This update for MozillaFirefox to ESR 52.8 release fixes the following issues: Update to Firefox ESR 52.8 (bsc#1092548) Security issues fixed :

  - MFSA 2018-12/CVE-2018-5159: Integer overflow and     out-of-bounds write in Skia

  - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject     JavaScript into PDF Viewer

  - MFSA 2018-12/CVE-2018-5168: Lightweight themes can be     installed without user interaction

  - MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in     Firefox 60 and Firefox ESR 52.8

  - MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG     animations and text paths

  - MFSA 2018-12/CVE-2018-5183: Backport critical security     fixes in Skia

  - MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF     Viewer to view protected PDF files

  - MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG     animations and clip paths

  - MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8     to Unicode string conversion through legacy extension

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for MozillaFirefox to the ESR 52.8 release fixes the following issues: Mozil to Firefox ESR 52.8 (bsc#1092548) Security issues fixed :

  - MFSA 2018-12/CVE-2018-5159: Integer overflow and     out-of-bounds write in Skia

  - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject     JavaScript into PDF Viewer

  - MFSA 2018-12/CVE-2018-5168: Lightweight themes can be     installed without user interaction

  - MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in     Firefox 60 and Firefox ESR 52.8

  - MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG     animations and text paths

  - MFSA 2018-12/CVE-2018-5183: Backport critical security     fixes in Skia

  - MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF     Viewer to view protected PDF files

  - MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG     animations and clip paths

  - MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8     to Unicode string conversion through legacy extension

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Use-after-free in compositor potentially allows code     execution (CVE-2018-5148)

  - Memory safety bugs fixed in Firefox 60 and Firefox ESR     52.8 (CVE-2018-5150)

  - Backport critical security fixes in Skia     (CVE-2018-5183)

  - Use-after-free with SVG animations and clip paths     (CVE-2018-5154)

  - Use-after-free with SVG animations and text paths     (CVE-2018-5155)

  - Same-origin bypass of PDF Viewer to view protected PDF     files (CVE-2018-5157)

  - Malicious PDF can inject JavaScript into PDF Viewer     (CVE-2018-5158)

  - Integer overflow and out-of-bounds write in Skia     (CVE-2018-5159)

  - Lightweight themes can be installed without user     interaction (CVE-2018-5168)

  - Buffer overflow during UTF-8 to Unicode string     conversion through legacy extension (CVE-2018-5178)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for firefox is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 52.8.0 ESR.

Security Fix(es) :

* Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150)

* Mozilla: Backport critical security fixes in Skia (CVE-2018-5183)

* Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154)

* Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155)

* Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157)

* Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158)

* Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159)

* Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168)

* Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.

The remote NewStart CGSL host, running version MAIN 4.05, has firefox packages installed that are affected by multiple vulnerabilities:

  - A use-after-free vulnerability can occur while     enumerating attributes during SVG animations with clip     paths. This results in a potentially exploitable crash.
    This vulnerability affects Thunderbird < 52.8,     Thunderbird ESR < 52.8, Firefox < 60, and Firefox ESR <     52.8. (CVE-2018-5154)

  - A use-after-free vulnerability can occur while adjusting     layout during SVG animations with text paths. This     results in a potentially exploitable crash. This     vulnerability affects Thunderbird < 52.8, Thunderbird     ESR < 52.8, Firefox < 60, and Firefox ESR < 52.8.
    (CVE-2018-5155)

  - Same-origin protections for the PDF viewer can be     bypassed, allowing a malicious site to intercept     messages meant for the viewer. This could allow the site     to retrieve PDF files restricted to viewing by an     authenticated user on a third-party website. This     vulnerability affects Firefox ESR < 52.8 and Firefox <     60. (CVE-2018-5157)

  - The PDF viewer does not sufficiently sanitize PostScript     calculator functions, allowing malicious JavaScript to     be injected through a crafted PDF file. This JavaScript     can then be run with the permissions of the PDF viewer     by its worker. This vulnerability affects Firefox ESR <     52.8 and Firefox < 60. (CVE-2018-5158)

  - An integer overflow can occur in the Skia library due to     32-bit integer use in an array without integer overflow     checks, resulting in possible out-of-bounds writes. This     could lead to a potentially exploitable crash     triggerable by web content. This vulnerability affects     Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox <     60, and Firefox ESR < 52.8. (CVE-2018-5159)

  - A buffer overflow was found during UTF8 to Unicode     string conversion within JavaScript with extremely large     amounts of data. This vulnerability requires the use of     a malicious or vulnerable legacy extension in order to     occur. This vulnerability affects Thunderbird ESR <     52.8, Thunderbird < 52.8, and Firefox ESR < 52.8.
    (CVE-2018-5178)

  - Mozilla developers backported selected changes in the     Skia library. These changes correct memory corruption     issues including invalid buffer reads and writes during     graphic operations. This vulnerability affects     Thunderbird ESR < 52.8, Thunderbird < 52.8, and Firefox     ESR < 52.8. (CVE-2018-5183)

  - A use-after-free vulnerability can occur in the     compositor during certain graphics operations when a raw     pointer is used instead of a reference counted one. This     results in a potentially exploitable crash. This     vulnerability affects Firefox ESR < 52.7.3 and Firefox <     59.0.2. (CVE-2018-5148)

  - Memory safety bugs were reported in Firefox 59, Firefox     ESR 52.7, and Thunderbird 52.7. Some of these bugs     showed evidence of memory corruption and we presume that     with enough effort that some of these could be exploited     to run arbitrary code. This vulnerability affects     Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox <     60, and Firefox ESR < 52.8. (CVE-2018-5150)

  - Sites can bypass security checks on permissions to     install lightweight themes by manipulating the baseURI     property of the theme element. This could allow a     malicious site to install a theme without user     interaction which could contain offensive or     embarrassing images. This vulnerability affects     Thunderbird < 52.8, Thunderbird ESR < 52.8, Firefox <     60, and Firefox ESR < 52.8. (CVE-2018-5168)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The versions of Oracle Siebel CRM installed on the remote host are affected by multiple vulnerabilities as referenced in the October 2022 CPU advisory.

  - Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing     (XMLBeans)). Supported versions that are affected are 22.8 and prior. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Siebel Apps - Marketing.
    Successful attacks of this vulnerability can result in unauthorized access to critical data or complete     access to all Siebel Apps - Marketing accessible data and unauthorized ability to cause a hang or     frequently repeatable crash (complete DOS) of Siebel Apps - Marketing. (CVE-2021-23926)

  - Vulnerability in the Siebel Industry - Life Sciences product of Oracle Siebel CRM (component: eDetailing     (PDF Viewer)). Supported versions that are affected are 22.8 and prior. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Siebel Industry - Life     Sciences. Successful attacks require human interaction from a person other than the attacker. Successful     attacks of this vulnerability can result in takeover of Siebel Industry - Life Sciences. (CVE-2018-5158)

  - Vulnerability in the Siebel Engineering - Rel Eng product of Oracle Siebel CRM (component: Build System     (Visual Studio)). Supported versions that are affected are 22.8 and prior. Easily exploitable     vulnerability allows unauthenticated attacker with logon to the infrastructure where Siebel Engineering -     Rel Eng executes to compromise Siebel Engineering - Rel Eng. Successful attacks require human interaction     from a person other than the attacker. Successful attacks of this vulnerability can result in takeover of     Siebel Engineering - Rel Eng. (CVE-2020-16856)

  - Vulnerability in the Siebel Core - Automation product of Oracle Siebel CRM (component: Keyword Automation     (Google Gson)). Supported versions that are affected are 22.8 and prior. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - Automation.
    Successful attacks of this vulnerability can result in unauthorized ability to cause a hang or frequently     repeatable crash (complete DOS) of Siebel Core - Automation.  Vulnerability in the Siebel Core - Common     Components product of Oracle Siebel CRM (component: DISA (Google Gson)). Supported versions that are     affected are 22.8 and prior. Easily exploitable vulnerability allows unauthenticated attacker with network     access via HTTP to compromise Siebel Core - Common Components. Successful attacks of this vulnerability     can result in unauthorized ability to cause a hang or frequently repeatable crash (complete DOS) of Siebel     Core - Common Components. (CVE-2022-25647)

  - Vulnerability in the Siebel Core - Common Components product of Oracle Siebel CRM (component: Calendar     (Moment.js)). Supported versions that are affected are 22.8 and prior. Easily exploitable vulnerability     allows unauthenticated attacker with network access via HTTP to compromise Siebel Core - Common     Components. Successful attacks of this vulnerability can result in unauthorized creation, deletion or     modification access to critical data or all Siebel Core - Common Components accessible data.
    (CVE-2022-24785)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
109887	SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:1319-1)	Nessus	SuSE Local Security Checks	5/17/2018	10/4/2024	critical
109939	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:1334-1)	Nessus	SuSE Local Security Checks	5/21/2018	10/4/2024	critical
110129	EulerOS 2.0 SP1 : firefox (EulerOS-SA-2018-1125)	Nessus	Huawei Local Security Checks	5/29/2018	10/1/2024	critical
110130	EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1126)	Nessus	Huawei Local Security Checks	5/29/2018	10/1/2024	critical
110248	CentOS 7 : firefox (CESA-2018:1415)	Nessus	CentOS Local Security Checks	5/31/2018	9/30/2024	critical
127384	NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0130)	Nessus	NewStart CGSL Local Security Checks	8/12/2019	1/14/2021	critical
212450	Oracle Siebel Server (October 2022 CPU)	Nessus	Misc.	12/11/2024	12/12/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical