The remote host is affected by the vulnerability described in GLSA-202003-10 (Mozilla Thunderbird: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Thunderbird.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker may be able to execute arbitrary code, cause a Denial       of Service condition, obtain sensitive information, or conduct Cross-Site       Request Forgery (CSRF).
  Workaround :

    There is no known workaround at this time.

New mozilla-firefox packages are available for Slackware 14.2 and
-current to fix security issues.

The version of Firefox installed on the remote Windows host is prior to 71.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-36 advisory.

  - Mozilla developers and community members Philipp, Diego Calleja, Mikhail Gavrilov, Jason Kratzer,     Christian Holler, Markus Stange, Tyson Smith reported memory safety bugs present in Firefox 70. Some of     these bugs showed evidence of memory corruption and we presume that with enough effort some of these could     have been exploited to run arbitrary code. (CVE-2019-17013)

  - Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited     to a denial of service). (CVE-2019-11756)

  - When using nested workers, a use-after-free could occur during worker destruction. This resulted in a     potentially exploitable crash. (CVE-2019-17008)

  - When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been     supplied, leading to stack corruption and a potentially exploitable crash.  Note: this issue only occurs     on Windows. Other operating systems are unaffected. (CVE-2019-13722)

  - When encrypting with a block cipher, if a call to <code>NSCEncryptUpdate</code> was made with data smaller     than the block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. (CVE-2019-11745)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4107 advisory.

    [68.3.0-1.0.1]
    - Update distribution for Oracle Linux [Orabug: 30143292]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [68.3.0-1]
    - Update to 68.3.0 ESR

    [68.2.0-4]
    - Added patch for TLS 1.3 support.

    [68.2.0-3]
    - Rebuild

    [68.2.0-2]
    - Rebuild

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - Mozilla: Use-after-free in worker destruction     (CVE-2019-17008)

  - Mozilla: Memory safety bugs fixed in Firefox 71 and     Firefox ESR 68.3 (CVE-2019-17012)

  - Mozilla: Buffer overflow in plain text serializer     (CVE-2019-17005)

  - Mozilla: Use-after-free when performing device     orientation checks (CVE-2019-17010)

  - Mozilla: Use-after-free when retrieving a document in     antitracking (CVE-2019-17011)

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4148 advisory.

    [68.3.0-1.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [68.3.0-1]
    - Update to 68.3.0 build2

    [68.2.0-2]
    - Added patch for TLS 1.3 support.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update upgrades Thunderbird to version 68.3.0.

Security Fix(es) :

  - Mozilla: Use-after-free in worker destruction     (CVE-2019-17008)

  - Mozilla: Memory safety bugs fixed in Firefox 71 and     Firefox ESR 68.3 (CVE-2019-17012)

  - Mozilla: Buffer overflow in plain text serializer     (CVE-2019-17005)

  - Mozilla: Use-after-free when performing device     orientation checks (CVE-2019-17010)

  - Mozilla: Use-after-free when retrieving a document in     antitracking (CVE-2019-17011)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - In libexpat before 2.2.8, crafted XML input could fool     the parser into changing from DTD parsing to document     parsing too early; a consecutive call to     XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber)     then resulted in a heap-based buffer over-read.
    (CVE-2019-15903)

  - When following the value's prototype chain, it was     possible to retain a reference to a locale, delete it,     and subsequently reference it. This resulted in a use-     after-free and a potentially exploitable crash. This     vulnerability affects Firefox < 70, Thunderbird < 68.2,     and Firefox ESR < 68.2. (CVE-2019-11757)

  - Mozilla community member Philipp reported a memory     safety bug present in Firefox 68 when 360 Total Security     was installed. This bug showed evidence of memory     corruption in the accessibility engine and we presume     that with enough effort that it could be exploited to     run arbitrary code. This vulnerability affects Firefox <     69, Thunderbird < 68.2, and Firefox ESR < 68.2.
    (CVE-2019-11758)

  - If two same-origin documents set document.domain     differently to become cross-origin, it was possible for     them to call arbitrary DOM methods/getters/setters on     the now-cross-origin window. This vulnerability affects     Firefox < 70, Thunderbird < 68.2, and Firefox ESR <     68.2. (CVE-2019-11762)

  - Failure to correctly handle null bytes when processing     HTML entities resulted in Firefox incorrectly parsing     these entities. This could have led to HTML comment text     being treated as HTML which could have led to XSS in a     web application under certain conditions. It could have     also led to HTML entities being masked from filters -     enabling the use of entities to mask the actual     characters of interest from filters. This vulnerability     affects Firefox < 70, Thunderbird < 68.2, and Firefox     ESR < 68.2. (CVE-2019-11763)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 69 and Firefox ESR 68.1.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort some of these     could be exploited to run arbitrary code. This     vulnerability affects Firefox < 70, Thunderbird < 68.2,     and Firefox ESR < 68.2. (CVE-2019-11764)

  - An attacker could have caused 4 bytes of HMAC output to     be written past the end of a buffer stored on the stack.
    This could be used by an attacker to execute arbitrary     code or more likely lead to a crash. This vulnerability     affects Firefox < 70, Thunderbird < 68.2, and Firefox     ESR < 68.2. (CVE-2019-11759)

  - A fixed-size stack buffer could overflow in nrappkit     when doing WebRTC signaling. This resulted in a     potentially exploitable crash in some instances. This     vulnerability affects Firefox < 70, Thunderbird < 68.2,     and Firefox ESR < 68.2. (CVE-2019-11760)

  - By using a form with a data URI it was possible to gain     access to the privileged JSONView object that had been     cloned into content. Impact from exposing this object     appears to be minimal, however it was a bypass of     existing defense in depth mechanisms. This vulnerability     affects Firefox < 70, Thunderbird < 68.2, and Firefox     ESR < 68.2. (CVE-2019-11761)

  - Under certain conditions, when checking the Resist     Fingerprinting preference during device orientation     checks, a race condition could have caused a use-after-     free and a potentially exploitable crash. This     vulnerability affects Thunderbird < 68.3, Firefox ESR <     68.3, and Firefox < 71. (CVE-2019-17010)

  - Under certain conditions, when retrieving a document     from a DocShell in the antitracking code, a race     condition could cause a use-after-free condition and a     potentially exploitable crash. This vulnerability     affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-17011)

  - Mozilla developers reported memory safety bugs present     in Firefox 70 and Firefox ESR 68.2. Some of these bugs     showed evidence of memory corruption and we presume that     with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability     affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-17012)

  - When using nested workers, a use-after-free could occur     during worker destruction. This resulted in a     potentially exploitable crash. This vulnerability     affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-17008)

  - The plain text serializer used a fixed-size array for     the number of  elements it could process; however it     was possible to overflow the static-sized array leading     to memory corruption and a potentially exploitable     crash. This vulnerability affects Thunderbird < 68.3,     Firefox ESR < 68.3, and Firefox < 71. (CVE-2019-17005)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
134587	GLSA-202003-10 : Mozilla Thunderbird: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	2020/3/16	2020/9/28	critical
131681	Slackware 14.2 / current : mozilla-firefox (SSA:2019-337-01)	Nessus	Slackware Local Security Checks	2019/12/4	2024/4/5	high
147312	NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0002)	Nessus	NewStart CGSL Local Security Checks	2021/3/10	2023/4/25	critical
131773	Mozilla Firefox < 71.0	Nessus	Windows	2019/12/6	2025/11/18	high
131828	Oracle Linux 7 : firefox (ELSA-2019-4107)	Nessus	Oracle Linux Local Security Checks	2019/12/9	2024/10/22	high
131831	Scientific Linux Security Update : firefox on SL7.x x86_64 (20191205)	Nessus	Scientific Linux Local Security Checks	2019/12/9	2024/4/5	high
131838	Debian DSA-4580-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2019/12/10	2024/4/5	high
131971	Oracle Linux 7 : thunderbird (ELSA-2019-4148)	Nessus	Oracle Linux Local Security Checks	2019/12/12	2024/10/22	high
131989	Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20191210)	Nessus	Scientific Linux Local Security Checks	2019/12/12	2024/4/4	high
133071	NewStart CGSL CORE 5.05 / MAIN 5.05 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0003)	Nessus	NewStart CGSL Local Security Checks	2020/1/20	2024/3/29	high

检测

插件搜索

critical

high

critical

high

high

high

high

high

high

high