The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2014-175:02 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance and     portability.
    Security issues fixed with this release:
     CVE-2014-1493     Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 28.0, Firefox ESR     24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allow remote attackers to cause a     denial of service (memory corruption and application crash) or possibly execute arbitrary code via unknown     vectors.
     CVE-2014-1497     The mozilla::WaveReader::DecodeAudioData function in Mozilla Firefox before 28.0, Firefox ESR 24.x before     24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive     information from process heap memory, cause a denial of service (out-of-bounds read and application     crash), or possibly have unspecified other impact via a crafted WAV file.
     CVE-2014-1505     The SVG filter implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird     before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive displacement-     correlation information, and possibly bypass the Same Origin Policy and read text from a different domain,     via a timing attack involving feDisplacementMap elements, a related issue to CVE-2013-1693.
     CVE-2014-1508     The libxul.so!gfxContext::Polygon function in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4,     Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote attackers to obtain sensitive information     from process memory, cause a denial of service (out-of-bounds read and application crash), or possibly     bypass the Same Origin Policy via vectors involving MathML polygon rendering.
     CVE-2014-1509     Buffer overflow in the _cairo_truetype_index_to_ucs4 function in cairo, as used in Mozilla Firefox before     28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25, allows remote     attackers to execute arbitrary code via a crafted extension that renders fonts in a PDF document.
     CVE-2014-1510     The Web IDL implementation in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird     before 24.4, and SeaMonkey before 2.25 allows remote attackers to execute arbitrary JavaScript code with     chrome privileges by using an IDL fragment to trigger a window.open call.
     CVE-2014-1511     Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before     2.25 allow remote attackers to bypass the popup blocker via unspecified vectors.
     CVE-2014-1512     Use-after-free vulnerability in the TypeObject class in the JavaScript engine in Mozilla Firefox before     28.0, Firefox ESR 24.x before 24.4, Thunderbird before 24.4, and SeaMonkey before 2.25 allows remote     attackers to execute arbitrary code by triggering extensive memory consumption while garbage collection is     occurring.
     CVE-2014-1513     TypedArrayObject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before     24.4, and SeaMonkey before 2.25 does not prevent a zero-length transition during use of an ArrayBuffer     object, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based     out-of-bounds write or read) via a crafted web site.
     CVE-2014-1514     vmtypedarrayobject.cpp in Mozilla Firefox before 28.0, Firefox ESR 24.x before 24.4, Thunderbird before     24.4, and SeaMonkey before 2.25 does not validate the length of the destination array before a copy     operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-     bounds write and application crash) by triggering incorrect use of the TypedArrayObject class.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 4 : firefox-24.4.0-1.0.1.AXS4 (AXSA:2014-175:02)

critical Nessus Plugin ID 289190

Version 1.2

Version 1.1

Version 1.2 Feb 10, 2026, 11:15 AM Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202602101115
Version 1.1 Jan 16, 2026, 10:12 PM New Plugin Feed: 202601162212