Security Fix(es) :

  - Mozilla: Use-after-free in worker destruction     (CVE-2019-17008)

  - Mozilla: Memory safety bugs fixed in Firefox 71 and     Firefox ESR 68.3 (CVE-2019-17012)

  - Mozilla: Buffer overflow in plain text serializer     (CVE-2019-17005)

  - Mozilla: Use-after-free when performing device     orientation checks (CVE-2019-17010)

  - Mozilla: Use-after-free when retrieving a document in     antitracking (CVE-2019-17011)

The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 68.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-37 advisory.

  - Mozilla developers Christoph Diehl, Nathan Froyd, Jason Kratzer, Christian Holler, Karl Tomlinson, Tyson     Smith reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2019-17012)

  - When using nested workers, a use-after-free could occur during worker destruction. This resulted in a     potentially exploitable crash. (CVE-2019-17008)

  - When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been     supplied, leading to stack corruption and a potentially exploitable crash.   Note: this issue only occurs     on Windows. Other operating systems are unaffected. (CVE-2019-13722)

  - When encrypting with a block cipher, if a call to <code>NSCEncryptUpdate</code> was made with data smaller     than the block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. (CVE-2019-11745)

  - When running, the updater service wrote status and log files to an unrestricted location; potentially     allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater     service.   Note: This attack requires local system access and only affects Windows. Other operating     systems are not affected. (CVE-2019-17009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox ESR installed on the remote Windows host is prior to 68.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-37 advisory.

  - Mozilla developers Christoph Diehl, Nathan Froyd, Jason Kratzer, Christian Holler, Karl Tomlinson, Tyson     Smith reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2019-17012)

  - When using nested workers, a use-after-free could occur during worker destruction. This resulted in a     potentially exploitable crash. (CVE-2019-17008)

  - When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been     supplied, leading to stack corruption and a potentially exploitable crash.   Note: this issue only occurs     on Windows. Other operating systems are unaffected. (CVE-2019-13722)

  - When encrypting with a block cipher, if a call to <code>NSCEncryptUpdate</code> was made with data smaller     than the block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. (CVE-2019-11745)

  - When running, the updater service wrote status and log files to an unrestricted location; potentially     allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater     service.   Note: This attack requires local system access and only affects Windows. Other operating     systems are not affected. (CVE-2019-17009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 71.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-36 advisory.

  - Mozilla developers and community members Philipp, Diego Calleja, Mikhail Gavrilov, Jason Kratzer,     Christian Holler, Markus Stange, Tyson Smith reported memory safety bugs present in Firefox 70. Some of     these bugs showed evidence of memory corruption and we presume that with enough effort some of these could     have been exploited to run arbitrary code. (CVE-2019-17013)

  - Improper refcounting of soft token session objects could cause a use-after-free and crash (likely limited     to a denial of service). (CVE-2019-11756)

  - When using nested workers, a use-after-free could occur during worker destruction. This resulted in a     potentially exploitable crash. (CVE-2019-17008)

  - When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been     supplied, leading to stack corruption and a potentially exploitable crash.  Note: this issue only occurs     on Windows. Other operating systems are unaffected. (CVE-2019-13722)

  - When encrypting with a block cipher, if a call to <code>NSCEncryptUpdate</code> was made with data smaller     than the block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. (CVE-2019-11745)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 68.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-38 advisory.

  - Mozilla developers Christoph Diehl, Nathan Froyd, Jason Kratzer, Christian Holler, Karl Tomlinson, Tyson     Smith reported memory safety bugs present in Firefox 70 and Firefox ESR 68.2. Some of these bugs showed     evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2019-17012)

  - When using nested workers, a use-after-free could occur during worker destruction. This resulted in a     potentially exploitable crash. (CVE-2019-17008)

  - When setting a thread name on Windows in WebRTC, an incorrect number of arguments could have been     supplied, leading to stack corruption and a potentially exploitable crash.  Note: this issue only occurs     on Windows. Other operating systems are unaffected. (CVE-2019-13722)

  - When encrypting with a block cipher, if a call to <code>NSCEncryptUpdate</code> was made with data smaller     than the block size, a small out of bounds write could occur. This could have caused heap corruption and a     potentially exploitable crash. (CVE-2019-11745)

  - When running, the updater service wrote status and log files to an unrestricted location; potentially     allowing an unprivileged process to locate and exploit a vulnerability in file handling in the updater     service.  Note: This attack requires local system access and only affects Windows. Other operating systems     are not affected. (CVE-2019-17009)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:0292 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 68.4.1.

    Security Fix(es):

    * Mozilla: IonMonkey type confusion with StoreElementHole and FallibleStoreElement (CVE-2019-17026)

    * Mozilla: Use-after-free in worker destruction (CVE-2019-17008)

    * Mozilla: Memory safety bugs fixed in Firefox 71 and Firefox ESR 68.3 (CVE-2019-17012)

    * Mozilla: Bypass of @namespace CSS sanitization during pasting (CVE-2019-17016)

    * Mozilla: Type Confusion in XPCVariant.cpp (CVE-2019-17017)

    * Mozilla: Memory safety bugs fixed in Firefox 72 and Firefox ESR 68.4 (CVE-2019-17024)

    * Mozilla: Buffer overflow in plain text serializer (CVE-2019-17005)

    * Mozilla: Use-after-free when performing device orientation checks (CVE-2019-17010)

    * Mozilla: Use-after-free when retrieving a document in antitracking (CVE-2019-17011)

    * Mozilla: CSS sanitization does not escape HTML tags (CVE-2019-17022)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
131830	Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20191205)	Nessus	Scientific Linux Local Security Checks	12/9/2019	4/5/2024	high
131766	Mozilla Firefox ESR < 68.3	Nessus	MacOS X Local Security Checks	12/6/2019	11/18/2025	high
131767	Mozilla Firefox ESR < 68.3	Nessus	Windows	12/6/2019	11/18/2025	high
131773	Mozilla Firefox < 71.0	Nessus	Windows	12/6/2019	11/18/2025	high
131956	Mozilla Thunderbird < 68.3	Nessus	Windows	12/12/2019	11/18/2025	high
133384	RHEL 8 : thunderbird (RHSA-2020:0292)	Nessus	Red Hat Local Security Checks	1/31/2020	11/7/2024	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high