The remote MiracleLinux 4 host has packages installed that are affected by multiple vulnerabilities as referenced in the AXSA:2013-58:01 advisory.

    Description Mozilla Firefox is an open-source web browser, designed for standards compliance, performance     and portability.
    Security issues fixed with this release:
     CVE-2013-0744     Use-after-free vulnerability in the TableBackgroundPainter::TableBackgroundData::Destroy function in     Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before     17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows     remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) via an     HTML document with a table containing many columns and column groups.
     CVE-2013-0746     Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before     17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 do not     properly implement quickstubs that use the jsval data type for their return values, which allows remote     attackers to execute arbitrary code or cause a denial of service (compartment mismatch and application     crash) via crafted JavaScript code that is not properly handled during garbage collection.
     CVE-2013-0748     The XBL.__proto__.toString implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12     and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before     17.0.2, and SeaMonkey before 2.15 makes it easier for remote attackers to bypass the ASLR protection     mechanism by calling the toString function of an XBL object.
     CVE-2013-0750     Integer overflow in the JavaScript implementation in Mozilla Firefox before 18.0, Firefox ESR 10.x before     10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x     before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code via a crafted     string concatenation, leading to improper memory allocation and a heap-based buffer overflow.
     CVE-2013-0753     Use-after-free vulnerability in the serializeToStream implementation in the XMLSerializer component in     Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before     17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows     remote attackers to execute arbitrary code via crafted web content.
     CVE-2013-0754     Use-after-free vulnerability in the ListenerManager implementation in Mozilla Firefox before 18.0, Firefox     ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before 17.0.2, Thunderbird ESR 10.x before     10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary     code via vectors involving the triggering of garbage collection after memory allocation for listener     objects.
     CVE-2013-0758     Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before     17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote     attackers to execute arbitrary JavaScript code with chrome privileges by leveraging improper interaction     between plugin objects and SVG elements.
     CVE-2013-0759     Mozilla Firefox before 18.0, Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.2, Thunderbird before     17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x before 17.0.2, and SeaMonkey before 2.15 allow remote     attackers to spoof the address bar via vectors involving authentication information in the userinfo field     of a URL, in conjunction with a 204 (aka No Content) HTTP status code.
     CVE-2013-0762     Use-after-free vulnerability in the imgRequest::OnStopFrame function in Mozilla Firefox before 18.0,     Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x     before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute     arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
     CVE-2013-0766     Use-after-free vulnerability in the ~nsHTMLEditRules implementation in Mozilla Firefox before 18.0,     Firefox ESR 10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x     before 10.0.12 and 17.x before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute     arbitrary code or cause a denial of service (heap memory corruption) via unspecified vectors.
     CVE-2013-0767     The nsSVGPathElement::GetPathLengthScale function in Mozilla Firefox before 18.0, Firefox ESR 10.x before     10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12 and 17.x     before 17.0.1, and SeaMonkey before 2.15 allows remote attackers to execute arbitrary code or cause a     denial of service (out-of-bounds read) via unspecified vectors.
     CVE-2013-0769     Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 18.0, Firefox ESR     10.x before 10.0.12 and 17.x before 17.0.1, Thunderbird before 17.0.2, Thunderbird ESR 10.x before 10.0.12     and 17.x before 17.0.1, and SeaMonkey before 2.15 allow remote attackers to cause a denial of service     (memory corruption and application crash) or possibly execute arbitrary code via unknown vectors.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

MiracleLinux 4 : firefox-10.0.12-1.0.1.AXS4, xulrunner-10.0.12-1.0.1.AXS4 (AXSA:2013-58:01)

high Nessus Plugin ID 290030

Version 1.2

Version 1.1

Version 1.2 Feb 6, 2026, 8:56 AM Exploit attributes ("Exploit framework metasploit" set to "True") Exploit attributes ("Exploited by malware" set to "True") Plugin Feed: 202602060856
Version 1.1 Jan 16, 2026, 10:12 PM New Plugin Feed: 202601162212