The remote Oracle Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2022-5774 advisory.

    [91.12.0-1.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [91.12.0-1]
    - Update to 91.12.0 build1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.02, has firefox packages installed that are affected by multiple vulnerabilities:

  - In Expat (aka libexpat) before 2.4.5, there is an integer overflow in storeRawNames. (CVE-2022-25315)

  - It was possible to construct specific XSLT markup that would be able to bypass an iframe sandbox. This     vulnerability affects Firefox ESR < 91.5, Firefox < 96, and Thunderbird < 91.5. (CVE-2021-4140)

  - crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in     Rust. In versions prior to 0.7.4 and 0.8.0, the result of the race condition is that one or more tasks in     the worker queue can be popped twice instead of other tasks that are forgotten and never popped. If tasks     are allocated on the heap, this can cause double free and a memory leak. If not, this still can cause a     logical bug. Crates using `Stealer::steal`, `Stealer::steal_batch`, or `Stealer::steal_batch_and_pop` are     affected by this issue. This has been fixed in crossbeam-deque 0.8.1 and 0.7.4. (CVE-2021-32810)

  - Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14,     and Firefox < 92. (CVE-2021-38493)

  - During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in     memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.15,     Thunderbird < 91.2, Firefox ESR < 91.2, Firefox ESR < 78.15, and Firefox < 93. (CVE-2021-38496)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES12 / SLES_SAP12 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2022:3273-1 advisory.

  - If an object prototype was corrupted by an attacker, they would have been able to set undesired attributes     on a JavaScript object, leading to privileged code execution. This vulnerability affects Firefox < 102,     Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. (CVE-2022-2200)

  - Mozilla developers and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 102. Some     of these bugs showed evidence of memory corruption and we presume that with enough effort some of these     could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 102.1, Firefox <     103, and Thunderbird < 102.1. (CVE-2022-2505)

  - An iframe that was not permitted to run scripts could do so if the user clicked on a     <code>javascript:</code> link. This vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird     < 102, and Thunderbird < 91.11. (CVE-2022-34468)

  - When a TLS Certificate error occurs on a domain protected by the HSTS header, the browser should not allow     the user to bypass the certificate error. On Firefox for Android, the user was presented with the option     to bypass the error; this could only have been done by the user explicitly. <br>*This bug only affects     Firefox for Android. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102.
    (CVE-2022-34469)

  - Session history navigations may have led to a use-after-free and potentially exploitable crash. This     vulnerability affects Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11.
    (CVE-2022-34470)

  - When downloading an update for an addon, the downloaded addon update's version was not verified to match     the version selected from the manifest. If the manifest had been tampered with on the server, an attacker     could trick the browser into downgrading the addon to a prior version. This vulnerability affects Firefox     < 102. (CVE-2022-34471)

  - If there was a PAC URL set and the server that hosts the PAC was not reachable, OCSP requests would have     been blocked, resulting in incorrect error pages being shown. This vulnerability affects Firefox < 102,     Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. (CVE-2022-34472)

  - The HTML Sanitizer should have sanitized the <code>href</code> attribute of SVG <code><use></code>     tags; however it incorrectly did not sanitize <code>xlink:href</code> attributes. This vulnerability     affects Firefox < 102. (CVE-2022-34473)

  - Even when an iframe was sandboxed with <code>allow-top-navigation-by-user-activation</code>, if it     received a redirect header to an external protocol the browser would process the redirect and prompt the     user as appropriate. This vulnerability affects Firefox < 102. (CVE-2022-34474)

  - SVG <code><use></code> tags that referenced a same-origin document could have resulted in script     execution if attacker input was sanitized via the HTML Sanitizer API. This would have required the     attacker to reference a same-origin JavaScript file containing the script to be executed. This     vulnerability affects Firefox < 102. (CVE-2022-34475)

  - ASN.1 parsing of an indefinite SEQUENCE inside an indefinite GROUP could have resulted in the parser     accepting malformed ASN.1. This vulnerability affects Firefox < 102. (CVE-2022-34476)

  - The MediaError message property should be consistent to avoid leaking information about cross-origin     resources; however for a same-site cross-origin resource, the message could have leaked information     enabling XS-Leaks attacks. This vulnerability affects Firefox < 102. (CVE-2022-34477)

  - The <code>ms-msdt</code>, <code>search</code>, and <code>search-ms</code> protocols deliver content to     Microsoft applications, bypassing the browser, when a user accepts a prompt. These applications have had     known vulnerabilities, exploited in the wild (although we know of none exploited through Thunderbird), so     in this release Thunderbird has blocked these protocols from prompting the user to open them.<br>*This bug     only affects Thunderbird on Windows. Other operating systems are unaffected.*. This vulnerability affects     Firefox < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. (CVE-2022-34478)

  - A malicious website that could create a popup could have resized the popup to overlay the address bar with     its own content, resulting in potential user confusion or spoofing attacks. <br>*This bug only affects     Thunderbird for Linux. Other operating systems are unaffected.*. This vulnerability affects Firefox < 102,     Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. (CVE-2022-34479)

  - Within the <code>lg_init()</code> function, if several allocations succeed but then one fails, an     uninitialized pointer would have been freed despite never being allocated. This vulnerability affects     Firefox < 102. (CVE-2022-34480)

  - In the <code>nsTArray_Impl::ReplaceElementsAt()</code> function, an integer overflow could have occurred     when the number of elements to replace was too large for the container. This vulnerability affects Firefox     < 102, Firefox ESR < 91.11, Thunderbird < 102, and Thunderbird < 91.11. (CVE-2022-34481)

  - An attacker who could have convinced a user to drag and drop an image to a filesystem could have     manipulated the resulting filename to contain an executable extension, and by extension potentially     tricked the user into executing malicious code. While very similar, this is a separate issue from     CVE-2022-34483. This vulnerability affects Firefox < 102. (CVE-2022-34482)

  - An attacker who could have convinced a user to drag and drop an image to a filesystem could have     manipulated the resulting filename to contain an executable extension, and by extension potentially     tricked the user into executing malicious code. While very similar, this is a separate issue from     CVE-2022-34482. This vulnerability affects Firefox < 102. (CVE-2022-34483)

  - The Mozilla Fuzzing Team reported potential vulnerabilities present in Thunderbird 91.10. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox < 102, Firefox ESR < 91.11,     Thunderbird < 102, and Thunderbird < 91.11. (CVE-2022-34484)

  - Mozilla developers Bryce Seager van Dyk and the Mozilla Fuzzing Team reported potential vulnerabilities     present in Firefox 101. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects     Firefox < 102. (CVE-2022-34485)

  - When opening a Windows shortcut from the local filesystem, an attacker could supply a remote path that     would lead to unexpected network requests from the operating system.<br>This bug only affects Firefox for     Windows. Other operating systems are unaffected.*. This vulnerability affects Firefox ESR < 102.1, Firefox     < 103, and Thunderbird < 102.1. (CVE-2022-36314)

  - When visiting directory listings for `chrome://` URLs as source text, some parameters were reflected. This     vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox < 103, Thunderbird < 102.1, and     Thunderbird < 91.12. (CVE-2022-36318)

  - When combining CSS properties for overflow and transform, the mouse cursor could interact with different     coordinates than displayed. This vulnerability affects Firefox ESR < 102.1, Firefox ESR < 91.12, Firefox <     103, Thunderbird < 102.1, and Thunderbird < 91.12. (CVE-2022-36319)

  - An attacker could have abused XSLT error handling to associate attacker-controlled content with another     origin which was displayed in the address bar. This could have been used to fool the user into submitting     data intended for the spoofed origin. This vulnerability affects Thunderbird < 102.2, Thunderbird < 91.13,     Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104. (CVE-2022-38472)

  - A cross-origin iframe referencing an XSLT document would inherit the parent domain's permissions (such as     microphone or camera access). This vulnerability affects Thunderbird < 102.2, Thunderbird < 91.13, Firefox     ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104. (CVE-2022-38473)

  - A data race could occur in the <code>PK11_ChangePW</code> function, potentially leading to a use-after-     free vulnerability. In Firefox, this lock protected the data when a user changed their master password.
    This vulnerability affects Firefox ESR < 102.2 and Thunderbird < 102.2. (CVE-2022-38476)

  - Mozilla developer Nika Layzell and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox     103 and Firefox ESR 102.1. Some of these bugs showed evidence of memory corruption and we presume that     with enough effort some of these could have been exploited to run arbitrary code. This vulnerability     affects Firefox ESR < 102.2, Thunderbird < 102.2, and Firefox < 104. (CVE-2022-38477)

  - Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1,     and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects     Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.
    (CVE-2022-38478)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

远程 macOS 或 Mac OS X 主机上安装的 Firefox ESR 版本低于 102.1。因此，它受到 mfsa2022-30 公告中提及的多个漏洞影响。

  - 合并溢出和转换的 CSS 属性时，与鼠标光标交互的坐标可能与显示的坐标不同。(CVE-2022-36319)

  - 当访问以 `chrome: //` URL 作为源文本的目录列表时，会反映部分参数。
    (CVE-2022-36318)

  - 从本地文件系统打开 Windows 快捷方式时，攻击者可提供会导致操作系统发出意外网络请求的远程路径。此错误仅影响 Windows 版 Firefox。其他操作系统不受影响。(CVE-2022-36314)

  - Mozilla 开发人员和 Mozilla Fuzzing 团队报告 Firefox 102 中存在内存安全错误。其中某些错误展示出内存损坏迹象，我们推测若攻击者付出足够努力，就能利用部分错误运行任意代码。(CVE-2022-2505)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 8 主机上安装的一个程序包受到 RHSA-2022: 5766 公告中提及的多个漏洞影响。

  - Mozilla：在 Firefox 103 和 102.1 中修复了内存安全缺陷 (CVE-2022-2505)

  - Mozilla：捆绑资源的目录索引反映了 URL 参数 (CVE-2022-36318)

  - Mozilla：使用 CSS 转换伪造鼠标位置 (CVE-2022-36319)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Windows 主机上安装的 Thunderbird 版本低于 102.1。因此，它受到 mfsa2022-32 公告中提及的多个漏洞影响。

  - 合并溢出和转换的 CSS 属性时，与鼠标光标交互的坐标可能与显示的坐标不同。(CVE-2022-36319)

  - 当访问以 `chrome: //` URL 作为源文本的目录列表时，会反映部分参数。
    (CVE-2022-36318)

  - 从本地文件系统打开 Windows 快捷方式时，攻击者可提供会导致操作系统发出意外网络请求的远程路径。此错误仅影响 Windows 版 Thunderbird。其他操作系统不受影响。(CVE-2022-36314)

  - Mozilla 开发人员和 Mozilla Fuzzing 团队报告 Thunderbird 102 中存在内存安全错误。
    其中某些错误展示出内存损坏迹象，我们推测若攻击者付出足够努力，就能利用部分错误运行任意代码。(CVE-2022-2505)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 7 主机上安装的一个程序包受到 RHSA-2022: 5776 公告中提及的多个漏洞影响。

  - Mozilla：在 Firefox 103 和 102.1 中修复了内存安全缺陷 (CVE-2022-2505)

  - Mozilla：捆绑资源的目录索引反映了 URL 参数 (CVE-2022-36318)

  - Mozilla：使用 CSS 转换伪造鼠标位置 (CVE-2022-36319)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 8 主机上安装的一个程序包受到 RHSA-2022: 5771 公告中提及的多个漏洞影响。

  - Mozilla：在 Firefox 103 和 102.1 中修复了内存安全缺陷 (CVE-2022-2505)

  - Mozilla：捆绑资源的目录索引反映了 URL 参数 (CVE-2022-36318)

  - Mozilla：使用 CSS 转换伪造鼠标位置 (CVE-2022-36319)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Rocky Linux 8 主机上安装的多个程序包受到 RLSA-2022:5777 公告中提及的多个漏洞影响。

  - Mozilla 开发人员和 Mozilla Fuzzing 团队报告 Firefox 102 中存在内存安全错误。其中某些错误展示出内存损坏迹象，我们推测如果攻击者进行足够的尝试，则可以利用此漏洞运行任意代码。此漏洞会影响 Firefox ESR < 102.1、Firefox < 103 和 Thunderbird < 102.1。(CVE-2022-2505)

  - 访问作为源文本的“chrome://”URL 的目录列表时，反映某些参数。此漏洞会影响 Firefox ESR < 102.1、Firefox ESR < 91.12、Firefox < 103、Thunderbird < 102.1 和 Thunderbird < 91.12。(CVE-2022-36318)

  - 合并溢出和转换的 CSS 属性时，与鼠标光标交互的坐标可能与显示的坐标不同。此漏洞会影响 Firefox ESR < 102.1、Firefox ESR < 91.12、Firefox < 103、Thunderbird < 102.1 和 Thunderbird < 91.12。(CVE-2022-36319)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Oracle Linux 8 主机上安装的一个程序包受到 ELSA-2022-5774 公告中提及的多个漏洞影响。

  - Mozilla 开发人员和 Mozilla Fuzzing 团队报告 Thunderbird 102 中存在内存安全错误。
    其中某些错误展示出内存损坏迹象，我们推测若攻击者付出足够努力，就能利用部分错误运行任意代码。(CVE-2022-2505)

  - 当访问以 `chrome: //` URL 作为源文本的目录列表时，会反映部分参数。
    (CVE-2022-36318)

  - 合并溢出和转换的 CSS 属性时，与鼠标光标交互的坐标可能与显示的坐标不同。(CVE-2022-36319)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程 Redhat Enterprise Linux 7 主机上安装的一个程序包受到 RHSA-2022: 5773 公告中提及的多个漏洞影响。

  - Mozilla：在 Firefox 103 和 102.1 中修复了内存安全缺陷 (CVE-2022-2505)

  - Mozilla：捆绑资源的目录索引反映了 URL 参数 (CVE-2022-36318)

  - Mozilla：使用 CSS 转换伪造鼠标位置 (CVE-2022-36319)

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

远程主机上安装的 thunderbird 版本低于 91.13.0-1。因此，它受到 ALAS2-2022-1855 公告中提及的多个漏洞影响。

  - Mozilla 开发人员和 Mozilla Fuzzing 团队报告 Thunderbird 102 中存在内存安全错误。
    其中某些错误展示出内存损坏迹象，我们推测若攻击者付出足够努力，就能利用部分错误运行任意代码。(CVE-2022-2505)

  - 当访问以 `chrome: //` URL 作为源文本的目录列表时，会反映部分参数。
    (CVE-2022-36318)

  - 合并溢出和转换的 CSS 属性时，与鼠标光标交互的坐标可能与显示的坐标不同。(CVE-2022-36319)

  - 攻击者可能已滥用 XSLT 错误处理，将攻击者控制的内容与地址栏中显示的其他来源相关联。这可能被用来诱骗用户提交用于受欺骗的源的数据。 (CVE-2022-38472)

  - Mozilla：跨源 XSLT 文档会继承父项的权限 (

远程 macOS 或 Mac OS X 主机上安装的 Mozilla Firefox 版本低于 103.0。因此，它受到 mfsa2022-28 公告中提及的多个漏洞影响。

  - 合并溢出和转换的 CSS 属性时，与鼠标光标交互的坐标可能与显示的坐标不同。(CVE-2022-36319)

  - 访问 URL 过长的网站时，用户界面会挂起。由于会话还原，这可能导致程序永久拒绝服务。此错误仅影响 Android 版 Firefox 。
    其他操作系统不受影响。(CVE-2022-36317)

  - 当访问以 `chrome: //` URL 作为源文本的目录列表时，会反映部分参数。
    (CVE-2022-36318)

  - 从本地文件系统打开 Windows 快捷方式时，攻击者可提供会导致操作系统发出意外网络请求的远程路径。此错误仅影响 Windows 版 Firefox。其他操作系统不受影响。(CVE-2022-36314)

  - 使用子资源完整性加载脚本时，能够执行注入操作的攻击者可触发程序重复使用之前缓存的包含不同完整性的错误元数据的条目。(CVE-2022-36315)

  - 使用 Performance API 时，攻击者能够注意到 PerformanceEntries 之间的细微差别，从而了解目标 URL 是否已重定向。(CVE-2022-36316)

  - Mozilla 开发人员和 Mozilla Fuzzing 团队报告 Firefox 102 中存在内存安全错误。其中某些错误显示内存损坏迹象，我们推测若攻击者付出足够努力，就能利用部分错误运行任意代码。（CVE-2022-2505、CVE-2022-36320）

请注意，Nessus 尚未测试这些问题，而是只依靠应用程序自我报告的版本号进行判断。

远程 AlmaLinux 9 主机上安装的一个程序包受到 ALSA-2022:5767 公告中提及的多个漏洞的影响。

请注意，Nessus 尚未测试这些问题，而是只依据应用程序自我报告的版本号进行判断。

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
163738	Oracle Linux 8 : thunderbird (ELSA-2022-5774)	Nessus	Oracle Linux Local Security Checks	2022/8/2	2024/10/22	high
206859	NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2024-0066)	Nessus	NewStart CGSL Local Security Checks	2024/9/10	2025/9/25	critical
165198	SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2022:3273-1)	Nessus	SuSE Local Security Checks	2022/9/15	2023/7/14	critical
163663	Mozilla Firefox ESR < 102.1	Nessus	MacOS X Local Security Checks	2022/8/1	2023/1/6	high
163652	RHEL 8：firefox (RHSA-2022: 5766)	Nessus	Red Hat Local Security Checks	2022/8/1	2024/11/7	high
163661	Mozilla Thunderbird < 102.1	Nessus	Windows	2022/8/1	2023/1/6	high
163664	RHEL 7：firefox (RHSA-2022: 5776)	Nessus	Red Hat Local Security Checks	2022/8/1	2024/11/7	high
163670	RHEL 8：thunderbird (RHSA-2022: 5771)	Nessus	Red Hat Local Security Checks	2022/8/1	2024/11/7	high
184657	Rocky Linux 8：firefox (RLSA-2022:5777)	Nessus	Rocky Linux Local Security Checks	2023/11/6	2023/11/14	high
163738	Oracle Linux 8：thunderbird (ELSA-2022-5774)	Nessus	Oracle Linux Local Security Checks	2022/8/2	2024/10/22	high
163669	RHEL 7：thunderbird (RHSA-2022: 5773)	Nessus	Red Hat Local Security Checks	2022/8/1	2024/11/8	high
166000	Amazon Linux 2：thunderbird (ALAS-2022-1855)	Nessus	Amazon Linux Local Security Checks	2022/10/11	2024/12/11	high
163496	Mozilla Firefox < 103.0	Nessus	MacOS X Local Security Checks	2022/7/27	2023/1/6	critical
167695	AlmaLinux 9：firefox (ALSA-2022:5767)	Nessus	Alma Linux Local Security Checks	2022/11/16	2023/1/4	high

检测

插件搜索

high

critical

critical

high

high

high

high

high

high

high

high

high

critical

high