The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:3756 advisory.

  - Mozilla: Use-after-free when creating index updates in IndexedDB (CVE-2019-11757)

  - Mozilla: Potentially exploitable crash due to 360 Total Security (CVE-2019-11758)

  - Mozilla: Stack buffer overflow in HKDF output (CVE-2019-11759)

  - Mozilla: Stack buffer overflow in WebRTC networking (CVE-2019-11760)

  - Mozilla: Unintended access to a privileged JSONView object (CVE-2019-11761)

  - Mozilla: document.domain-based origin isolation has same-origin-property violation (CVE-2019-11762)

  - Mozilla: Incorrect HTML parsing results in XSS bypass technique (CVE-2019-11763)

  - Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764)

  - expat: heap-based buffer over-read via crafted XML input (CVE-2019-15903)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 6 : thunderbird (RHSA-2019:3756)

high Nessus Plugin ID 130742

Version 1.6

Version 1.5

Version 1.6 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404281425
Version 1.5 Apr 12, 2024, 2:03 PM CVSS temporal metrics ("CVSSv2 temporal vector" set to "CVSS2#E:POC/RL:OF/RC:C") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:P/RL:O/RC:C") Exploit attributes ("Exploit available" set to "True") Exploit attributes ("Exploitability ease" changed from "No known exploits are available" to "Exploits are available") Plugin Feed: 202404121403