Security Fix(es) :

  - Mozilla: Use-after-free in worker destruction     (CVE-2019-17008)

  - Mozilla: Memory safety bugs fixed in Firefox 71 and     Firefox ESR 68.3 (CVE-2019-17012)

  - Mozilla: Buffer overflow in plain text serializer     (CVE-2019-17005)

  - Mozilla: Use-after-free when performing device     orientation checks (CVE-2019-17010)

  - Mozilla: Use-after-free when retrieving a document in     antitracking (CVE-2019-17011)

Multiple security issues have been found in the Mozilla Firefox web browser, which could potentially result in the execution of arbitrary code.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-4148 advisory.

    [68.3.0-1.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [68.3.0-1]
    - Update to 68.3.0 build2

    [68.2.0-2]
    - Added patch for TLS 1.3 support.

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update upgrades Thunderbird to version 68.3.0.

Security Fix(es) :

  - Mozilla: Use-after-free in worker destruction     (CVE-2019-17008)

  - Mozilla: Memory safety bugs fixed in Firefox 71 and     Firefox ESR 68.3 (CVE-2019-17012)

  - Mozilla: Buffer overflow in plain text serializer     (CVE-2019-17005)

  - Mozilla: Use-after-free when performing device     orientation checks (CVE-2019-17010)

  - Mozilla: Use-after-free when retrieving a document in     antitracking (CVE-2019-17011)

The remote NewStart CGSL host, running version CORE 5.05 / MAIN 5.05, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - In libexpat before 2.2.8, crafted XML input could fool     the parser into changing from DTD parsing to document     parsing too early; a consecutive call to     XML_GetCurrentLineNumber (or XML_GetCurrentColumnNumber)     then resulted in a heap-based buffer over-read.
    (CVE-2019-15903)

  - When following the value's prototype chain, it was     possible to retain a reference to a locale, delete it,     and subsequently reference it. This resulted in a use-     after-free and a potentially exploitable crash. This     vulnerability affects Firefox < 70, Thunderbird < 68.2,     and Firefox ESR < 68.2. (CVE-2019-11757)

  - Mozilla community member Philipp reported a memory     safety bug present in Firefox 68 when 360 Total Security     was installed. This bug showed evidence of memory     corruption in the accessibility engine and we presume     that with enough effort that it could be exploited to     run arbitrary code. This vulnerability affects Firefox <     69, Thunderbird < 68.2, and Firefox ESR < 68.2.
    (CVE-2019-11758)

  - If two same-origin documents set document.domain     differently to become cross-origin, it was possible for     them to call arbitrary DOM methods/getters/setters on     the now-cross-origin window. This vulnerability affects     Firefox < 70, Thunderbird < 68.2, and Firefox ESR <     68.2. (CVE-2019-11762)

  - Failure to correctly handle null bytes when processing     HTML entities resulted in Firefox incorrectly parsing     these entities. This could have led to HTML comment text     being treated as HTML which could have led to XSS in a     web application under certain conditions. It could have     also led to HTML entities being masked from filters -     enabling the use of entities to mask the actual     characters of interest from filters. This vulnerability     affects Firefox < 70, Thunderbird < 68.2, and Firefox     ESR < 68.2. (CVE-2019-11763)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 69 and Firefox ESR 68.1.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort some of these     could be exploited to run arbitrary code. This     vulnerability affects Firefox < 70, Thunderbird < 68.2,     and Firefox ESR < 68.2. (CVE-2019-11764)

  - An attacker could have caused 4 bytes of HMAC output to     be written past the end of a buffer stored on the stack.
    This could be used by an attacker to execute arbitrary     code or more likely lead to a crash. This vulnerability     affects Firefox < 70, Thunderbird < 68.2, and Firefox     ESR < 68.2. (CVE-2019-11759)

  - A fixed-size stack buffer could overflow in nrappkit     when doing WebRTC signaling. This resulted in a     potentially exploitable crash in some instances. This     vulnerability affects Firefox < 70, Thunderbird < 68.2,     and Firefox ESR < 68.2. (CVE-2019-11760)

  - By using a form with a data URI it was possible to gain     access to the privileged JSONView object that had been     cloned into content. Impact from exposing this object     appears to be minimal, however it was a bypass of     existing defense in depth mechanisms. This vulnerability     affects Firefox < 70, Thunderbird < 68.2, and Firefox     ESR < 68.2. (CVE-2019-11761)

  - Under certain conditions, when checking the Resist     Fingerprinting preference during device orientation     checks, a race condition could have caused a use-after-     free and a potentially exploitable crash. This     vulnerability affects Thunderbird < 68.3, Firefox ESR <     68.3, and Firefox < 71. (CVE-2019-17010)

  - Under certain conditions, when retrieving a document     from a DocShell in the antitracking code, a race     condition could cause a use-after-free condition and a     potentially exploitable crash. This vulnerability     affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-17011)

  - Mozilla developers reported memory safety bugs present     in Firefox 70 and Firefox ESR 68.2. Some of these bugs     showed evidence of memory corruption and we presume that     with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability     affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-17012)

  - When using nested workers, a use-after-free could occur     during worker destruction. This resulted in a     potentially exploitable crash. This vulnerability     affects Thunderbird < 68.3, Firefox ESR < 68.3, and     Firefox < 71. (CVE-2019-17008)

  - The plain text serializer used a fixed-size array for     the number of  elements it could process; however it     was possible to overflow the static-sized array leading     to memory corruption and a potentially exploitable     crash. This vulnerability affects Thunderbird < 68.3,     Firefox ESR < 68.3, and Firefox < 71. (CVE-2019-17005)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
131831	Scientific Linux Security Update : firefox on SL7.x x86_64 (20191205)	Nessus	Scientific Linux Local Security Checks	2019/12/9	2024/4/5	high
131838	Debian DSA-4580-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2019/12/10	2024/4/5	high
131971	Oracle Linux 7 : thunderbird (ELSA-2019-4148)	Nessus	Oracle Linux Local Security Checks	2019/12/12	2024/10/22	high
131989	Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20191210)	Nessus	Scientific Linux Local Security Checks	2019/12/12	2024/4/4	high
133071	NewStart CGSL CORE 5.05 / MAIN 5.05 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0003)	Nessus	NewStart CGSL Local Security Checks	2020/1/20	2024/3/29	high
147312	NewStart CGSL MAIN 4.06 : thunderbird Multiple Vulnerabilities (NS-SA-2021-0002)	Nessus	NewStart CGSL Local Security Checks	2021/3/10	2023/4/25	critical

检测

插件搜索

high

high

high

high

high

critical