The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2011:0471 advisory.

    Mozilla Firefox is an open source web browser. XULRunner provides the XUL     Runtime environment for Mozilla Firefox.

    Several flaws were found in the processing of malformed web content. A web     page containing malicious content could possibly lead to arbitrary code     execution with the privileges of the user running Firefox. (CVE-2011-0080,     CVE-2011-0081)

    An arbitrary memory write flaw was found in the way Firefox handled     out-of-memory conditions. If all memory was consumed when a user visited a     malicious web page, it could possibly lead to arbitrary code execution     with the privileges of the user running Firefox. (CVE-2011-0078)

    An integer overflow flaw was found in the way Firefox handled the HTML     frameset tag. A web page with a frameset tag containing large values for     the rows and cols attributes could trigger this flaw, possibly leading     to arbitrary code execution with the privileges of the user running     Firefox. (CVE-2011-0077)

    A flaw was found in the way Firefox handled the HTML iframe tag. A web page     with an iframe tag containing a specially-crafted source address could     trigger this flaw, possibly leading to arbitrary code execution with the     privileges of the user running Firefox. (CVE-2011-0075)

    A flaw was found in the way Firefox displayed multiple marquee elements. A     malformed HTML document could cause Firefox to execute arbitrary code with     the privileges of the user running Firefox. (CVE-2011-0074)

    A flaw was found in the way Firefox handled the nsTreeSelection element.
    Malformed content could cause Firefox to execute arbitrary code with the     privileges of the user running Firefox. (CVE-2011-0073)

    A use-after-free flaw was found in the way Firefox appended frame and     iframe elements to a DOM tree when the NoScript add-on was enabled.
    Malicious HTML content could cause Firefox to execute arbitrary code with     the privileges of the user running Firefox. (CVE-2011-0072)

    A directory traversal flaw was found in the Firefox resource:// protocol     handler. Malicious content could cause Firefox to access arbitrary files     accessible to the user running Firefox. (CVE-2011-0071)

    A double free flaw was found in the way Firefox handled     application/http-index-format documents. A malformed HTTP response could     cause Firefox to execute arbitrary code with the privileges of the user     running Firefox. (CVE-2011-0070)

    A flaw was found in the way Firefox handled certain JavaScript cross-domain     requests. If malicious content generated a large number of cross-domain     JavaScript requests, it could cause Firefox to execute arbitrary code with     the privileges of the user running Firefox. (CVE-2011-0069)

    A flaw was found in the way Firefox displayed the autocomplete pop-up.
    Malicious content could use this flaw to steal form history information.
    (CVE-2011-0067)

    Two use-after-free flaws were found in the Firefox mObserverList and     mChannel objects. Malicious content could use these flaws to execute     arbitrary code with the privileges of the user running Firefox.
    (CVE-2011-0066, CVE-2011-0065)

    A flaw was found in the Firefox XSLT generate-id() function. This function     returned the memory address of an object in memory, which could possibly be     used by attackers to bypass address randomization protections.
    (CVE-2011-1202)

    For technical details regarding these flaws, refer to the Mozilla security     advisories for Firefox 3.6.17. You can find a link to the Mozilla     advisories in the References section of this erratum.

    All Firefox users should upgrade to these updated packages, which contain     Firefox version 3.6.17, which corrects these issues. After installing the     update, Firefox must be restarted for the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The installed version of Firefox is earlier than 3.5.19.  Such versions are potentially affected by the following security issues :

  - Multiple use-after-free errors exist in the handling of     the object attributes 'mChannel', 'mObserverList' and     'nsTreeRange'. (CVE-2011-0065, CVE-2011-0066,     CVE-2011-0073)

  - An error exists in the handling of Java applets that     can allow sensitive form history data to be accessed.
    (CVE-2011-0067)

  - An error in the resource protocol can allow a directory     traversal attack. (CVE-2011-0071)

  - Multiple memory safety issues can lead to application     crashes and possibly remote code execution.
    (CVE-2011-0069, CVE-2011-0070, CVE-2011-0072,     CVE-2011-0074, CVE-2011-0075, CVE-2011-0077,     CVE-2011-0078, CVE-2011-0080)

  - An information disclosure vulnerability exists in the     'xsltGenerateIdFunction' function in the included     libxslt library. (CVE-2011-1202)

Mozilla XULRunner 1.9.2 was updated to the 1.9.2.17 security release.

MFSA 2011-12: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Credits

Mozilla developer Scoobidiver reported a memory safety issue which affected Firefox 4 and Firefox 3.6 (CVE-2011-0081)

The web development team of Alcidion reported a crash that affected Firefox 4, Firefox 3.6 and Firefox 3.5. (CVE-2011-0069)

Ian Beer reported a crash that affected Firefox 4, Firefox 3.6 and Firefox 3.5. (CVE-2011-0070)

Mozilla developers Bob Clary, Henri Sivonen, Marco Bonardo, Mats Palmgren and Jesse Ruderman reported memory safety issues which affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0080)

Aki Helin reported memory safety issues which affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0074 , CVE-2011-0075)

Ian Beer reported memory safety issues which affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0077 , CVE-2011-0078)

Martin Barbella reported a memory safety issue which affected Firefox 3.6 and Firefox 3.5. (CVE-2011-0072)

MFSA 2011-13 / CVE-2011-0065 / CVE-2011-0066 / CVE-2011-0073: Security researcher regenrecht reported several dangling pointer vulnerabilities via TippingPoint's Zero Day Initiative.

MFSA 2011-14 / CVE-2011-0067: Security researcher Paul Stone reported that a Java applet could be used to mimic interaction with form autocomplete controls and steal entries from the form history.

MFSA 2011-15 / CVE-2011-0076: David Remahl of Apple Product Security reported that the Java Embedding Plugin (JEP) shipped with the Mac OS X versions of Firefox could be exploited to obtain elevated access to resources on a user's system.

MFSA 2011-16 / CVE-2011-0071: Security researcher Soroush Dalili reported that the resource: protocol could be exploited to allow directory traversal on Windows and the potential loading of resources from non-permitted locations. The impact would depend on whether interesting files existed in predictable locations in a useful format.
For example, the existence or non-existence of particular images might indicate whether certain software was installed.

MFSA 2011-18 / CVE-2011-1202: Chris Evans of the Chrome Security Team reported that the XSLT generate-id() function returned a string that revealed a specific valid address of an object on the memory heap. It is possible that in some cases this address would be valuable information that could be used by an attacker while exploiting a different memory corruption but, in order to make an exploit more reliable or work around mitigation features in the browser or operating system.

According to its self-reported version, the Nessus Network Monitor running on the remote host is prior to 6.2.2. It is, therefore, affected by multiple vulnerabilities as referenced in the TNS-2023-23 advisory. Several of the third-party components were found to contain vulnerabilities, and updated versions have been made available by the providers. Out of caution and in line with best practice, Tenable has opted to upgrade these components to address the potential impact of the issues. Nessus Network Monitor 6.2.2 updates the following components:

  - c-ares from version 1.10.0 to version 1.19.1.
  - curl from version 7.79.1 to version 8.1.2.
  - libbzip2 from version 1.0.6 to version 1.0.8.
  - libpcre from version 8.42 to version 8.44.
  - libxml2 from version 2.7.7 to version 2.11.1.
  - libxslt from version 1.1.26 to version 1.1.37.
  - libxmlsec from version 1.2.18 to version 1.2.37.
  - sqlite from version 3.27.2 to version 3.40.1.
  - jQuery Cookie from version 1.3.1 to version 1.4.1.
  - jQuery UI from version 1.13.0 to version 1.13.2.
  - OpenSSL from version 3.0.8 to version 3.0.9.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - The xsltGenerateIdFunction function in functions.c in libxslt 1.1.26 and earlier, as used in Google Chrome     before 10.0.648.127 and other products, allows remote attackers to obtain potentially sensitive     information about heap memory addresses via an XML document containing a call to the XSLT generate-id     XPath function. (CVE-2011-1202)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Published	Updated	Severity
53580	RHEL 6 : firefox (RHSA-2011:0471)	Nessus	Red Hat Local Security Checks	4/29/2011	4/14/2025	high
53593	Firefox < 3.5.19 Multiple Vulnerabilities	Nessus	Windows	4/29/2011	6/23/2026	high
75956	openSUSE Security Update : mozilla-js192 (mozilla-js192-4460)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	critical
177842	Nessus Network Monitor < 6.2.2 Multiple Vulnerabilities (TNS-2023-23)	Nessus	Misc.	6/30/2023	7/6/2023	critical
217311	Linux Distros Unpatched Vulnerability : CVE-2011-1202	Nessus	Misc.	3/3/2025	9/2/2026	high

Detections

Analytics

Plugins Search

high

high

critical

critical

high