The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2024:0963 advisory.

  - Mozilla: Out-of-bounds memory read in networking channels (CVE-2024-1546)

  - Mozilla: Alert dialog could have been spoofed on another site (CVE-2024-1547)

  - Mozilla: Fullscreen Notification could have been hidden by select element (CVE-2024-1548)

  - Mozilla: Custom cursor could obscure the permission dialog (CVE-2024-1549)

  - Mozilla: Mouse cursor re-positioned unexpectedly could have led to unintended permission grants     (CVE-2024-1550)

  - Mozilla: Multipart HTTP Responses would accept the Set-Cookie header in response parts (CVE-2024-1551)

  - Mozilla: Incorrect code generation on 32-bit ARM devices (CVE-2024-1552)

  - Mozilla: Memory safety bugs fixed in Firefox 123, Firefox ESR 115.8, and Thunderbird 115.8 (CVE-2024-1553)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 9 : thunderbird (RHSA-2024:0963)

high Nessus Plugin ID 190983

Version 1.2

Version 1.1

Version 1.0

Version 1.0

Version 1.2 Apr 28, 2024, 2:25 PM Detection (updated detection logic) Plugin metadata Plugin Feed: 202404281425
Version 1.1 Feb 26, 2024, 1:21 PM IAVM reference STIG Severity (changed from "I" to none) Plugin Feed: 202402261321
Version 1.0 Feb 26, 2024, 7:16 AM New Plugin Feed: 202402260716
Version 1.0 Feb 26, 2024, 11:03 AM IAVM reference STIG Severity (changed from "I" to none) Plugin Feed: 202402261103