The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9070 advisory.

  - Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)

  - Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)

  - Mozilla: Use-after-free in WebGL (CVE-2022-46880, CVE-2022-46882)

  - Mozilla: Memory corruption in WebGL (CVE-2022-46881)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9080 advisory.

  - Mozilla: Quoting from an HTML email with certain tags will trigger network requests and load remote     content, regardless of a configuration to block remote content (CVE-2022-45414)

  - Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)

  - Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)

  - Mozilla: Use-after-free in WebGL (CVE-2022-46880, CVE-2022-46882)

  - Mozilla: Memory corruption in WebGL (CVE-2022-46881)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9066 advisory.

  - Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)

  - Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)

  - Mozilla: Use-after-free in WebGL (CVE-2022-46880, CVE-2022-46882)

  - Mozilla: Memory corruption in WebGL (CVE-2022-46881)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 106.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2022-44 advisory.

  - A same-origin policy violation could have allowed the theft of cross-origin URL entries, leaking the     result of a redirect, via <code>performance.getEntries()</code>. (CVE-2022-42927)

  - Certain types of allocations were missing annotations that, if the Garbage Collector was in a specific     state, could have lead to memory corruption and a potentially exploitable crash. (CVE-2022-42928)

  - If a website called <code>window.print()</code> in a particular way, it could cause a denial of service of     the browser, which may persist beyond browser restart depending on the user's session restore settings.
    (CVE-2022-42929)

  - If two Workers were simultaneously initializing their CacheStorage, a data race could have occurred in the     <code>ThirdPartyUtil</code> component. (CVE-2022-42930)

  - Logins saved by Firefox should be managed by the Password Manager component which uses encryption to save     files on-disk. Instead, the username (not password) was saved by the Form Manager to an unencrypted file     on disk. (CVE-2022-42931)

  - Mozilla developers Ashley Hale and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox     105 and Firefox ESR 102.3. Some of these bugs showed evidence of memory corruption and we presume that     with enough effort some of these could have been exploited to run arbitrary code. (CVE-2022-42932)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
168838	RHEL 8 : firefox (RHSA-2022:9070)	Nessus	Red Hat Local Security Checks	12/15/2022	4/28/2024	critical
168845	RHEL 9 : thunderbird (RHSA-2022:9080)	Nessus	Red Hat Local Security Checks	12/16/2022	4/28/2024	critical
168847	RHEL 9 : firefox (RHSA-2022:9066)	Nessus	Red Hat Local Security Checks	12/16/2022	4/28/2024	critical
166209	Mozilla Firefox < 106.0	Nessus	Windows	10/18/2022	10/25/2023	high

Detections

Analytics

Plugins Search

critical

critical

critical

high