According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Use-after-free in compositor potentially allows code     execution (CVE-2018-5148)

  - Memory safety bugs fixed in Firefox 60 and Firefox ESR     52.8 (CVE-2018-5150)

  - Backport critical security fixes in Skia     (CVE-2018-5183)

  - Use-after-free with SVG animations and clip paths     (CVE-2018-5154)

  - Use-after-free with SVG animations and text paths     (CVE-2018-5155)

  - Same-origin bypass of PDF Viewer to view protected PDF     files (CVE-2018-5157)

  - Malicious PDF can inject JavaScript into PDF Viewer     (CVE-2018-5158)

  - Integer overflow and out-of-bounds write in Skia     (CVE-2018-5159)

  - Lightweight themes can be installed without user     interaction (CVE-2018-5168)

  - Buffer overflow during UTF-8 to Unicode string     conversion through legacy extension (CVE-2018-5178)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for firefox is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 52.8.0 ESR.

Security Fix(es) :

* Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150)

* Mozilla: Backport critical security fixes in Skia (CVE-2018-5183)

* Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154)

* Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155)

* Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157)

* Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158)

* Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159)

* Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168)

* Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.

The remote host is affected by the vulnerability described in GLSA-201811-13 (Mozilla Thunderbird: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Thunderbird.
      Please review the referenced Mozilla Foundation Security Advisories and       CVE identifiers below for details.
  Impact :

    A remote attacker may be able to execute arbitrary code, cause a Denial       of Service condition, obtain sensitive information, or conduct Cross-Site       Request Forgery (CSRF).
  Workaround :

    There is no known workaround at this time.

The remote NewStart CGSL host, running version MAIN 4.05, has firefox packages installed that are affected by multiple vulnerabilities:

  - A use-after-free vulnerability can occur while     enumerating attributes during SVG animations with clip     paths. This results in a potentially exploitable crash.
    This vulnerability affects Thunderbird < 52.8,     Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR <     52.8. (CVE-2018-5154)

  - A use-after-free vulnerability can occur while adjusting     layout during SVG animations with text paths. This     results in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.8, Thunderbird     ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.
    (CVE-2018-5155)

  - Same-origin protections for the PDF viewer can be     bypassed, allowing a malicious site to intercept     messages meant for the viewer. This could allow the site     to retrieve PDF files restricted to viewing by an     authenticated user on a third-party website. This     vulnerability affects Firefox ESR < 52.8 and Firefox <     60. (CVE-2018-5157)

  - The PDF viewer does not sufficiently sanitize PostScript     calculator functions, allowing malicious JavaScript to     be injected through a crafted PDF file. This JavaScript     can then be run with the permissions of the PDF viewer     by its worker. This vulnerability affects Firefox ESR <     52.8 and Firefox < 60. (CVE-2018-5158)

  - An integer overflow can occur in the Skia library due to     32-bit integer use in an array without integer overflow     checks, resulting in possible out-of-bounds writes. This     could lead to a potentially exploitable crash     triggerable by web content. This vulnerability affects     Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox <     60, and Firefox ESR < 52.8. (CVE-2018-5159)

  - A buffer overflow was found during UTF8 to Unicode     string conversion within JavaScript with extremely large     amounts of data. This vulnerability requires the use of     a malicious or vulnerable legacy extension in order to     occur. This vulnerability affects Thunderbird ESR <     52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
    (CVE-2018-5178)

  - Mozilla developers backported selected changes in the     Skia library. These changes correct memory corruption     issues including invalid buffer reads and writes during     graphic operations. This vulnerability affects     Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox     ESR < 52.8. (CVE-2018-5183)

  - A use-after-free vulnerability can occur in the     compositor during certain graphics operations when a raw     pointer is used instead of a reference counted one. This     results in a potentially exploitable crash. This     vulnerability affects Firefox ESR < 52.7.3 and Firefox <     59.0.2. (CVE-2018-5148)

  - Memory safety bugs were reported in Firefox 59, Firefox     ESR 52.7, and Thunderbird 52.7. Some of these bugs     showed evidence of memory corruption and we presume that     with enough effort that some of these could be exploited     to run arbitrary code. This vulnerability affects     Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox <     60, and Firefox ESR < 52.8. (CVE-2018-5150)

  - Sites can bypass security checks on permissions to     install lightweight themes by manipulating the baseURI     property of the theme element. This could allow a     malicious site to install a theme without user     interaction which could contain offensive or     embarrassing images. This vulnerability affects     Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox <     60, and Firefox ESR < 52.8. (CVE-2018-5168)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
110130	EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1126)	Nessus	Huawei Local Security Checks	5/29/2018	10/1/2024	critical
110248	CentOS 7 : firefox (CESA-2018:1415)	Nessus	CentOS Local Security Checks	5/31/2018	9/30/2024	critical
119133	GLSA-201811-13 : Mozilla Thunderbird: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	11/26/2018	7/19/2024	critical
127384	NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0130)	Nessus	NewStart CGSL Local Security Checks	8/12/2019	1/14/2021	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical