The version of Firefox installed on the remote Windows host is prior to 58.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-02 advisory.

  - Mozilla developers and community members Calixte Denizet, Christian Holler, Alex Gaynor, Yoshi Huang, Bob     Clary, Nils Ohlmeier, Jason Kratzer, Jesse Ruderman, Philipp, Mike Taylor, Marcia Knous, Paul Adenot,     Randell Jesup, JW Wang, Tyson Smith, Emilio Cobos lvarez, Ted Campbell, Stephen Fewer, Tristan Bourvon,     and Jet Villegas reported memory safety bugs present in Firefox 57. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort that some of these could be exploited to run     arbitrary code. (CVE-2018-5090)

  - A potential integer overflow in the <code>DoCrypt</code> function of WebCrypto was identified. If a means     was found of exploiting it, it could result in an out-of-bounds write. (CVE-2018-5122)

  - A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers.
    This results in a potentially exploitable crash. (CVE-2018-5091)

  - A use-after-free vulnerability can occur when the thread for a Web Worker is freed from memory prematurely     instead of from memory in the main thread while cancelling fetch operations. (CVE-2018-5092)

  - A heap buffer overflow vulnerability may occur in WebAssembly during Memory/Table resizing, resulting in a     potentially exploitable crash. (CVE-2018-5093)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Mozilla Firefox < 58.0

critical Nessus Plugin ID 106303

Version 1.8

Version 1.7

Version 1.8 Nov 19, 2025, 7:37 AM Detection (updated detection logic) Plugin metadata Plugin Feed: 202511190737
Version 1.7 Oct 31, 2025, 8:07 PM CVSSv3 score source (set to "CVE-2018-5122") Plugin Feed: 202510312007