The remote host is running a version of Mozilla Firefox 3.6.x prior to 3.6.2. Such versions are potentially affected by multiple security issues :

 - The WOFF decoder contains an integer overflow in a font decrompression routine. (MFSA 2010-08)
 - Deleted image frames are reused when handling 'multipart/x-mixed-replace' images. (MFSA 2010-09)
 - The 'window.location' object is made a normal overridable object. (MFSA 2010-10)
 - Multiple crashes can result in arbitrary code execution. (MFSA 2010-11)
 - A cross-site scripting issue when using 'addEventListener' and 'setTimeout' on a wrapped object. (MFSA 2010-12)
 - Documents fail to call certain security checks when attempting to preload images. (MFSA 2010-13)
 - It is possible to corrupt a user's XUL cache. (MFSA 2010-14)
 - The asynchronous Authorization Prompt is not always attached to the correct window. (MFSA 2010-15)
 - Multiple crashes cna result in arbitrary code execution. (MFSA 2010-16)
 - An error exists in the way '<option>' elements are inserted into a XUL tree '<optgroup>'. (MFSA 2010-18)
 - An error exists in the implementation of the 'windows.navigator.plugins' object. (MFSA 2010-19)
 - A browser applet can be used to turn a simple mouse click into a drag-and-drop action, potentially resulting in the unintended loading of resources in a user's browser. (MFSA 2010-20)
 - Session renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)
 - When an image points to a resource that redirects to a 'mailto: ' URL, the external mail handler application is launched. (MFSA 2010-23)
 - XML documents fail to call certain security checks when loading new content. (MFSA 2010-24)

The remote host is running a version of SeaMonkey earlier than 2.0.4.  Such versions are potentially affected by multiple security issues : 

  - Multiple crashes can result in arbitrary code execution. (MFSA 2010-16)

  - A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)

  - An error exists in the way '<option>' elements are inserted into a XUL tree '<optgroup>'. (MFSA 2010-18)

  - An error exists in the implementation of the 'windows.navigator.plugins' object. (MFSA 2010-19)

  - A browser applet can be used to turn a simple mouse click into a drag-and-drop action, potentially resulting in the unintended loading of resources in a user's browser. (MFSA 2010-20)

  Session renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)

  - When an image points to a resource that redirects to a 'mailto: ' URL, the external mail handler application is launched. (MFSA 2010-23)

  - XML documents fail to call certain security checks when loading new content. (MFSA 2010-24)

Versions of Mozilla Thunderbird prior to 3.0.4 are affected by the following vulnerabilities :

 - Multiple crashes can result in arbitrary code execution. (MFSA 2010-16)
 - A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)
 - An error exists in the way '<option>' elements are inserted into a XUL tree '<optgroup>'. (MFSA 2010-18)
 - Session renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)
 - XML documents fail to call certain security checks when loading new content. (MFSA 2010-24)

The remote host is running a version of Mozilla Firefox earlier than 3.0.19.  Such versions are potentially affected by multiple security issues : 

 - Multiple crashes can result in arbitrary code execution. (MFSA 2010-16)
 - A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)
 - An error exists in the way '<option>' elements are inserted into a XUL tree '<optgroup>'. (MFSA 2010-18)
 - An error exists in the implementation of the 'windows.navigator.plugins' object. (MFSA 2010-19)
 - A browser applet can be used to turn a simple mouse click into a drag-and-drop action, potentially resulting in the unintended loading of resources in a user's browser. (MFSA 2010-20)
 - The XMLHttpRequestSpy module in the Firebug add-on exposes an underlying chrome privilege escalation vulnerability. (MFSA 2010-21)

The remote host is running a version of Mozilla Firefox earlier than 3.5.9.  Such versions are potentially affected by multiple security issues : 

 - Multiple crashes can result in arbitrary code execution. (MFSA 2010-16)
 - A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)
 - An error exists in the way '<option>' elements are inserted into a XUL tree '<optgroup>'. (MFSA 2010-18)
 - An error exists in the implementation of the 'windows.navigator.plugins' object. (MFSA 2010-19)
 - A browser applet can be used to turn a simple mouse click into a drag-and-drop action, potentially resulting in the unintended loading of resources in a user's browser. (MFSA 2010-20)
 Session renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)
 - When an image points to a resource that redirects to a 'mailto: ' URL, the external mail handler application is launched. (MFSA 2010-23)
 - XML documents fail to call certain security checks when laoding new content. (MFSA 2010-24)

The remote host is running a version of Mozilla SeaMonkey earlier than 2.0.4.  Such versions are potentially affected by multiple security issues : 

  - Multiple crashes can result in arbitrary code execution. (MFSA 2010-16)

  - A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)

  - An error exists in the way '&lt;option&gt;' elements are inserted into a XUL tree '&lt;optgroup&gt;'. (MFSA 2010-18)

  - An error exists in the implementation of the 'windows.navigator.plugins' object. (MFSA 2010-19)

  - A browser applet can be used to turn a simple mouse click into a drag-and-drop action, potentially resulting in the unintended loading of resources in a user's browser. (MFSA 2010-20)

  Session renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)

  - When an image points to a resource that redirects to a 'mailto: ' URL, the external mail handler application is launched. (MFSA 2010-23)

  - XML documents fail to call certain security checks when loading new content. (MFSA 2010-24)

IAVA Reference : 2011-A-0107
IAVB Reference : 2012-B-0038
STIG Finding Severity : Category I

The remote host is running a version of Mozilla Thunderbird earlier than 3.0.4.  Such versions are potentially affected by multiple security issues : 

  - Multiple crashes can result in arbitrary code execution. (MFSA 2010-16)

  - A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)

  - An error exists in the way '&lt;option&gt;' elements are inserted into a XUL tree '&lt;optgroup&gt;'. (MFSA 2010-18)

  Session renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)

  - XML documents fail to call certain security checks when loading new content. (MFSA 2010-24)

IAVA Reference : 2011-A-0107
IAVB Reference : 2012-B-0038
STIG Finding Severity : Category I

The remote host is running a version of Mozilla Firefox earlier than 3.5.9.  Such versions are potentially affected by multiple security issues : 

  - Multiple crashes can result in arbitrary code execution. (MFSA 2010-16)

  - A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)

  - An error exists in the way '&lt;option&gt;' elements are inserted into a XUL tree '&lt;optgroup&gt;'. (MFSA 2010-18)

  - An error exists in the implementation of the 'windows.navigator.plugins' object. (MFSA 2010-19)

  - A browser applet can be used to turn a simple mouse click into a drag-and-drop action, potentially resulting in the unintended loading of resources in a user's browser. (MFSA 2010-20)

  Session renegotiations are not handled properly, which can be exploited to insert arbitrary plaintext by a man-in-the-middle. (MFSA 2010-22)

  - When an image points to a resource that redirects to a 'mailto: ' URL, the external mail handler application is launched. (MFSA 2010-23)

  - XML documents fail to call certain security checks when laoding new content. (MFSA 2010-24)
 
IAVA Reference : 2011-A-0107
IAVB Reference : 2012-B-0038
STIG Finding Severity : Category I

The remote host is running a version of Mozilla Firefox earlier than 3.0.19.  Such versions are potentially affected by multiple security issues : 

  - Multiple crashes can result in arbitrary code execution. (MFSA 2010-16)

  - A select event handler for XUL tree items can be called after the item is deleted. (MFSA 2010-17)

  - An error exists in the way '&lt;option&gt;' elements are inserted into a XUL tree '&lt;optgroup&gt;'. (MFSA 2010-18)

  - An error exists in the implementation of the 'windows.navigator.plugins' object. (MFSA 2010-19)

  - A browser applet can be used to turn a simple mouse click into a drag-and-drop action, potentially resulting in the unintended loading of resources in a user's browser. (MFSA 2010-20)

  - The XMLHttpRequestSpy module in the Firebug add-on exposes an underlying chrome privilege escalation vulnerability. (MFSA 2010-21)

ID	Name	Product	Family	Published	Updated	Severity
5485	Mozilla Firefox 3.6.x < 3.6.2 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	3/23/2010	3/6/2019	medium
5495	SeaMonkey < 2.0.4 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	3/31/2010	3/6/2019	medium
5496	Mozilla Thunderbird < 3.0.4 Multiple Vulnerabilities	Nessus Network Monitor	SMTP Clients	3/31/2010	3/6/2019	medium
5493	Mozilla Firefox < 3.0.19 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	3/31/2010	3/6/2019	medium
5494	Mozilla Firefox < 3.5.9 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	3/31/2010	3/6/2019	medium
801278	Mozilla SeaMonkey < 2.0.4 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	3/31/2010		high
801251	Mozilla Thunderbird < 3.0.4 Multiple Vulnerabilities	Log Correlation Engine	SMTP Clients	3/31/2010		high
801276	Mozilla Firefox < 3.5.9 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	3/31/2010		high
801260	Mozilla Firefox < 3.0.19 Multiple Vulnerabilities	Log Correlation Engine	Web Clients	3/31/2010		high

Detections

Analytics

Plugins Search

medium

medium

medium

medium

medium

high

high

high

high