The remote host is affected by the vulnerability described in GLSA-201903-04 (Mozilla Firefox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox. Please       review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page possibly resulting in the execution of arbitrary code with the       privileges of the process or cause a Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

The remote host is affected by the vulnerability described in GLSA-201904-07 (Mozilla Thunderbird and Firefox: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Thunderbird and       Firefox. Please review the referenced Mozilla Foundation Security       Advisories and CVE identifiers below for details.
  Impact :

    Please review the referenced Mozilla Foundation Security Advisories and       CVE identifiers below for details.
  Workaround :

    There is no known workaround at this time.

Mozilla Foundation reports :

CVE-2018-18500: Use-after-free parsing HTML5 stream

CVE-2018-18503: Memory corruption with Audio Buffer

CVE-2018-18504: Memory corruption and out-of-bounds read of texture client buffer

CVE-2018-18505: Privilege escalation through IPC channel messages

CVE-2018-18506: Proxy Auto-Configuration file can define localhost access to be proxied

CVE-2018-18502: Memory safety bugs fixed in Firefox 65

CVE-2018-18501: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-0219 advisory.

    [60.5.0-2.0.1]
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat file

    [60.5.0-2]
    - Updated to 60.5.0 ESR build2

    [60.5.0-1]
    - Updated to 60.5.0 ESR build1

    [60.4.0-3]
    - Fixing fontconfig warnings (rhbz#1601475)

    [60.4.0-2]
    - Added pipewire patch from Tomas Popela (rhbz#1664270)

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:0218 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 60.5.0 ESR.

    Security Fix(es):

    * Mozilla: Use-after-free parsing HTML5 stream (CVE-2018-18500)

    * Mozilla: Memory safety bugs fixed in Firefox 65 and Firefox ESR 60.5 (CVE-2018-18501)

    * Mozilla: Privilege escalation through IPC channel messages (CVE-2018-18505)

    For more details about the security issue(s), including the impact, a CVSS score, and other related     information, refer to the CVE page(s) listed in the References section.

    Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Yaniv     Frank (SophosLabs), Alex Gaynor, Christoph Diehl, Steven Crane, Jason Kratzer, Gary Kwong, Christian     Holler, and Jed Davis as the original reporters.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote macOS or Mac OS X host is prior to 65.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-01 advisory.

  - Mozilla developers and community members Arthur Iakab, Christoph Diehl, Christian Holler, Kalel, Emilio     Cobos lvarez, Cristina Coroiu, Noemi Erli, Natalia Csoregi, Julian Seward, Gary Kwong, Tyson Smith,     Yaron Tausky, and Ronald Crane reported memory safety bugs present in Firefox 64. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort that some of these could be     exploited to run arbitrary code. (CVE-2018-18502)

  - An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication     to communication between IPC endpoints and server parents during IPC process creation. This authentication     is insufficient for channels created after the IPC process is started, leading to the authentication not     being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due     to lack of message validation in the listener process. (CVE-2018-18505)

  - A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML     elements. This results in the stream parser object being freed while still in use, leading to a     potentially exploitable crash. (CVE-2018-18500)

  - A crash and out-of-bounds read can occur when the buffer of a texture client is freed while it is still in     use during graphic operations. This results in a potentially exploitable crash and the possibility of     reading from the memory of the freed buffers. (CVE-2018-18504)

  - When JavaScript is used to create and manipulate an audio buffer, a potentially exploitable crash may     occur because of a compartment mismatch in some situations. (CVE-2018-18503)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 60.5. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-03 advisory.

  - A use-after-free vulnerability can occur while playing a sound notification in Thunderbird. The memory     storing the sound data is immediately freed, although the sound is still being played asynchronously,     leading to a potentially exploitable crash. (CVE-2018-18512)

  - An earlier fix for an Inter-process Communication (IPC) vulnerability, CVE-2011-3079, added authentication     to communication between IPC endpoints and server parents during IPC process creation. This authentication     is insufficient for channels created after the IPC process is started, leading to the authentication not     being correctly applied to later channels. This could allow for a sandbox escape through IPC channels due     to lack of message validation in the listener process. (CVE-2018-18505)

  - A use-after-free vulnerability can occur while parsing an HTML5 stream in concert with custom HTML     elements. This results in the stream parser object being freed while still in use, leading to a     potentially exploitable crash. (CVE-2018-18500)

  - A vulnerability in the Libical library used by Thunderbird can allow remote attackers to cause a denial of     service (use-after-free) via a crafted ICS calendar file. (CVE-2016-5824)

  - A crash can occur when processing a crafted S/MIME message or an XPI package containing a crafted     signature. This can be used as a denial-of-service (DOS) attack because Thunderbird reopens the last seen     message on restart, triggering the crash again. (CVE-2018-18513)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update upgrades Thunderbird to version 60.5.0.

Security Fix(es) :

  - Mozilla: Use-after-free parsing HTML5 stream     (CVE-2018-18500)

  - Mozilla: Memory safety bugs fixed in Firefox 65 and     Firefox ESR 60.5 (CVE-2018-18501)

  - Mozilla: Privilege escalation through IPC channel     messages (CVE-2018-18505)

  - libical: Multiple use-after-free vulnerabilities     (CVE-2016-5824)

The remote NewStart CGSL host, running version CORE 5.04 / MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities:

  - A use-after-free vulnerability can occur while parsing     an HTML5 stream in concert with custom HTML elements.
    This results in the stream parser object being freed     while still in use, leading to a potentially exploitable     crash. This vulnerability affects Thunderbird < 60.5,     Firefox ESR < 60.5, and Firefox < 65. (CVE-2018-18500)

  - Mozilla developers and community members reported memory     safety bugs present in Firefox 64 and Firefox ESR 60.4.
    Some of these bugs showed evidence of memory corruption     and we presume that with enough effort that some of     these could be exploited to run arbitrary code. This     vulnerability affects Thunderbird < 60.5, Firefox ESR <     60.5, and Firefox < 65. (CVE-2018-18501)

  - An earlier fix for an Inter-process Communication (IPC)     vulnerability, CVE-2011-3079, added authentication to     communication between IPC endpoints and server parents     during IPC process creation. This authentication is     insufficient for channels created after the IPC process     is started, leading to the authentication not being     correctly applied to later channels. This could allow     for a sandbox escape through IPC channels due to lack of     message validation in the listener process. This     vulnerability affects Thunderbird < 60.5, Firefox ESR <     60.5, and Firefox < 65. (CVE-2018-18505)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

This update for MozillaFirefox fixes the following issues :

Security issues fixed :

  - CVE-2018-18500: Fixed a use-after-free parsing HTML5     stream (boo#1122983).

  - CVE-2018-18501: Fixed multiple memory safety bugs     (boo#1122983).

  - CVE-2018-18505: Fixed a privilege escalation through IPC     channel messages (boo#1122983).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Multiple security issues have been found in the Thunderbird mail client, which could lead to the execution of arbitrary code, denial of service or spoofing of S/MIME signatures.

ID	Name	Product	Family	Published	Updated	Severity
122732	GLSA-201903-04 : Mozilla Firefox: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	3/11/2019	6/14/2024	critical
123581	GLSA-201904-07 : Mozilla Thunderbird and Firefox: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	4/2/2019	6/6/2024	critical
121447	FreeBSD : mozilla -- multiple vulnerabilities (b1f7d52f-fc42-48e8-8403-87d4c9d26229)	Nessus	FreeBSD Local Security Checks	1/30/2019	6/25/2024	critical
121500	Oracle Linux 7 : firefox (ELSA-2019-0219)	Nessus	Oracle Linux Local Security Checks	1/31/2019	10/22/2024	critical
121501	RHEL 6 : firefox (RHSA-2019:0218)	Nessus	Red Hat Local Security Checks	1/31/2019	11/6/2024	critical
121511	Mozilla Firefox < 65.0	Nessus	MacOS X Local Security Checks	1/31/2019	11/18/2025	critical
121599	Mozilla Thunderbird < 60.5	Nessus	MacOS X Local Security Checks	2/5/2019	12/18/2025	critical
121631	Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20190204)	Nessus	Scientific Linux Local Security Checks	2/7/2019	6/24/2024	critical
127239	NewStart CGSL CORE 5.04 / MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0053)	Nessus	NewStart CGSL Local Security Checks	8/12/2019	1/29/2021	critical
122148	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:0336-1)	Nessus	SuSE Local Security Checks	2/13/2019	6/20/2024	critical
122269	Debian DSA-4392-1 : thunderbird - security update	Nessus	Debian Local Security Checks	2/19/2019	6/20/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical