This update for MozillaFirefox to the ESR 52.8 release fixes the following issues: Mozil to Firefox ESR 52.8 (bsc#1092548) Security issues fixed :

  - MFSA 2018-12/CVE-2018-5159: Integer overflow and     out-of-bounds write in Skia

  - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject     JavaScript into PDF Viewer

  - MFSA 2018-12/CVE-2018-5168: Lightweight themes can be     installed without user interaction

  - MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in     Firefox 60 and Firefox ESR 52.8

  - MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG     animations and text paths

  - MFSA 2018-12/CVE-2018-5183: Backport critical security     fixes in Skia

  - MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF     Viewer to view protected PDF files

  - MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG     animations and clip paths

  - MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8     to Unicode string conversion through legacy extension

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:1726 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150)

  - Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154)

  - Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155)

  - Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159)

  - Mozilla: Hang via malformed headers (CVE-2018-5161)

  - Mozilla: Encrypted mail leaks plaintext through src attribute (CVE-2018-5162)

  - Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168)

  - Mozilla: Filename spoofing for external attachments (CVE-2018-5170)

  - Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension     (CVE-2018-5178)

  - Mozilla: Backport critical security fixes in Skia (CVE-2018-5183)

  - Mozilla: Full plaintext recovery in S/MIME via chosen-ciphertext attack (CVE-2018-5184)

  - Mozilla: Leaking plaintext through HTML forms (CVE-2018-5185)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for firefox is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 52.8.0 ESR.

Security Fix(es) :

* Mozilla: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8 (CVE-2018-5150)

* Mozilla: Backport critical security fixes in Skia (CVE-2018-5183)

* Mozilla: Use-after-free with SVG animations and clip paths (CVE-2018-5154)

* Mozilla: Use-after-free with SVG animations and text paths (CVE-2018-5155)

* Mozilla: Same-origin bypass of PDF Viewer to view protected PDF files (CVE-2018-5157)

* Mozilla: Malicious PDF can inject JavaScript into PDF Viewer (CVE-2018-5158)

* Mozilla: Integer overflow and out-of-bounds write in Skia (CVE-2018-5159)

* Mozilla: Lightweight themes can be installed without user interaction (CVE-2018-5168)

* Mozilla: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension (CVE-2018-5178)

For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section.

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Christoph Diehl, Randell Jesup, Tyson Smith, Alex Gaynor, Ronald Crane, Julian Hector, Kannan Vijayan, Jason Kratzer, Mozilla Developers, Nils, Wladimir Palant, Ivan Fratric, and Root Object as the original reporters.

Mozilla Foundation reports :

CVE-2018-5183: Backport critical security fixes in Skia

CVE-2018-5154: Use-after-free with SVG animations and clip paths

CVE-2018-5155: Use-after-free with SVG animations and text paths

CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files

CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer

CVE-2018-5159: Integer overflow and out-of-bounds write in Skia

CVE-2018-5160: Uninitialized memory use by WebRTC encoder

CVE-2018-5152: WebExtensions information leak through webRequest API

CVE-2018-5153: Out-of-bounds read in mixed content websocket messages

CVE-2018-5163: Replacing cached data in JavaScript Start-up Bytecode Cache

CVE-2018-5164: CSP not applied to all multipart content sent with multipart/x-mixed-replace

CVE-2018-5166: WebExtension host permission bypass through filterReponseData

CVE-2018-5167: Improper linkification of chrome: and javascript:
content in web console and JavaScript debugger

CVE-2018-5168: Lightweight themes can be installed without user interaction

CVE-2018-5169: Dragging and dropping link text onto home button can set home page to include chrome pages

CVE-2018-5172: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer

CVE-2018-5173: File name spoofing of Downloads panel with Unicode characters

CVE-2018-5174: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update

CVE-2018-5175: Universal CSP bypass on sites using strict-dynamic in their policies

CVE-2018-5176: JSON Viewer script injection

CVE-2018-5177: Buffer overflow in XSLT during number formatting

CVE-2018-5165: Checkbox for enabling Flash protected mode is inverted in 32-bit Firefox

CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension

CVE-2018-5180: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced

CVE-2018-5181: Local file can be displayed in noopener tab through drag and drop of hyperlink

CVE-2018-5182: Local file can be displayed from hyperlink dragged and dropped on addressbar

CVE-2018-5151: Memory safety bugs fixed in Firefox 60

CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8

ID	Name	Product	Family	Published	Updated	Severity
109939	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:1334-1)	Nessus	SuSE Local Security Checks	5/21/2018	10/4/2024	critical
110120	RHEL 6 : thunderbird (RHSA-2018:1726)	Nessus	Red Hat Local Security Checks	5/25/2018	4/27/2024	critical
110248	CentOS 7 : firefox (CESA-2018:1415)	Nessus	CentOS Local Security Checks	5/31/2018	9/30/2024	critical
109661	FreeBSD : mozilla -- multiple vulnerabilities (5aefc41e-d304-4ec8-8c82-824f84f08244)	Nessus	FreeBSD Local Security Checks	5/10/2018	10/11/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical