The version of Firefox ESR installed on the remote Windows host is prior to 68.7. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-13 advisory.

  - Mozilla developers Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and     Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough     effort some of these could have been exploited to run arbitrary code. (CVE-2020-6825)

  - A malicious Android application could craft an Intent that would have been processed by Firefox for     Android and potentially result in a file overwrite in the user's profile directory. One exploitation     vector for this would be to supply a user.js file providing arbitrary malicious preference values. Control     of arbitrary preferences can lead to sufficient compromise such that it is generally equivalent to     arbitrary code execution.  Note: This issue only affects Firefox for Android. Other operating systems are     unaffected. (CVE-2020-6828)

  - When following a link that opened an intent://-schemed URL, causing a custom tab to be opened, Firefox for     Android could be tricked into displaying the incorrect URI.   Note: This issue only affects Firefox for     Android. Other operating systems are unaffected. (CVE-2020-6827)

  - When reading from areas partially or fully outside the source resource with WebGL's     <code>copyTexSubImage</code> method, the specification requires the returned values be zero. Previously,     this memory was uninitialized, leading to potentially sensitive data disclosure. (CVE-2020-6821)

  - On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in     <code>GMPDecodeData</code>. It is possible that with enough effort this could have been exploited to run     arbitrary code. (CVE-2020-6822)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-4323-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to cause a denial of service, obtain     sensitive information, or execute arbitrary code. (CVE-2020-6821, CVE-2020-6822, CVE-2020-6824,     CVE-2020-6825, CVE-2020-6826)

    It was discovered that extensions could obtain auth codes from OAuth login flows in some circumstances. If     a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit     this to obtain access to the user's account. (CVE-2020-6823)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox to version 68.7.0 ESR fixes the following issues :

CVE-2020-6821: Uninitialized memory could be read when using the WebGL copyTexSubImage method (bsc#1168874).

CVE-2020-6822: Fixed out of bounds write in GMPDecodeData when processing large images (bsc#1168874).

CVE-2020-6825: Fixed Memory safety bugs (bsc#1168874).

CVE-2020-6827: Custom Tabs could have the URI spoofed (bsc#1168874).

CVE-2020-6828: Preference overwrite via crafted Intent (bsc#1168874).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 68.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-14 advisory.

  - Mozilla developers Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and     Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough     effort some of these could have been exploited to run arbitrary code. (CVE-2020-6825)

  - Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-     free. (CVE-2020-6819)

  - Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.
    (CVE-2020-6820)

  - When reading from areas partially or fully outside the source resource with WebGL's     <code>copyTexSubImage</code> method, the specification requires the returned values be zero. Previously,     this memory was uninitialized, leading to potentially sensitive data disclosure. (CVE-2020-6821)

  - On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in     <code>GMPDecodeData</code>. It is possible that with enough effort this could have been exploited to run     arbitrary code. (CVE-2020-6822)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote Windows host is prior to 68.7.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2020-14 advisory.

  - Mozilla developers Tyson Smith and Christian Holler reported memory safety bugs present in Firefox 74 and     Firefox ESR 68.6. Some of these bugs showed evidence of memory corruption and we presume that with enough     effort some of these could have been exploited to run arbitrary code. (CVE-2020-6825)

  - Under certain conditions, when running the nsDocShell destructor, a race condition can cause a use-after-     free. (CVE-2020-6819)

  - Under certain conditions, when handling a ReadableStream, a race condition can cause a use-after-free.
    (CVE-2020-6820)

  - When reading from areas partially or fully outside the source resource with WebGL's     <code>copyTexSubImage</code> method, the specification requires the returned values be zero. Previously,     this memory was uninitialized, leading to potentially sensitive data disclosure. (CVE-2020-6821)

  - On 32-bit builds, an out of bounds write could have occurred when processing an image larger than 4 GB in     <code>GMPDecodeData</code>. It is possible that with enough effort this could have been exploited to run     arbitrary code. (CVE-2020-6822)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote NewStart CGSL host, running version MAIN 6.01, has thunderbird packages installed that are affected by multiple vulnerabilities:

  - By encoding Unicode whitespace characters within the     From email header, an attacker can spoof the sender     email address that Thunderbird displays. This     vulnerability affects Thunderbird < 68.8.0.
    (CVE-2020-12397)

  - Under certain conditions, when running the nsDocShell     destructor, a race condition can cause a use-after-free.
    We are aware of targeted attacks in the wild abusing     this flaw. This vulnerability affects Thunderbird <     68.7.0, Firefox < 74.0.1, and Firefox ESR < 68.6.1.
    (CVE-2020-6819)

  - Under certain conditions, when handling a     ReadableStream, a race condition can cause a use-after-     free. We are aware of targeted attacks in the wild     abusing this flaw. This vulnerability affects     Thunderbird < 68.7.0, Firefox < 74.0.1, and Firefox ESR     < 68.6.1. (CVE-2020-6820)

  - When reading from areas partially or fully outside the     source resource with WebGL's     copyTexSubImage method, the specification     requires the returned values be zero. Previously, this     memory was uninitialized, leading to potentially     sensitive data disclosure. This vulnerability affects     Thunderbird < 68.7.0, Firefox ESR < 68.7, and Firefox <     75. (CVE-2020-6821)

  - On 32-bit builds, an out of bounds write could have     occurred when processing an image larger than 4 GB in     GMPDecodeData. It is possible that with     enough effort this could have been exploited to run     arbitrary code. This vulnerability affects Thunderbird <     68.7.0, Firefox ESR < 68.7, and Firefox < 75.
    (CVE-2020-6822)

  - Mozilla developers and community members Tyson Smith and     Christian Holler reported memory safety bugs present in     Firefox 74 and Firefox ESR 68.6. Some of these bugs     showed evidence of memory corruption and we presume that     with enough effort some of these could have been     exploited to run arbitrary code. This vulnerability     affects Thunderbird < 68.7.0, Firefox ESR < 68.7, and     Firefox < 75. (CVE-2020-6825)

  - A race condition when running shutdown code for Web     Worker led to a use-after-free vulnerability. This     resulted in a potentially exploitable crash. This     vulnerability affects Firefox ESR < 68.8, Firefox < 76,     and Thunderbird < 68.8.0. (CVE-2020-12387)

  - A buffer overflow could occur when parsing and     validating SCTP chunks in WebRTC. This could have led to     memory corruption and a potentially exploitable crash.
    This vulnerability affects Firefox ESR < 68.8, Firefox <     76, and Thunderbird < 68.8.0. (CVE-2020-6831)

  - The 'Copy as cURL' feature of Devtools' network tab did     not properly escape the HTTP POST data of a request,     which can be controlled by the website. If a user used     the 'Copy as cURL' feature and pasted the command into a     terminal, it could have resulted in the disclosure of     local files. This vulnerability affects Firefox ESR <     68.8, Firefox < 76, and Thunderbird < 68.8.0.
    (CVE-2020-12392)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 75 and Firefox ESR 68.7.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort some of these     could have been exploited to run arbitrary code. This     vulnerability affects Firefox ESR < 68.8, Firefox < 76,     and Thunderbird < 68.8.0. (CVE-2020-12395)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2020-4709:03 advisory.

    * Mozilla: Use-after-free while running the nsDocShell destructor (CVE-2020-6819)
      * Mozilla: Use-after-free when handling a ReadableStream (CVE-2020-6820)
      * Mozilla: Uninitialized memory could be read when using the WebGL copyTexSubImage method     (CVE-2020-6821)
      * Mozilla: Memory safety bugs fixed in Firefox 75 and Firefox ESR 68.7 (CVE-2020-6825)
      * Mozilla: Out of bounds write in GMPDecodeData when processing large images (CVE-2020-6822)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
135274	Mozilla Firefox ESR < 68.7	Nessus	Windows	4/7/2020	11/18/2025	critical
135284	Ubuntu 16.04 LTS / 18.04 LTS : Firefox vulnerabilities (USN-4323-1)	Nessus	Ubuntu Local Security Checks	4/8/2020	8/27/2024	critical
135396	SUSE SLED15 / SLES15 Security Update : MozillaFirefox (SUSE-SU-2020:0971-1)	Nessus	SuSE Local Security Checks	4/10/2020	3/19/2024	critical
135412	Mozilla Thunderbird < 68.7.0	Nessus	MacOS X Local Security Checks	4/14/2020	11/18/2025	critical
135413	Mozilla Thunderbird < 68.7.0	Nessus	Windows	4/14/2020	11/18/2025	critical
138776	NewStart CGSL MAIN 6.01 : thunderbird Multiple Vulnerabilities (NS-SA-2020-0036)	Nessus	NewStart CGSL Local Security Checks	7/21/2020	4/25/2023	critical
294639	MiracleLinux 4 : thunderbird-68.7.0-1.AXS4 (AXSA:2020-4709:03)	Nessus	Miracle Linux Local Security Checks	1/20/2026	1/21/2026	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical