This update for MozillaFirefox fixes the following issues :

  - Mozilla Firefox Firefox 60.7.2 MFSA 2019-19     (bsc#1138872)

  - CVE-2019-11708: Fix sandbox escape using Prompt:Open.

  - Insufficient vetting of parameters passed with the     Prompt:Open IPC message between child and parent     processes could result in the non-sandboxed parent     process opening web content chosen by a compromised     child process. When combined with additional     vulnerabilities this could result in executing arbitrary     code on the user's computer.

This update was imported from the SUSE:SLE-15:Update update project.

A sandbox escape was found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code if combined with additional vulnerabilities.

The remote NewStart CGSL host, running version MAIN 4.06, has firefox packages installed that are affected by multiple vulnerabilities:

  - Lack of correct bounds checking in Skia in Google Chrome     prior to 73.0.3683.75 allowed a remote attacker to     perform an out of bounds memory read via a crafted HTML     page. (CVE-2019-5798)

  - Cross-origin images can be read from a canvas element in     violation of the same-origin policy using the     transferFromImageBitmap method. *Note: This only affects     Firefox 65. Previous versions are unaffected.*. This     vulnerability affects Firefox < 65.0.1. (CVE-2018-18511)

  - Cross-origin images can be read in violation of the     same-origin policy by exporting an image after using     createImageBitmap to read the image and then rendering     the resulting bitmap image within a canvas element. This     vulnerability affects Firefox < 66. (CVE-2019-9797)

  - Insufficient vetting of parameters passed with the     Prompt:Open IPC message between child and parent     processes can result in the non-sandboxed parent process     opening web content chosen by a compromised child     process. When combined with additional vulnerabilities     this could result in executing arbitrary code on the     user's computer. This vulnerability affects Firefox ESR     < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2.
    (CVE-2019-11708)

  - A type confusion vulnerability can occur when     manipulating JavaScript objects due to issues in     Array.pop. This can allow for an exploitable crash. We     are aware of targeted attacks in the wild abusing this     flaw. This vulnerability affects Firefox ESR < 60.7.1,     Firefox < 67.0.3, and Thunderbird < 60.7.2.
    (CVE-2019-11707)

  - png_image_free in png.c in libpng 1.6.x before 1.6.37     has a use-after-free because png_image_free_function is     called under png_safe_execute. (CVE-2019-7317)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 4.06, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - Lack of correct bounds checking in Skia in Google Chrome     prior to 73.0.3683.75 allowed a remote attacker to     perform an out of bounds memory read via a crafted HTML     page. (CVE-2019-5798)

  - Cross-origin images can be read from a canvas element in     violation of the same-origin policy using the     transferFromImageBitmap method. *Note: This only affects     Firefox 65. Previous versions are unaffected.*. This     vulnerability affects Firefox < 65.0.1. (CVE-2018-18511)

  - Cross-origin images can be read in violation of the     same-origin policy by exporting an image after using     createImageBitmap to read the image and then rendering     the resulting bitmap image within a canvas element. This     vulnerability affects Firefox < 66. (CVE-2019-9797)

  - A flaw in Thunderbird's implementation of iCal causes a     stack buffer overflow in icalrecur_add_bydayrules when     processing certain email messages, resulting in a     potentially exploitable crash. This vulnerability     affects Thunderbird < 60.7.1. (CVE-2019-11705)

  - A flaw in Thunderbird's implementation of iCal causes a     type confusion in icaltimezone_get_vtimezone_properties     when processing certain email messages, resulting in a     crash. This vulnerability affects Thunderbird < 60.7.1.
    (CVE-2019-11706)

  - Insufficient vetting of parameters passed with the     Prompt:Open IPC message between child and parent     processes can result in the non-sandboxed parent process     opening web content chosen by a compromised child     process. When combined with additional vulnerabilities     this could result in executing arbitrary code on the     user's computer. This vulnerability affects Firefox ESR     < 60.7.2, Firefox < 67.0.4, and Thunderbird < 60.7.2.
    (CVE-2019-11708)

  - A type confusion vulnerability can occur when     manipulating JavaScript objects due to issues in     Array.pop. This can allow for an exploitable crash. We     are aware of targeted attacks in the wild abusing this     flaw. This vulnerability affects Firefox ESR < 60.7.1,     Firefox < 67.0.3, and Thunderbird < 60.7.2.
    (CVE-2019-11707)

  - A flaw in Thunderbird's implementation of iCal causes a     heap buffer overflow in icalmemory_strdup_and_dequote     when processing certain email messages, resulting in a     potentially exploitable crash. This vulnerability     affects Thunderbird < 60.7.1. (CVE-2019-11704)

  - png_image_free in png.c in libpng 1.6.x before 1.6.37     has a use-after-free because png_image_free_function is     called under png_safe_execute. (CVE-2019-7317)

  - A flaw in Thunderbird's implementation of iCal causes a     heap buffer overflow in parser_get_next_char when     processing certain email messages, resulting in a     potentially exploitable crash. This vulnerability     affects Thunderbird < 60.7.1. (CVE-2019-11703)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for MozillaThunderbird fixes the following issues :

Security issues fixed :

  - CVE-2019-11703: Fixed a heap-based buffer overflow in     icalmemorystrdupanddequote() (bsc#1137595).

  - CVE-2019-11704: Fixed a heap-based buffer overflow in     parser_get_next_char() (bsc#1137595).

  - CVE-2019-11705: Fixed a stack-based buffer overflow in     icalrecur_add_bydayrules() (bsc#1137595).

  - CVE-2019-11706: Fixed a type confusion in     icaltimezone_get_vtimezone_properties() (bsc#1137595).

  - CVE-2019-11707: Fixed a type confusion in Array.pop     (bsc#1138872).

  - CVE-2019-11708: Fixed a sandbox escape using Prompt:Open     (bsc#1138872).

This update was imported from the SUSE:SLE-15:Update update project.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1623 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 60.7.2.

    Security Fix(es):

    * Mozilla: Type confusion in Array.pop (CVE-2019-11707)

    * thunderbird: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c (CVE-2019-11705)

    * Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)

    * thunderbird: Heap buffer over read in icalparser.c parser_get_next_char (CVE-2019-11703)

    * thunderbird: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c     (CVE-2019-11704)

    * thunderbird: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c     (CVE-2019-11706)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for firefox is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 60.7.2 ESR.

Security Fix(es) :

* Mozilla: Type confusion in Array.pop (CVE-2019-11707)

* Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Security Fix(es) :

  - Mozilla: Type confusion in Array.pop (CVE-2019-11707)

  - thunderbird: Stack buffer overflow in     icalrecur_add_bydayrules in icalrecur.c (CVE-2019-11705)

  - Mozilla: Sandbox escape using Prompt:Open     (CVE-2019-11708)

  - thunderbird: Heap buffer over read in icalparser.c     parser_get_next_char (CVE-2019-11703)

  - thunderbird: Heap buffer overflow in     icalmemory_strdup_and_dequote function in icalvalue.c     (CVE-2019-11704)

  - thunderbird: Type confusion in     icaltimezone_get_vtimezone_properties function in     icalproperty.c (CVE-2019-11706)

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4045-1 advisory.

    A type confusion bug was discovered in Thunderbird. If a user were tricked in to opening a specially     crafted website in a browsing context, an attacker could exploit this by causing a denial of service, or     executing arbirary code. (CVE-2019-11707)

    It was discovered that a sandboxed child process could open arbitrary web content in the parent process     via the Prompt:Open IPC message. When combined with another vulnerability, an attacker could potentially     exploit this to execute arbitrary code. (CVE-2019-11708)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

libical: Heap buffer over read in icalparser.c parser_get_next_char (CVE-2019-11703)

libical: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c (CVE-2019-11706)

Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)

libical: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c (CVE-2019-11705)

libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c (CVE-2019-11704)

Mozilla: Type confusion in Array.pop (CVE-2019-11707)

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
126148	openSUSE Security Update : MozillaFirefox (openSUSE-2019-1595)	Nessus	SuSE Local Security Checks	2019/6/24	2022/5/27	critical
126391	Debian DSA-4474-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2019/7/2	2022/5/27	critical
128691	NewStart CGSL MAIN 4.06 : firefox Multiple Vulnerabilities (NS-SA-2019-0175)	Nessus	NewStart CGSL Local Security Checks	2019/9/11	2023/4/25	critical
128698	NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0178)	Nessus	NewStart CGSL Local Security Checks	2019/9/11	2023/4/25	critical
126231	openSUSE Security Update : MozillaThunderbird (openSUSE-2019-1606)	Nessus	SuSE Local Security Checks	2019/6/25	2022/12/5	critical
126319	RHEL 8 : thunderbird (RHSA-2019:1623)	Nessus	Red Hat Local Security Checks	2019/6/28	2024/11/6	critical
126386	CentOS 6 : firefox (CESA-2019:1604)	Nessus	CentOS Local Security Checks	2019/7/2	2023/4/25	critical
126435	Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20190627)	Nessus	Scientific Linux Local Security Checks	2019/7/2	2022/12/6	critical
126465	Ubuntu 16.04 LTS / 18.04 LTS : Thunderbird vulnerabilities (USN-4045-1)	Nessus	Ubuntu Local Security Checks	2019/7/3	2024/8/27	critical
126962	Amazon Linux 2 : thunderbird (ALAS-2019-1250)	Nessus	Amazon Linux Local Security Checks	2019/7/24	2022/12/7	critical

检测

插件搜索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical