability affects Thunderbird < 60.5,     Firefox ESR < 60.5, and Firefox < 65. (CVE-2018-18500)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 64 and Firefox ESR 60.4.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort that some of     these could be exploited to run arbitrary code. This     vulnerability affects Thunderbird < 60.5, Firefox ESR <     60.5, and Firefox < 65. (CVE-2018-18501)

  - An earlier fix for an Inter-process Communication (IPC)     vulnerability, CVE-2011-3079, added authentication to     communication between IPC endpoints and server parents     during IPC process creation. This authentication is     insufficient for channels created after the IPC process     is started, leading to the authentication not being     correctly applied to later channels. This could allow     for a sandbox escape through IPC channels due to lack of     message validation in the listener process. This     vulnerability affects Thunderbird < 60.5, Firefox ESR <     60.5, and Firefox < 65. (CVE-2018-18505)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 63 and Firefox ESR 60.3.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort that some of     these could be exploited to run arbitrary code. This     vulnerability affects Thunderbird < 60.4, Firefox ESR <     60.4, and Firefox < 64. (CVE-2018-12405)

  - A use-after-free vulnerability can occur after deleting     a selection element due to a weak reference to the     select element in the options collection. This results     in a potentially exploitable crash. This vulnerability     affects Thunderbird < 60.4, Firefox ESR < 60.4, and     Firefox < 64. (CVE-2018-18492)

  - A buffer overflow can occur in the Skia library during     buffer offset calculations with hardware accelerated     canvas 2D actions due to the use of 32-bit calculations     instead of 64-bit. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox <     64. (CVE-2018-18493)

  - A same-origin policy violation allowing the theft of     cross-origin URL entries when using the Javascript     location property to cause a redirection to another site     using performance.getEntries(). This is a same-origin     policy violation and could allow for data theft. This     vulnerability affects Thunderbird < 60.4, Firefox ESR <     60.4, and Firefox < 64. (CVE-2018-18494)

  - A potential vulnerability leading to an integer overflow     can occur during buffer size calculations for images     when a raw value is used instead of the checked value.
    This leads to a possible out-of-bounds write. This     vulnerability affects Thunderbird < 60.4, Firefox ESR <     60.4, and Firefox < 64. (CVE-2018-18498)

  - Incorrect texture handling in Angle in Google Chrome     prior to 70.0.3538.67 allowed a remote attacker to     perform an out of bounds memory read via a crafted HTML     page. (CVE-2018-17466)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 4.05, has firefox packages installed that are affected by multiple vulnerabilities:

  - A use-after-free vulnerability can occur while parsing     an HTML5 stream in concert with custom HTML elements.
    This results in the stream parser object being freed     while still in use, leading to a potentially exploitable     crash. This vulnerability affects Thunderbird < 60.5,     Firefox ESR < 60.5, and Firefox < 65. (CVE-2018-18500)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 64 and Firefox ESR 60.4.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort that some of     these could be exploited to run arbitrary code. This     vulnerability affects Thunderbird < 60.5, Firefox ESR <     60.5, and Firefox < 65. (CVE-2018-18501)

  - An earlier fix for an Inter-process Communication (IPC)     vulnerability, CVE-2011-3079, added authentication to     communication between IPC endpoints and server parents     during IPC process creation. This authentication is     insufficient for channels created after the IPC process     is started, leading to the authentication not being     correctly applied to later channels. This could allow     for a sandbox escape through IPC channels due to lack of     message validation in the listener process. This     vulnerability affects Thunderbird < 60.5, Firefox ESR <     60.5, and Firefox < 65. (CVE-2018-18505)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 63 and Firefox ESR 60.3.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort that some of     these could be exploited to run arbitrary code. This     vulnerability affects Thunderbird < 60.4, Firefox ESR <     60.4, and Firefox < 64. (CVE-2018-12405)

  - A use-after-free vulnerability can occur after deleting     a selection element due to a weak reference to the     select element in the options collection. This results     in a potentially exploitable crash. This vulnerability     affects Thunderbird < 60.4, Firefox ESR < 60.4, and     Firefox < 64. (CVE-2018-18492)

  - A buffer overflow can occur in the Skia library during     buffer offset calculations with hardware accelerated     canvas 2D actions due to the use of 32-bit calculations     instead of 64-bit. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 60.4, Firefox ESR < 60.4, and Firefox <     64. (CVE-2018-18493)

  - A same-origin policy violation allowing the theft of     cross-origin URL entries when using the Javascript     location property to cause a redirection to another site     using performance.getEntries(). This is a same-origin     policy violation and could allow for data theft. This     vulnerability affects Thunderbird < 60.4, Firefox ESR <     60.4, and Firefox < 64. (CVE-2018-18494)

  - A potential vulnerability leading to an integer overflow     can occur during buffer size calculations for images     when a raw value is used instead of the checked value.
    This leads to a possible out-of-bounds write. This     vulnerability affects Thunderbird < 60.4, Firefox ESR <     60.4, and Firefox < 64. (CVE-2018-18498)

  - Incorrect texture handling in Angle in Google Chrome     prior to 70.0.3538.67 allowed a remote attacker to     perform an out of bounds memory read via a crafted HTML     page. (CVE-2018-17466)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 60.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-02 advisory.

  - An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication     to communication between IPC endpoints and server parents during IPC process creation. This authentication     is insufficient for channels created after the IPC process is started, leading to the authentication not     being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due     to lack of message validation in the listener process. (CVE-2018-18505)

  - A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML     elements. This results in the stream parser object being freed while still in use, leading to a     potentially exploitable crash. (CVE-2018-18500)

  - Mozilla developers and community members Alex Gaynor, Christoph Diehl, Steven Crane, Jason Kratzer, Gary     Kwong, and Christian Holler reported memory safety bugs present in Firefox 64 and Firefox ESR 60.4. Some     of these bugs showed evidence of memory corruption and we presume that with enough effort that some of     these could be exploited to run arbitrary code. (CVE-2018-18501)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code or privilege escalation.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-0218 advisory.

    [60.5.0-2.0.1]
    - fix LD_LIBRARY_PATH
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one

    [60.5.0-2]
    - Updated to 60.5.0 ESR build2

    [60.5.0-1]
    - Updated to 60.5.0 ESR build1

    [60.4.0-3]
    - Fixing fontconfig warnings (rhbz#1601475)

    [60.4.0-2]
    - Added pipewire patch from Tomas Popela (rhbz#1664270)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for firefox is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 60.5.0 ESR.

Security Fix(es) :

* Mozilla: Use-after-free parsing HTML5 stream (CVE-2018-18500)

* Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 (CVE-2018-18501)

* Mozilla: Privilege escalation through IPC channel messages (CVE-2018-18505)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Yaniv Frank (SophosLabs), Alex Gaynor, Christoph Diehl, Steven Crane, Jason Kratzer, Gary Kwong, Christian Holler, and Jed Davis as the original reporters.

An update for firefox is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 60.5.0 ESR.

Security Fix(es) :

* Mozilla: Use-after-free parsing HTML5 stream (CVE-2018-18500)

* Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 (CVE-2018-18501)

* Mozilla: Privilege escalation through IPC channel messages (CVE-2018-18505)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Yaniv Frank (SophosLabs), Alex Gaynor, Christoph Diehl, Steven Crane, Jason Kratzer, Gary Kwong, Christian Holler, and Jed Davis as the original reporters.

This update for MozillaFirefox, mozilla-nss fixes the following issues: Security issues fixed :

  - CVE-2018-18500: Fixed a use-after-free parsing HTML5     stream (boo#1122983).

  - CVE-2018-18505: Fixed a privilege escalation through IPC     channel messages (boo#1122983).

  - CVE-2018-18501: Fixed multiple memory safety bugs     (boo#1122983).

Non-security issue fixed :

  - Update mozilla-nss to version 3.36.7 as build     dependency.

The version of Thunderbird installed on the remote Windows host is prior to 60.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-03 advisory.

  - A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory     storing the sound data is immediately freed, although the sound is still being played asynchronously,     leading to a potentially exploitable crash. (CVE-2018-18512)

  - An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication     to communication between IPC endpoints and server parents during IPC process creation. This authentication     is insufficient for channels created after the IPC process is started, leading to the authentication not     being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due     to lack of message validation in the listener process. (CVE-2018-18505)

  - A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML     elements. This results in the stream parser object being freed while still in use, leading to a     potentially exploitable crash. (CVE-2018-18500)

  - A vulnerability in the Libical library used by Thunderbird can allow remote attackers to cause a denial of     service (use-after-free) via a crafted ICS calendar file. (CVE-2016-5824)

  - A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted     signature. This can be used as a denial-of-service (DOS) attack because Thunderbird reopens the last seen     message on restart, triggering the crash again. (CVE-2018-18513)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox, mozilla-nss fixes the following issues :

Security issues fixed :

  - CVE-2018-18500: Fixed a use-after-free parsing HTML5     stream (bsc#1122983).

  - CVE-2018-18501: Fixed multiple memory safety bugs     (bsc#1122983).

  - CVE-2018-18505: Fixed a privilege escalation through IPC     channel messages (bsc#1122983).

  - CVE-2018-12404: Cache side-channel variant of the     Bleichenbacher attack (bsc#1119069).

Non-security issue fixed :

  - Update to MozillaFirefox ESR 60.5.0

  - Update to mozilla-nss 3.41.1

This update was imported from the SUSE:SLE-15:Update update project.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
127238	NewStart CGSL CORE 5.04 / MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0052)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/29	critical
127315	NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0093)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/29	critical
127418	NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0148)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/29	critical
121477	Mozilla Firefox ESR < 60.5	Nessus	Windows	2019/1/30	2025/11/18	critical
121484	Debian DSA-4376-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2019/1/31	2024/6/25	critical
121499	Oracle Linux 6 : firefox (ELSA-2019-0218)	Nessus	Oracle Linux Local Security Checks	2019/1/31	2024/10/22	critical
121550	CentOS 6 : firefox (CESA-2019:0218)	Nessus	CentOS Local Security Checks	2019/2/4	2024/6/25	critical
121551	CentOS 7 : firefox (CESA-2019:0219)	Nessus	CentOS Local Security Checks	2019/2/4	2024/6/25	critical
121591	openSUSE Security Update : MozillaFirefox (openSUSE-2019-133)	Nessus	SuSE Local Security Checks	2019/2/5	2024/6/24	critical
121600	Mozilla Thunderbird < 60.5	Nessus	Windows	2019/2/5	2025/12/18	critical
126898	openSUSE Security Update : MozillaFirefox (openSUSE-2019-1758)	Nessus	SuSE Local Security Checks	2019/7/22	2024/5/9	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical