An update for thunderbird is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 52.7.0.

Security Fix(es) :

* Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125)

* Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145)

* Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146)

* Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127)

* Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129)

* Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro's Zero Day Initiative, Nils, James Grant, and Root Object as the original reporters.

This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130) :

  - CVE-2018-5125: Memory safety bugs fixed in Firefox 59     and Firefox ESR 52.7

  - CVE-2018-5127: Buffer overflow manipulating SVG     animatedPathSegList

  - CVE-2018-5129: Out-of-bounds write with malformed IPC     messages

  - CVE-2018-5130: Mismatched RTP payload type can trigger     memory corruption

  - CVE-2018-5131: Fetch API improperly returns cached     copies of no-store/no-cache resources

  - CVE-2018-5144: Integer overflow during Unicode     conversion

  - CVE-2018-5145: Memory safety bugs fixed in Firefox ESR     52.7

  - CVE-2018-5146: Out of bounds memory write in libvorbis     (bsc#1085671)

  - CVE-2018-5147: Out of bounds memory write in libtremor     (bsc#1085671)

  - CVE-2018-5148: Use-after-free in compositor (MFSA     2018-10) (bsc#1087059)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote NewStart CGSL host, running version MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities:

  - Memory safety bugs were reported in Firefox 58 and     Firefox ESR 52.6. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Thunderbird < 52.7,     Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5125)

  - A buffer overflow can occur when manipulating the SVG     animatedPathSegList through script. This results in a     potentially exploitable crash. This vulnerability     affects Thunderbird < 52.7, Firefox ESR < 52.7, and     Firefox < 59. (CVE-2018-5127)

  - A lack of parameter validation on IPC messages results     in a potential out-of-bounds write through malformed IPC     messages. This can potentially allow for sandbox escape     through memory corruption in the parent process. This     vulnerability affects Thunderbird < 52.7, Firefox ESR <     52.7, and Firefox < 59. (CVE-2018-5129)

  - When packets with a mismatched RTP payload type are sent     in WebRTC connections, in some circumstances a     potentially exploitable crash is triggered. This     vulnerability affects Firefox ESR < 52.7 and Firefox <     59. (CVE-2018-5130)

  - Under certain circumstances the fetch() API can return     transient local copies of resources that were sent with     a no-store or no-cache cache header instead of     downloading a copy from the network as it should. This     can result in previously stored, locally cached data of     a website being accessible to users if they share a     common profile while browsing. This vulnerability     affects Firefox ESR < 52.7 and Firefox < 59.
    (CVE-2018-5131)

  - An integer overflow can occur during conversion of text     to some Unicode character sets due to an unchecked     length parameter. This vulnerability affects Firefox ESR     < 52.7 and Thunderbird < 52.7. (CVE-2018-5144)

  - Memory safety bugs were reported in Firefox ESR 52.6.
    These bugs showed evidence of memory corruption and we     presume that with enough effort that some of these could     be exploited to run arbitrary code. This vulnerability     affects Firefox ESR < 52.7 and Thunderbird < 52.7.
    (CVE-2018-5145)

  - Memory safety bugs were reported in Firefox 57 and     Firefox ESR 52.5. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5089)

  - A use-after-free vulnerability can occur during WebRTC     connections when interacting with the DTMF timers. This     results in a potentially exploitable crash. This     vulnerability affects Firefox ESR < 52.6 and Firefox <     58. (CVE-2018-5091)

  - An integer overflow vulnerability in the Skia library     when allocating memory for edge builders on some systems     with at least 8 GB of RAM. This results in the use of     uninitialized memory, resulting in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5095)

  - A use-after-free vulnerability can occur while editing     events in form elements on a page, resulting in a     potentially exploitable crash. This vulnerability     affects Firefox ESR < 52.6 and Thunderbird < 52.6.
    (CVE-2018-5096)

  - A use-after-free vulnerability can occur during XSL     transformations when the source document for the     transformation is manipulated by script content during     the transformation. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5097)

  - A use-after-free vulnerability can occur when form input     elements, focus, and selections are manipulated by     script content. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5098)

  - A use-after-free vulnerability can occur when the widget     listener is holding strong references to browser objects     that have previously been freed, resulting in a     potentially exploitable crash when these references are     used. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5099)

  - A use-after-free vulnerability can occur when     manipulating HTML media elements with media streams,     resulting in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5102)

  - A use-after-free vulnerability can occur during mouse     event handling due to issues with multiprocess support.
    This results in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5103)

  - A use-after-free vulnerability can occur during font     face manipulation when a font face is freed while still     in use, resulting in a potentially exploitable crash.
    This vulnerability affects Thunderbird < 52.6, Firefox     ESR < 52.6, and Firefox < 58. (CVE-2018-5104)

  - If right-to-left text is used in the addressbar with     left-to-right alignment, it is possible in some     circumstances to scroll this text to spoof the displayed     URL. This issue could result in the wrong URL being     displayed as a location, which can mislead users to     believe they are on a different site than the one     loaded. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5117)

  - An out of bounds write flaw was found in the processing     of vorbis audio data. A maliciously crafted file or     audio stream could cause the application to crash or,     potentially, execute arbitrary code. (CVE-2018-5146)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 4.05, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - It is possible to spoof the sender's email address and     display an arbitrary sender address to the email     recipient. The real sender's address is not displayed if     preceded by a null character in the display string. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7829)

  - Crafted CSS in an RSS feed can leak and reveal local     path strings, which may contain user name. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7847)

  - RSS fields can inject new lines into the created email     structure, modifying the message body. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7848)

  - It is possible to execute JavaScript in the parsed RSS     feed when RSS feed is viewed as a website, e.g. via     View -> Feed article -> Website or in the standard     format of View -> Feed article -> default format. This     vulnerability affects Thunderbird < 52.5.2.
    (CVE-2017-7846)

  - Memory safety bugs were reported in Firefox 58 and     Firefox ESR 52.6. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Thunderbird < 52.7,     Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5125)

  - A buffer overflow can occur when manipulating the SVG     animatedPathSegList through script. This results in a     potentially exploitable crash. This vulnerability     affects Thunderbird < 52.7, Firefox ESR < 52.7, and     Firefox < 59. (CVE-2018-5127)

  - A lack of parameter validation on IPC messages results     in a potential out-of-bounds write through malformed IPC     messages. This can potentially allow for sandbox escape     through memory corruption in the parent process. This     vulnerability affects Thunderbird < 52.7, Firefox ESR <     52.7, and Firefox < 59. (CVE-2018-5129)

  - An integer overflow can occur during conversion of text     to some Unicode character sets due to an unchecked     length parameter. This vulnerability affects Firefox ESR     < 52.7 and Thunderbird < 52.7. (CVE-2018-5144)

  - Memory safety bugs were reported in Firefox ESR 52.6.
    These bugs showed evidence of memory corruption and we     presume that with enough effort that some of these could     be exploited to run arbitrary code. This vulnerability     affects Firefox ESR < 52.7 and Thunderbird < 52.7.
    (CVE-2018-5145)

  - Memory safety bugs were reported in Firefox 57 and     Firefox ESR 52.5. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort     that some of these could be exploited to run arbitrary     code. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5089)

  - An integer overflow vulnerability in the Skia library     when allocating memory for edge builders on some systems     with at least 8 GB of RAM. This results in the use of     uninitialized memory, resulting in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5095)

  - A use-after-free vulnerability can occur while editing     events in form elements on a page, resulting in a     potentially exploitable crash. This vulnerability     affects Firefox ESR < 52.6 and Thunderbird < 52.6.
    (CVE-2018-5096)

  - A use-after-free vulnerability can occur during XSL     transformations when the source document for the     transformation is manipulated by script content during     the transformation. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5097)

  - A use-after-free vulnerability can occur when form input     elements, focus, and selections are manipulated by     script content. This results in a potentially     exploitable crash. This vulnerability affects     Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox <     58. (CVE-2018-5098)

  - A use-after-free vulnerability can occur when the widget     listener is holding strong references to browser objects     that have previously been freed, resulting in a     potentially exploitable crash when these references are     used. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5099)

  - A use-after-free vulnerability can occur when     manipulating HTML media elements with media streams,     resulting in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5102)

  - A use-after-free vulnerability can occur during mouse     event handling due to issues with multiprocess support.
    This results in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.6, Firefox ESR <     52.6, and Firefox < 58. (CVE-2018-5103)

  - A use-after-free vulnerability can occur during font     face manipulation when a font face is freed while still     in use, resulting in a potentially exploitable crash.
    This vulnerability affects Thunderbird < 52.6, Firefox     ESR < 52.6, and Firefox < 58. (CVE-2018-5104)

  - If right-to-left text is used in the addressbar with     left-to-right alignment, it is possible in some     circumstances to scroll this text to spoof the displayed     URL. This issue could result in the wrong URL being     displayed as a location, which can mislead users to     believe they are on a different site than the one     loaded. This vulnerability affects Thunderbird < 52.6,     Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5117)

  - An out of bounds write flaw was found in the processing     of vorbis audio data. A maliciously crafted file or     audio stream could cause the application to crash or,     potentially, execute arbitrary code. (CVE-2018-5146)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 59.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-06 advisory.

  - A use-after-free vulnerability can occur when manipulating elements, events, and selection ranges during     editor operations. This results in a potentially exploitable crash. (CVE-2018-5128)

  - A buffer overflow can occur when manipulating the SVG <code>animatedPathSegList</code> through script.
    This results in a potentially exploitable crash. (CVE-2018-5127)

  - A lack of parameter validation on IPC messages results in a potential out-of-bounds write through     malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the     parent process. (CVE-2018-5129)

  - When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a     potentially exploitable crash is triggered. (CVE-2018-5130)

  - Under certain circumstances the <code>fetch()</code> API can return transient local copies of resources     that were sent with a <code>no-store</code> or <code>no-cache</code> cache header instead of downloading a     copy from the network as it should. This can result in previously stored, locally cached data of a website     being accessible to users if they share a common profile while browsing. (CVE-2018-5131)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Mozilla Foundation reports :

CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList

CVE-2018-5128: Use-after-free manipulating editor selection ranges

CVE-2018-5129: Out-of-bounds write with malformed IPC messages

CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption

CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources

CVE-2018-5132: WebExtension Find API can search privileged pages

CVE-2018-5133: Value of the app.support.baseURL preference is not properly sanitized

CVE-2018-5134: WebExtensions may use view-source: URLs to bypass content restrictions

CVE-2018-5135: WebExtension browserAction can inject scripts into unintended contexts

CVE-2018-5136: Same-origin policy violation with data: URL shared workers

CVE-2018-5137: Script content can access legacy extension non-contentaccessible resources

CVE-2018-5138: Android Custom Tab address spoofing through long domain names

CVE-2018-5140: Moz-icon images accessible to web content through moz-icon: protocol

CVE-2018-5141: DOS attack through notifications Push API

CVE-2018-5142: Media Capture and Streams API permissions display incorrect origin with data: and blob: URLs

CVE-2018-5143: Self-XSS pasting javascript: URL with embedded tab into addressbar

CVE-2018-5126: Memory safety bugs fixed in Firefox 59

CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3596-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service via application     crash or opening new tabs, escape the sandbox, bypass same-origin restrictions, obtain sensitive     information, confuse the user with misleading permission requests, or execute arbitrary code.
    (CVE-2018-5125, CVE-2018-5126, CVE-2018-5127, CVE-2018-5128, CVE-2018-5129, CVE-2018-5130, CVE-2018-5136,     CVE-2018-5137, CVE-2018-5140, CVE-2018-5141, CVE-2018-5142)

    It was discovered that the fetch() API could incorrectly return cached copies of no-store/no-cache     resources in some circumstances. A local attacker could potentially exploit this to obtain sensitive     information in environments where multiple users share a common profile. (CVE-2018-5131)

    Multiple security issues were discovered with WebExtensions. If a user were tricked in to installing a     specially crafted extension, an attacker could potentially exploit these to obtain sensitive information     or bypass security restrictions. (CVE-2018-5132, CVE-2018-5134, CVE-2018-5135)

    It was discovered that the value of app.support.baseURL is not sanitized properly. If a malicious local     application were to set this to a specially crafted value, an attacker could potentially exploit this to     execute arbitrary code. (CVE-2018-5133)

    It was discovered that javascript: URLs with embedded tab characters could be pasted in to the addressbar.
    If a user were tricked in to copying a specially crafted URL in to the addressbar, an attacker could     exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2018-5143)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code, denial of service or information disclosure.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-0526 advisory.

    [52.7.0-1.0.1]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one
    - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484]

    [52.7.0-1]
    - Update to 52.7.0 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for firefox is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Firefox is an open source web browser.

This update upgrades Firefox to version 52.7.0 ESR.

Security Fix(es) :

* Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125)

* Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127)

* Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129)

* Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130)

* Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131)

* Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144)

* Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0527 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125)

  - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127)

  - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129)

  - Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130)

  - Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)     (CVE-2018-5131)

  - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2018-2624:02 advisory.

    * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125)
      * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127)
      * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129)
      * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130)
      * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07)     (CVE-2018-5131)
      * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144)
      * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for thunderbird is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 52.7.0.

Security Fix(es) :

* Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125)

* Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145)

* Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146)

* Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127)

* Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129)

* Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro's Zero Day Initiative, Nils, James Grant, and Root Object as the original reporters.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-0647 advisory.

    [52.7.0-1.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [52.7.0-1]
    - Update to 52.7.0

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update upgrades Thunderbird to version 52.7.0.

Security Fix(es) :

  - Mozilla: Memory safety bugs fixed in Firefox 59 and     Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7     (MFSA 2018-07) (CVE-2018-5145)

  - Mozilla: Vorbis audio processing out of bounds write     (MFSA 2018-08) (CVE-2018-5146)

  - Mozilla: Buffer overflow manipulating SVG     animatedPathSegList (MFSA 2018-07) (CVE-2018-5127)

  - Mozilla: Out-of-bounds write with malformed IPC messages     (MFSA 2018-07) (CVE-2018-5129)

  - Mozilla: Integer overflow during Unicode conversion     (MFSA 2018-07) (CVE-2018-5144)

The remote host is affected by the vulnerability described in GLSA-201811-13 (Mozilla Thunderbird: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Thunderbird.
      Please review the referenced Mozilla Foundation Security Advisories and       CVE identifiers below for details.
  Impact :

    A remote attacker may be able to execute arbitrary code, cause a Denial       of Service condition, obtain sensitive information, or conduct Cross-Site       Request Forgery (CSRF).
  Workaround :

    There is no known workaround at this time.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
108898	CentOS 6 : thunderbird (CESA-2018:0647)	Nessus	CentOS Local Security Checks	2018/4/10	2024/11/12	critical
109000	SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:0907-1)	Nessus	SuSE Local Security Checks	2018/4/11	2024/11/7	critical
127160	NewStart CGSL MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0011)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	critical
127376	NewStart CGSL MAIN 4.05 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0126)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2024/5/7	critical
108377	Mozilla Firefox < 59.0	Nessus	Windows	2018/3/15	2025/11/18	critical
108315	FreeBSD : mozilla -- multiple vulnerabilities (c71cdc95-3c18-45b7-866a-af28b59aabb5)	Nessus	FreeBSD Local Security Checks	2018/3/14	2025/2/4	critical
108370	Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3596-1)	Nessus	Ubuntu Local Security Checks	2018/3/15	2024/8/27	critical
108387	Debian DSA-4139-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2018/3/16	2025/1/30	critical
108393	Oracle Linux 6 : firefox (ELSA-2018-0526)	Nessus	Oracle Linux Local Security Checks	2018/3/16	2025/1/30	critical
108396	RHEL 6 : firefox (RHSA-2018:0526)	Nessus	Red Hat Local Security Checks	2018/3/16	2025/1/30	critical
108397	RHEL 7 : firefox (RHSA-2018:0527)	Nessus	Red Hat Local Security Checks	2018/3/16	2025/1/30	critical
289278	MiracleLinux 7 : firefox-52.7.0-1.0.1.el7.AXS7 (AXSA:2018-2624:02)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/16	critical
108899	CentOS 7 : thunderbird (CESA-2018:0648)	Nessus	CentOS Local Security Checks	2018/4/10	2024/11/12	critical
108938	Oracle Linux 6 : thunderbird (ELSA-2018-0647)	Nessus	Oracle Linux Local Security Checks	2018/4/10	2024/11/12	critical
108944	Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20180405)	Nessus	Scientific Linux Local Security Checks	2018/4/10	2024/11/12	critical
119133	GLSA-201811-13 : Mozilla Thunderbird: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2018/11/26	2024/7/19	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical