The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities: Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:3196 advisory.

  - Mozilla: Use-after-free when creating index updates in IndexedDB (CVE-2019-11757)

  - Mozilla: Potentially exploitable crash due to 360 Total Security (CVE-2019-11758)

  - Mozilla: Stack buffer overflow in HKDF output (CVE-2019-11759)

  - Mozilla: Stack buffer overflow in WebRTC networking (CVE-2019-11760)

  - Mozilla: Unintended access to a privileged JSONView object (CVE-2019-11761)

  - Mozilla: document.domain-based origin isolation has same-origin-property violation (CVE-2019-11762)

  - Mozilla: Incorrect HTML parsing results in XSS bypass technique (CVE-2019-11763)

  - Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764)

  - expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4202-1 advisory.

    It was discovered that a specially crafted S/MIME message with an inner encryption layer could be     displayed as having a valid signature in some circumstances, even if the signer had no access to the     encrypted message. An attacker could potentially exploit this to spoof the message author.
    (CVE-2019-11755)

    Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, bypass security restrictions, bypass same-origin restrictions, conduct cross-site scripting (XSS)     attacks, or execute arbitrary code. (CVE-2019-11757, CVE-2019-11758, CVE-2019-11759, CVE-2019-11760,     CVE-2019-11761, CVE-2019-11762, CVE-2019-11763, CVE-2019-11764)

    A heap overflow was discovered in the expat library in Thunderbird. If a user were tricked in to opening a     specially crafted message, an attacker could potentially exploit this to cause a denial of service, or     execute arbitrary code. (CVE-2019-15903)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox to 68.2.0 ESR fixes the following issues :

Mozilla Firefox was updated to version 68.2.0 ESR (bsc#1154738).

Security issues fixed :

CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).

CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).

CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).

CVE-2019-11759: Fixed a stack-based buffer overflow in HKDF output (bsc#1154738).

CVE-2019-11760: Fixed a stack-based buffer overflow in WebRTC networking (bsc#1154738).

CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).

CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).

CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).

CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).

Non-security issues fixed: Firefox 60.7 ESR changed the user interface language (bsc#1137990).

Wrong Firefox GUI Language (bsc#1120374).

Fixed an inadvertent crash report transmission without user opt-in (bsc#1074235).

Firefox hangs randomly when browsing and scrolling (bsc#1043008).

Firefox stops loading page until mouse is moved (bsc#1025108).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3196 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 68.2.0 ESR.

    Security Fix(es):

    * Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764)

    * Mozilla: Use-after-free when creating index updates in IndexedDB (CVE-2019-11757)

    * Mozilla: Potentially exploitable crash due to 360 Total Security (CVE-2019-11758)

    * Mozilla: Stack buffer overflow in HKDF output (CVE-2019-11759)

    * Mozilla: Stack buffer overflow in WebRTC networking (CVE-2019-11760)

    * Mozilla: Unintended access to a privileged JSONView object (CVE-2019-11761)

    * Mozilla: document.domain-based origin isolation has same-origin-property violation (CVE-2019-11762)

    * Mozilla: Incorrect HTML parsing results in XSS bypass technique (CVE-2019-11763)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 68.2. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-35 advisory.

  - Mozilla developers and community members Bob Clary, Jason Kratzer, Aaron Klotz, Iain Ireland, Tyson Smith,     Christian Holler, Steve Fink, Honza Bambas, Byron Campen, and Cristian Brindusan reported memory safety     bugs present in Firefox 69 and Firefox ESR 68.1. Some of these bugs showed evidence of memory corruption     and we presume that with enough effort some of these could be exploited to run arbitrary code.
    (CVE-2019-11764)

  - In libexpat before 2.2.8, crafted XML input could fool the parser into changing from DTD parsing to     document parsing too early. A subsequent call to <code>XMLGetCurrentLineNumber</code> or     <code>XMLGetCurrentColumnNumber</code> then resulted in a heap-based buffer over-read. (CVE-2019-15903)

  - When following the value's prototype chain, it was possible to retain a reference to a locale, delete it,     and subsequently reference it. This resulted in a use-after-free and a potentially exploitable crash.
    (CVE-2019-11757)

  - Mozilla community member Philipp reported a memory safety bug present in Firefox 68 when 360 Total     Security was installed. This bug showed evidence of memory corruption in the accessibility engine and we     presume that with enough effort that it could be exploited to run arbitrary code. (CVE-2019-11758)

  - An attacker could have caused 4 bytes of HMAC output to be written past the end of a buffer stored on the     stack. This could be used by an attacker to execute arbitrary code or more likely lead to a crash.
    (CVE-2019-11759)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update upgrades Thunderbird to version 68.2.0.

Security Fix(es) :

  - Mozilla: Memory safety bugs fixed in Firefox 70 and     Firefox ESR 68.2 (CVE-2019-11764)

  - Mozilla: Use-after-free when creating index updates in     IndexedDB (CVE-2019-11757)

  - Mozilla: Potentially exploitable crash due to 360 Total     Security (CVE-2019-11758)

  - Mozilla: Stack buffer overflow in HKDF output     (CVE-2019-11759)

  - Mozilla: Stack buffer overflow in WebRTC networking     (CVE-2019-11760)

  - Mozilla: Unintended access to a privileged JSONView     object (CVE-2019-11761)

  - Mozilla: document.domain-based origin isolation has     same-origin-property violation (CVE-2019-11762)

  - Mozilla: Incorrect HTML parsing results in XSS bypass     technique (CVE-2019-11763)

  - expat: heap-based buffer over-read via crafted XML input     (CVE-2019-15903)

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-3281 advisory.

    - Added fix for mozbz#1348168/CVE-2017-5428

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has firefox packages installed that are affected by multiple vulnerabilities:

  - When following the value's prototype chain, it was     possible to retain a reference to a locale, delete it,     and subsequently reference it. This resulted in a use-     after-free and a potentially exploitable crash. This     vulnerability affects Firefox < 70, Thunderbird < 68.2,     and Firefox ESR < 68.2. (CVE-2019-11757)

  - Mozilla community member Philipp reported a memory     safety bug present in Firefox 68 when 360 Total Security     was installed. This bug showed evidence of memory     corruption in the accessibility engine and we presume     that with enough effort that it could be exploited to     run arbitrary code. This vulnerability affects Firefox <     69, Thunderbird < 68.2, and Firefox ESR < 68.2.
    (CVE-2019-11758)

  - If two same-origin documents set document.domain     differently to become cross-origin, it was possible for     them to call arbitrary DOM methods/getters/setters on     the now-cross-origin window. This vulnerability affects     Firefox < 70, Thunderbird < 68.2, and Firefox ESR <     68.2. (CVE-2019-11762)

  - Failure to correctly handle null bytes when processing     HTML entities resulted in Firefox incorrectly parsing     these entities. This could have led to HTML comment text     being treated as HTML which could have led to XSS in a     web application under certain conditions. It could have     also led to HTML entities being masked from filters -     enabling the use of entities to mask the actual     characters of interest from filters. This vulnerability     affects Firefox < 70, Thunderbird < 68.2, and Firefox     ESR < 68.2. (CVE-2019-11763)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 69 and Firefox ESR 68.1.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort some of these     could be exploited to run arbitrary code. This     vulnerability affects Firefox < 70, Thunderbird < 68.2,     and Firefox ESR < 68.2. (CVE-2019-11764)

  - An attacker could have caused 4 bytes of HMAC output to     be written past the end of a buffer stored on the stack.
    This could be used by an attacker to execute arbitrary     code or more likely lead to a crash. This vulnerability     affects Firefox < 70, Thunderbird < 68.2, and Firefox     ESR < 68.2. (CVE-2019-11759)

  - A fixed-size stack buffer could overflow in nrappkit     when doing WebRTC signaling. This resulted in a     potentially exploitable crash in some instances. This     vulnerability affects Firefox < 70, Thunderbird < 68.2,     and Firefox ESR < 68.2. (CVE-2019-11760)

  - By using a form with a data URI it was possible to gain     access to the privileged JSONView object that had been     cloned into content. Impact from exposing this object     appears to be minimal, however it was a bypass of     existing defense in depth mechanisms. This vulnerability     affects Firefox < 70, Thunderbird < 68.2, and Firefox     ESR < 68.2. (CVE-2019-11761)

  - Under certain conditions, when checking the Resist     Fingerprinting preference during device orientation     checks, a race condition could have caused a use-after-     free and a potentially exploitable crash. This     vulnerability affects Thunderbird < 68.3, Firefox ESR <     68.3, and Firefox < 71. (CVE-2019-17010)

  - Under certain conditions, when retrieving a document     from a DocShell in the antitracking code, a race     condition could cause a use-after-free condition and a     potentially exploitable crash. This vulnerability     affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-17011)

  - Mozilla developers reported memory safety bugs present     in Firefox 70 and Firefox ESR 68.2. Some of these bugs     showed evidence of memory corruption and we presume that     with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability     affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-17012)

  - When using nested workers, a use-after-free could occur     during worker destruction. This resulted in a     potentially exploitable crash. This vulnerability     affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-17008)

  - The plain text serializer used a fixed-size array for     the number of  elements it could process; however it     was possible to overflow the static-sized array leading     to memory corruption and a potentially exploitable     crash. This vulnerability affects Thunderbird < 68.3,     Firefox ESR < 68.3, and Firefox < 71. (CVE-2019-17005)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4335-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service, obtain sensitive information, bypass security restrictions, bypass same-origin restrictions,     conduct cross-site scripting (XSS) attacks, or execute arbitrary code. (CVE-2019-11757, CVE-2019-11758,     CVE-2019-11759, CVE-2019-11760, CVE-2019-11761, CVE-2019-11762, CVE-2019-11763, CVE-2019-11764,     CVE-2019-17005, CVE-2019-17008, CVE-2019-17010, CVE-2019-17011, CVE-2019-17012, CVE-2019-17016,     CVE-2019-17017, CVE-2019-17022, CVE-2019-17024, CVE-2019-17026, CVE-2019-20503, CVE-2020-6798,     CVE-2020-6800, CVE-2020-6805, CVE-2020-6806, CVE-2020-6807, CVE-2020-6812, CVE-2020-6814, CVE-2020-6819,     CVE-2020-6820, CVE-2020-6821, CVE-2020-6825)

    It was discovered that NSS incorrectly handled certain memory operations. A remote attacker could     potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2019-11745)

    It was discovered that a specially crafted S/MIME message with an inner encryption layer could be     displayed as having a valid signature in some circumstances, even if the signer had no access to the     encrypted message. An attacker could potentially exploit this to spoof the message author.
    (CVE-2019-11755)

    A heap overflow was discovered in the expat library in Thunderbird. If a user were tricked in to opening a     specially crafted message, an attacker could potentially exploit this to cause a denial of service, or     execute arbitrary code. (CVE-2019-15903)

    It was discovered that Message ID calculation was based on uninitialized data. An attacker could     potentially exploit this to obtain sensitive information. (CVE-2020-6792)

    Mutiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially     crafted message, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information, or execute arbitrary code. (CVE-2020-6793, CVE-2020-6795, CVE-2020-6822)

    It was discovered that if a user saved passwords before Thunderbird 60 and then later set a primary     password, an unencrypted copy of these passwords would still be accessible. A local user could exploit     this to obtain sensitive information. (CVE-2020-6794)

    It was discovered that the Devtools Copy as cURL feature did not fully escape website-controlled     data. If a user were tricked in to using the Copy as cURL feature to copy and paste a command with     specially crafted data in to a terminal, an attacker could potentially exploit this to execute arbitrary     commands via command injection. (CVE-2020-6811)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
131409	NewStart CGSL CORE 5.04 / MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0216)	Nessus	NewStart CGSL Local Security Checks	2019/12/2	2024/4/9	high
145572	CentOS 8 : firefox (CESA-2019:3196)	Nessus	CentOS Local Security Checks	2021/1/29	2024/1/25	high
183628	Ubuntu 18.04 LTS : Thunderbird vulnerabilities (USN-4202-1)	Nessus	Ubuntu Local Security Checks	2023/10/21	2024/8/27	high
130450	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:2872-1)	Nessus	SuSE Local Security Checks	2019/11/1	2024/4/16	critical
130248	RHEL 8 : firefox (RHSA-2019:3196)	Nessus	Red Hat Local Security Checks	2019/10/25	2024/11/7	high
130365	Mozilla Thunderbird < 68.2	Nessus	Windows	2019/10/29	2025/11/18	high
130386	Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20191029)	Nessus	Scientific Linux Local Security Checks	2019/10/30	2024/4/16	high
180779	Oracle Linux 6 : firefox (ELSA-2019-3281)	Nessus	Oracle Linux Local Security Checks	2023/9/7	2024/10/22	high
133080	NewStart CGSL CORE 5.05 / MAIN 5.05 : firefox Multiple Vulnerabilities (NS-SA-2020-0004)	Nessus	NewStart CGSL Local Security Checks	2020/1/20	2024/3/29	high
135896	Ubuntu 16.04 LTS : Thunderbird vulnerabilities (USN-4335-1)	Nessus	Ubuntu Local Security Checks	2020/4/22	2024/8/29	critical

检测

插件搜索

high

high

high

critical

high

high

high

high

high

critical