The version of Firefox installed on the remote macOS or Mac OS X host is prior to 54.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-15 advisory.

  - A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer     overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2     version 1.3.10. (CVE-2017-7778)

  - A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS     layout when attempting to use a node in the tree that no longer exists. This results in a potentially     exploitable crash. (CVE-2017-5472)

  - A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This     results in a potentially exploitable crash. (CVE-2017-7749)

  - A use-after-free vulnerability during video control operations when a <code><track></code> element     holds a reference to an older window if that window has been replaced in the DOM. This results in a     potentially exploitable crash. (CVE-2017-7750)

  - A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable     crash. (CVE-2017-7751)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1747:01 advisory.

    Graphite2 is a project within SILs Non-Roman Script Initiative and Language     Software Development groups to provide rendering capabilities for complex     non-Roman writing systems. Graphite can be used to create smart fonts capable     of displaying writing systems with various complex behaviors. With respect to     the Text Encoding Model, Graphite handles the Rendering aspect of writing     system implementation.
    Security issues fixed with this release:
    CVE-2017-7771
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7772
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7773
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7774
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7775
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7776
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7777
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7778
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    The following packages have been upgraded to a newer upstream version: graphite2 (1.3.10).

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2017-1705:04 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards     compliance, performance and portability.
    Security issues fixed with this release:
    CVE-2017-5470
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-5472
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7749
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7750
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7751
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7752
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7754
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7756
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7757
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7758
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7764
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7771
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7772
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7773
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7774
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7775
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7776
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7777
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.
    CVE-2017-7778
    ** RESERVED **     This candidate has been reserved by an organization or individual that     will use it when announcing a new security problem.  When the     candidate has been publicized, the details for this candidate will be     provided.

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
275614	Mozilla Firefox < 54.0	Nessus	MacOS X Local Security Checks	11/18/2025	11/18/2025	critical
290126	MiracleLinux 7 : graphite2-1.3.10-1.el7 (AXSA:2017-1747:01)	Nessus	Miracle Linux Local Security Checks	1/16/2026	1/16/2026	critical
291570	MiracleLinux 7 : firefox-52.2.0-1.0.1.el7.AXS7 (AXSA:2017-1705:04)	Nessus	Miracle Linux Local Security Checks	1/19/2026	1/19/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical