執行 CORE 5.04 / MAIN 5.04 版的遠端 NewStart CGSL 主機安裝了受多個弱點影響的 thunderbird 套件：- 若將解密的 S/MIME 部分納入特製的 HTML 進行攻擊，納入 HTML 回覆/轉寄時會洩漏純文字。此弱點會影響 Thunderbird < 52.9。(CVE-2018-12372) - 使用者在提交內嵌表單時，只要在文字輸入欄位中按下 enter 鍵，即會洩漏解密電子郵件的純文字內容。此弱點會影響 Thunderbird < 52.9。(CVE-2018-12374) - 在動態調整 canvas 內容的高度和寬度的過程中呈現畫布內容時可能會發生緩衝區溢位，導致資料被寫入目前運算邊界以外之處。這會造成可能遭惡意利用的當機。此弱點會影響 Thunderbird < 60、Thunderbird < 52.9、Firefox ESR < 60.1、Firefox ESR < 52.9 和 Firefox < 61。(CVE-2018-12359) - 藉由焦點某個元素觸發的 mutation 事件處理常式過程中，當刪除輸入元素時，產生釋放後使用弱點。這會造成可能遭惡意利用的當機。此弱點會影響 Thunderbird < 60、Thunderbird < 52.9、Firefox ESR < 60.1、Firefox ESR < 52.9 和 Firefox < 61。(CVE-2018-12360) - Supplemental Streaming SIMD Extensions 3 (SSSE3) scaler 進行圖形作業時會發生釋放後使用問題，造成可能遭惡意利用的當機。此弱點會影響 Thunderbird < 60、Thunderbird < 52.9、Firefox ESR < 60.1、Firefox ESR < 52.9 和 Firefox < 61。(CVE-2018-12362) - 當指令碼使用 mutation 事件在文件之間移動 DOM 節點時可能會產生釋放後使用弱點，造成保留該節點的舊文件被釋放，但該節點的指標仍參照舊文件。這會造成可能遭惡意利用的當機。此弱點會影響 Thunderbird < 60、Thunderbird < 52.9、Firefox ESR < 60.1、Firefox ESR < 52.9 和 Firefox < 61。(CVE-2018-12363) - NPAPI 外掛程式 (如 Adobe Flash) 可傳送非簡易的跨來源要求，此要求會繞過 CORS，藉由發出同一來源 POST (進行 307 重新導向至目標網站)。惡意網站得以藉此發動跨網站要求偽造 (CSRF) 攻擊。此弱點會影響 Thunderbird < 60、Thunderbird < 52.9、Firefox ESR < 60.1、Firefox ESR < 52.9 和 Firefox < 61。(CVE-2018-12364) - 遭到入侵的 IPC 子處理程序會逸出內容沙箱，在未詢問使用者且未經使用者同意的情況下列出檔案系統上任意檔案的名稱。這樣會造成私密的本機檔案外洩。此弱點會影響 Thunderbird < 60、Thunderbird < 52.9、Firefox ESR < 60.1、Firefox ESR < 52.9 和 Firefox < 61。(CVE-2018-12365) - QCMS (色彩設定檔) 轉換時產生的無效格線間距會造成越界讀取被解譯為浮點值。這樣會將私密資料洩漏至輸出。此弱點會影響 Thunderbird < 60、Thunderbird < 52.9、Firefox ESR < 60.1、Firefox ESR < 52.9 和 Firefox < 61。(CVE-2018-12366) - Firefox 60、Firefox ESR 60 和 Firefox ESR 52.8 中存在記憶體安全性錯誤。某些錯誤顯示記憶體會遭到損毀，我們推測若有心人士有意操控，可惡意利用其中部分錯誤執行任意程式碼。此弱點會影響 Thunderbird < 60、Thunderbird < 52.9、Firefox ESR < 60.1、Firefox ESR < 52.9 和 Firefox < 61。(CVE-2018-5188) - 利用 CSS 或純文字 HTML 標記隱藏的 dDecrypted S/MIME 部分，會在納入 HTML 回覆/轉寄時洩漏純文字。此弱點會影響 Thunderbird < 52.9。(CVE-2018-12373) - 在加密訊息中使用遠端內容可能會洩漏純文字。此弱點會影響 Thunderbird ESR < 52.8 和 Thunderbird < 52.8。(CVE-2018-5184) - 特製的訊息標頭會造成 Thunderbird 處理程序在接收訊息時懸置。此弱點會影響 Thunderbird ESR < 52.8 和 Thunderbird < 52.8。(CVE-2018-5161) - 解密電子郵件的純文字可能會透過遠端影像或連結的 src 屬性而洩漏。此弱點會影響 Thunderbird ESR < 52.8 和 Thunderbird < 52.8。(CVE-2018-5162) - 得以偽造附件的檔案名稱並顯示任意附件名稱。這樣可能會造成使用者開啟與預期檔案類型不同的遠端附件。此弱點會影響 Thunderbird ESR < 52.8 和 Thunderbird < 52.8。(CVE-2018-5170) - 使用者在提交內嵌表單時，會洩漏解密電子郵件的純文字內容。此弱點會影響 Thunderbird ESR < 52.8 和 Thunderbird < 52.8。(CVE-2018-5185) - 列舉含有剪輯路徑的 SVG 動畫屬性時可能會出現釋放後使用弱點。這會造成可能遭惡意利用的當機。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5154) - 在含有文字路徑的 SVG 動畫過程中調整配置時可能會出現釋放後使用弱點。這會造成可能遭惡意利用的當機。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5155) - 在 Skia 程式庫中，由於陣列中使用了 32 位元的整數卻未進行整數溢位檢查，可能發生整數溢位問題，造成越界寫入的情況。此問題會造成可能遭惡意利用的當機，由 Web 內容觸發。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5159) - 在有極大量資料的 JavaScript 中，將 UTF8 轉換為 Unicode 字串時發現緩衝區溢位問題。此弱點要求使用惡意的或是易受弱點影響的舊版擴充才會發生此狀況。此弱點會影響 Thunderbird ESR < 52.8、Thunderbird < 52.8 和 Firefox ESR < 52.8。(CVE-2018-5178) - Mozilla 研發人員在 Skia 程式庫中反向移植了選定的變動內容。這些變動可修正記憶體損毀問題，包括進行圖形作業時產生的無效緩衝區讀取和寫入。此弱點會影響 Thunderbird ESR < 52.8、Thunderbird < 52.8 和 Firefox ESR < 52.8。(CVE-2018-5183) - Firefox 61 和 Firefox ESR 60.1 中存在記憶體安全性錯誤。某些錯誤顯示記憶體會遭到損毀，我們推測若有心人士有意操控，可惡意利用其中部分錯誤執行任意程式碼。此弱點會影響 Firefox < 62、Firefox ESR < 60.2 和 Thunderbird < 60.2.1。(CVE-2018-12376) - 關機時，若在某些情況下重新整理了重新整理驅動程式計時器，可能會發生釋放後使用弱點，這是因為計時器在仍然處於使用中狀態下遭到刪除所致。這會造成可能遭惡意利用的當機。此弱點會影響 Firefox < 62、Firefox ESR < 60.2 和 Thunderbird < 60.2.1。(CVE-2018-12377) - 提供待儲存負載值的 JavaScript 程式碼使用中的 IndexedDB 索引被刪除時，可能會發生釋放後使用弱點。這會造成可能遭惡意利用的當機。此弱點會影響 Firefox < 62、Firefox ESR < 60.2 和 Thunderbird < 60.2.1。(CVE-2018-12378) - Mozilla Updater 開啟含有超長項目檔案名稱的 MAR 格式檔案時，可能會觸發越界寫入，進而導致可能遭到惡意利用的損毀。需在含有惡意 MAR 檔案的本機系統上手動執行 Mozilla Updater 才會發生此狀況。此弱點會影響 Firefox < 62、Firefox ESR < 60.2 和 Thunderbird < 60.2.1。(CVE-2018-12379) - 如果使用者將密碼儲存在 Firefox 58 之前的版本，之後又設定主要密碼，仍可存取未加密的這些密碼複本。這是因為將資料複製到在 Firefox 58 中啟動的新格式時，舊有的已儲存密碼檔案並未遭到刪除。系統只會將新的主要密碼新增到新檔案。這可能會導致出乎使用者預料的已儲存密碼資料外洩狀況。此弱點會影響 Firefox < 62、Firefox ESR < 60.2.1 和 Thunderbird < 60.2.1。(CVE-2018-12383) - 用含有 autofs 的 automount 功能可繞過 Firefox proxy 設定，進而可在本機檔案系統上建立一個裝載點。使用 `file:` URI 即可直接從此已裝載檔案系統載入內容，繞過已設定的 proxy 設定。此問題只會影響預設組態下的 OS X；在 Linux 系統上，必須同時安裝 autofs 才會產生此弱點。(CVE-2017-16541) - Mozilla 開發人員和社群成員報告 Firefox ESR 60.2 中存在記憶體安全錯誤。某些錯誤顯示記憶體會遭到損毀，我們推測若有心人士有意操控，可惡意利用其中部分錯誤執行任意程式碼。此弱點會影響 Firefox ESR < 60.3 和 Thunderbird < 60.3。(CVE-2018-12389) - 透過指令碼開啟文件的同時操控巢狀迴圈中的使用者事件時，可能會因為事件處理不良而觸發可能遭惡意利用的當機。此弱點會影響 Firefox < 63、Firefox ESR < 60.3 和 Thunderbird < 60.3。(CVE-2018-12392) - 在用於 SSL 的 TransportSecurityInfo 中發現可能遭到惡意利用的損毀，這可能是由儲存在使用者設定檔目錄內本機快取中的資料所觸發。只有在與攻擊者可藉以將資料寫入本機快取，或從安裝在本機的惡意軟體寫入資料的其他弱點結合使用時，此問題才能遭到惡意利用。若使用相同的設定檔，此問題也會對在 Firefox 的 Nightly 和 Release 版本之間切換的使用者造成無法惡意利用的開機當機。此弱點會影響 Thunderbird < 60.2.1、Firefox ESR < 60.2.1 和 Firefox < 62.0.2。(CVE-2018-12385) - Mozilla 開發人員和社群成員報告 Firefox 62 和 Firefox ESR 60.2 中存在記憶體安全錯誤。某些錯誤顯示記憶體會遭到損毀，我們推測若有心人士有意操控，可惡意利用其中部分錯誤執行任意程式碼。此弱點會影響 Firefox < 63、Firefox ESR < 60.3 和 Thunderbird < 60.3。(CVE-2018-12390) - 在 32 位元組建中發現一個潛在弱點，其中將指令碼轉換為內部 UTF-16 表示法期間的整數溢位可能會導致為轉換配置太小的緩衝區。這可能會導致越界寫入。*注意：64 位元組建不容易受到此問題影響。* 此弱點會影響 Firefox < 63、Firefox ESR < 60.3 和 Thunderbird < 60.3。(CVE-2018-12393) - 已通報 Firefox 59、Firefox ESR 52.7 和 Thunderbird 52.7 中存在的記憶體安全性錯誤。某些錯誤顯示記憶體會遭到損毀，我們推測若有心人士有意操控，可惡意利用其中部分錯誤執行任意程式碼。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5150) - 網站可繞過權限的安全性檢查以安裝輕量型佈景主題，方法是操控佈景主題元素的 baseURI 屬性。這樣可讓惡意網站無需詢問使用者即安裝含冒犯或令人尷尬之影像的佈景主題。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5168) 請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

執行 MAIN 4.05 版的遠端 NewStart CGSL 主機安裝了受多個弱點影響的 firefox 套件：- 列舉含有剪輯路徑的 SVG 動畫屬性時可能會出現釋放後使用弱點。這會造成可能遭惡意利用的當機。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5154) - 在含有文字路徑的 SVG 動畫過程中調整配置時可能會出現釋放後使用弱點。這會造成可能遭惡意利用的當機。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5155) - 可能繞過 PDF 檢視器的同源保護機制，讓惡意網站得以攔截針對檢視器的訊息。這樣可能會讓該網站得以擷取原本限定為由第三方網站上經驗證之使用者檢視的 PDF 檔案。此弱點會影響 Firefox ESR < 52.8 和 Firefox < 60。(CVE-2018-5157) - PDF 檢視器未充分清理 PostScript 計算機函式，惡意的 JavaScript 因而得以透過特製的 PDF 檔案插入。然後此 JavaScript 的背景工作就能以該 PDF 檢視器的權限來執行此 JavaScript。此弱點會影響 Firefox ESR < 52.8 和 Firefox < 60。(CVE-2018-5158) - 在 Skia 程式庫中，由於陣列中使用了 32 位元的整數卻未進行整數溢位檢查，可能發生整數溢位問題，造成越界寫入的情況。此問題會造成可能遭惡意利用的當機，由 Web 內容觸發。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5159) - 在有極大量資料的 JavaScript 中，將 UTF8 轉換為 Unicode 字串時發現緩衝區溢位問題。此弱點要求使用惡意的或是易受弱點影響的舊版擴充才會發生此狀況。此弱點會影響 Thunderbird ESR < 52.8、Thunderbird < 52.8 和 Firefox ESR < 52.8。(CVE-2018-5178) - Mozilla 研發人員在 Skia 程式庫中反向移植了選定的變動內容。這些變動可修正記憶體損毀問題，包括進行圖形作業時產生的無效緩衝區讀取和寫入。此弱點會影響 Thunderbird ESR < 52.8、Thunderbird < 52.8 和 Firefox ESR < 52.8。(CVE-2018-5183) - 進行某些圖形作業時，若使用原始指標而非參照計數指標，在撰寫器中會產生釋放後使用弱點。這會造成可能遭惡意利用的當機。此弱點會影響 Firefox ESR < 52.7.3 和 Firefox < 59.0.2。(CVE-2018-5148) - 已通報 Firefox 59、Firefox ESR 52.7 和 Thunderbird 52.7 中存在的記憶體安全性錯誤。某些錯誤顯示記憶體會遭到損毀，我們推測若有心人士有意操控，可惡意利用其中部分錯誤執行任意程式碼。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5150) - 網站可繞過權限的安全性檢查以安裝輕量型佈景主題，方法是操控佈景主題元素的 baseURI 屬性。這樣可讓惡意網站無需詢問使用者即安裝含冒犯或令人尷尬之影像的佈景主題。此弱點會影響 Thunderbird < 52.8、Thunderbird ESR < 52.8、Firefox < 60 和 Firefox ESR < 52.8。(CVE-2018-5168) 請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼。

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 52.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-13 advisory.

  - Mozilla developers backported selected changes in the Skia library. These changes correct memory     corruption issues including invalid buffer reads and writes during graphic operations. (CVE-2018-5183)

  - Using remote content in encrypted messages can lead to the disclosure of plaintext. (CVE-2018-5184)

  - A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip     paths. This results in a potentially exploitable crash. (CVE-2018-5154)

  - A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths.
    This results in a potentially exploitable crash. (CVE-2018-5155)

  - An integer overflow can occur in the Skia library due to 32-bit integer use in an array without integer     overflow checks, resulting in possible out-of-bounds writes. This could lead to a potentially exploitable     crash triggerable by web content. (CVE-2018-5159)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update upgrades Firefox to version 52.8.0 ESR.

Security Fix(es) :

  - Mozilla: Memory safety bugs fixed in Firefox 60 and     Firefox ESR 52.8 (CVE-2018-5150)

  - Mozilla: Backport critical security fixes in Skia     (CVE-2018-5183)

  - Mozilla: Use-after-free with SVG animations and clip     paths (CVE-2018-5154)

  - Mozilla: Use-after-free with SVG animations and text     paths (CVE-2018-5155)

  - Mozilla: Same-origin bypass of PDF Viewer to view     protected PDF files (CVE-2018-5157)

  - Mozilla: Malicious PDF can inject JavaScript into PDF     Viewer (CVE-2018-5158)

  - Mozilla: Integer overflow and out-of-bounds write in     Skia (CVE-2018-5159)

  - Mozilla: Lightweight themes can be installed without     user interaction (CVE-2018-5168)

  - Mozilla: Buffer overflow during UTF-8 to Unicode string     conversion through legacy extension (CVE-2018-5178)

The version of Firefox ESR installed on the remote Windows host is prior to 52.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-12 advisory.

  - Mozilla developers backported selected changes in the Skia library to the ESR52 branch of Firefox. These     changes correct memory corruption issues including invalid buffer reads and writes during graphic     operations. (CVE-2018-5183)

  - A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip     paths. This results in a potentially exploitable crash. (CVE-2018-5154)

  - A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths.
    This results in a potentially exploitable crash. (CVE-2018-5155)

  - Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept     messages meant for the viewer. This could allow the site to retrieve PDF files restricted to viewing by an     authenticated user on a third-party website. (CVE-2018-5157)

  - The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious     JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions     of the PDF viewer by its worker. (CVE-2018-5158)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Mozilla Firefox installed on the remote Windows     host is prior to 60. It is, therefore, affected by multiple critical     and high severity vulnerabilities.

An update for firefox is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 52.8.0 ESR.

Security Fix(es) :

* Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150)

* Mozilla: Backport critical security fixes in Skia (CVE-2018-5183)

* Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154)

* Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155)

* Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157)

* Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158)

* Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159)

* Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168)

* Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.

This update for MozillaFirefox to the ESR 52.8 release fixes the following issues: Mozil to Firefox ESR 52.8 (bsc#1092548) Security issues fixed :

  - MFSA 2018-12/CVE-2018-5159: Integer overflow and     out-of-bounds write in Skia

  - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject     JavaScript into PDF Viewer

  - MFSA 2018-12/CVE-2018-5168: Lightweight themes can be     installed without user interaction

  - MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in     Firefox 60 and Firefox ESR 52.8

  - MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG     animations and text paths

  - MFSA 2018-12/CVE-2018-5183: Backport critical security     fixes in Skia

  - MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF     Viewer to view protected PDF files

  - MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG     animations and clip paths

  - MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8     to Unicode string conversion through legacy extension

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-1725 advisory.

    [52.8.0-1.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [52.8.0-1]
    - Update to 52.8.0

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1725 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150)

  - Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154)

  - Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155)

  - Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159)

  - Mozilla: Hang via malformed headers (CVE-2018-5161)

  - Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162)

  - Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168)

  - Mozilla: Filename spoofing for external attachments (CVE-2018-5170)

  - Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension     (CVE-2018-5178)

  - Mozilla: Backport critical security fixes in Skia (CVE-2018-5183)

  - Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184)

  - Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails.

For Debian 7 'Wheezy', these problems have been fixed in version 1:52.8.0-1~deb7u1.

We recommend that you upgrade your thunderbird packages.

NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - An out of bounds write flaw was found in the processing     of vorbis audio data. A maliciously crafted file or     audio stream could cause the application to crash or,     potentially, execute arbitrary code.(CVE-2018-5146)

  - Use-after-free in compositor potentially allows code     execution (CVE-2018-5148)

  - Memory safety bugs fixed in Firefox 60 and Firefox ESR     52.8 (CVE-2018-5150)

  - Backport critical security fixes in Skia     (CVE-2018-5183)

  - Use-after-free with SVG animations and clip paths     (CVE-2018-5154)

  - Use-after-free with SVG animations and text paths     (CVE-2018-5155)

  - Same-origin bypass of PDF Viewer to view protected PDF     files (CVE-2018-5157)

  - Malicious PDF can inject JavaScript into PDF Viewer     (CVE-2018-5158)

  - Integer overflow and out-of-bounds write in Skia     (CVE-2018-5159)

  - Lightweight themes can be installed without user     interaction (CVE-2018-5168)

  - Buffer overflow during UTF-8 to Unicode string     conversion through legacy extension (CVE-2018-5178)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for MozillaFirefox to the ESR 52.8 release fixes the following issues :

Mozil to Firefox ESR 52.8 (bsc#1092548)

Security issues fixed :

MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia

MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer

MFSA 2018-12/CVE-2018-5168: Lightweight themes can be installed without user interaction

MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8

MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG animations and text paths

MFSA 2018-12/CVE-2018-5183: Backport critical security fixes in Skia

MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files

MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG animations and clip paths

MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code or denial of service.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2018-1414 advisory.

    [52.8.0-1.0.1]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one
    - Force requirement of newer gdk-pixbuf2 to ensure a proper update (Todd Vierling) [orabug 19847484]

    [52.8.0-1]
    - Update to 52.8.0 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Versions of Mozilla Firefox ESR earlier than 52.8 are unpatched for the following vulnerabilities :

 - A use-after-free error exists that is triggered when enumerating attributes for SVG animations with clip paths. With a specially crafted SVG file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free error exists in 'layout/svg/SVGTextFrame.cpp' that is triggered when adjusting layouts for SVG animations with text paths. With a specially crafted SVG file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - An unspecified flaw exists in the PDF viewer that may allow a context-dependent attacker to bypass the same-origin policy and view restricted PDF files on a third-party website.
 - A flaw exists that allows a cross-site scripting (XSS) attack. This flaw exists exists because the PDF viewer does not properly sanitize input to PostScript calculator functions before returning it to users. This may allow a context-dependent attacker to create a specially crafted request that executes arbitrary script code in a user's browser session within the trust relationship between their browser and the server.
 - An integer overflow condition exists in 'include/private/SkTDArray.h' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the installation of themes. This may allow a context-dependent attacker to manipulate the baseURI property  of a theme element to bypass intended user interaction checks, allowing for the installation of unintended themes. This may be used to 'e.g'. deface a page with content from unintended themes.
 - A flaw exists that is triggered as the program sets the SEE_MASK_FLAG_NO_UI flag for Windows Defender SmartScreen when handling certain downloads. This may result in the download file prompt not displaying to the user, potentially causing files to be opened without the user's intent.
 - An assertion flaw exists in the 'FilterNodeArithmeticCombineSoftware::SetAttribute()' function in 'gfx/2d/FilterNodeSoftware.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause an out-of-bounds read and potentially disclose memory contents.
 - A flaw exists that is triggered when asynchronously calling methods from the CamerasChild class in 'dom/media/systemservices/CamerasChild.cpp'. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An overflow condition exists that is triggered as certain input is not properly validated when performing UTF8 to Unicode string conversion. This may allow a context-dependent attacker to cause a buffer overflow, potentially allowing the execution of arbitrary code.
 - Multiple unspecified flaws exist exist related to the use of insecure versions of Skia that may allow an attacker to perform memory corruption attacks, or potentially have other impacts. No further details have been provided.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
127208	NewStart CGSL CORE 5.04 / MAIN 5.04：thunderbird 多個弱點 (NS-SA-2019-0037)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	critical
127384	NewStart CGSL MAIN 4.05：firefox 多個弱點 (NS-SA-2019-0130)	Nessus	NewStart CGSL Local Security Checks	2019/8/12	2021/1/14	critical
275624	Mozilla Thunderbird < 52.8	Nessus	MacOS X Local Security Checks	2025/11/18	2025/11/18	critical
109851	Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20180515)	Nessus	Scientific Linux Local Security Checks	2018/5/16	2024/10/7	critical
109868	Mozilla Firefox ESR < 52.8	Nessus	Windows	2018/5/17	2025/11/18	critical
109869	Mozilla Firefox < 60 Multiple Critical Vulnerabilities	Nessus	Windows	2018/5/17	2024/10/7	critical
109923	CentOS 6 : firefox (CESA-2018:1414)	Nessus	CentOS Local Security Checks	2018/5/21	2024/10/4	critical
109939	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:1334-1)	Nessus	SuSE Local Security Checks	2018/5/21	2024/10/4	critical
110108	Oracle Linux 7 : thunderbird (ELSA-2018-1725)	Nessus	Oracle Linux Local Security Checks	2018/5/25	2024/10/22	critical
110119	RHEL 7 : thunderbird (RHSA-2018:1725)	Nessus	Red Hat Local Security Checks	2018/5/25	2024/4/27	critical
110158	Debian DLA-1382-1 : thunderbird security update	Nessus	Debian Local Security Checks	2018/5/29	2024/10/1	critical
110853	EulerOS 2.0 SP3 : firefox (EulerOS-SA-2018-1189)	Nessus	Huawei Local Security Checks	2018/7/3	2024/9/9	critical
118254	SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:1334-2)	Nessus	SuSE Local Security Checks	2018/10/22	2024/7/30	critical
109739	Debian DSA-4199-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2018/5/14	2024/10/9	critical
109809	Oracle Linux 6 : firefox (ELSA-2018-1414)	Nessus	Oracle Linux Local Security Checks	2018/5/15	2024/10/23	critical
700337	Mozilla Firefox ESR < 52.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2018/8/21	2019/11/6	high

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

high