The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9080 advisory.

  - Mozilla: Quoting from an HTML email with certain tags will trigger network requests and load remote     content, regardless of a configuration to block remote content (CVE-2022-45414)

  - Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)

  - Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)

  - Mozilla: Use-after-free in WebGL (CVE-2022-46880, CVE-2022-46882)

  - Mozilla: Memory corruption in WebGL (CVE-2022-46881)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9066 advisory.

  - Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)

  - Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)

  - Mozilla: Use-after-free in WebGL (CVE-2022-46880, CVE-2022-46882)

  - Mozilla: Memory corruption in WebGL (CVE-2022-46881)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9068 advisory.

  - Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)

  - Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)

  - Mozilla: Use-after-free in WebGL (CVE-2022-46880, CVE-2022-46882)

  - Mozilla: Memory corruption in WebGL (CVE-2022-46881)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2022:9069 advisory.

  - Mozilla: Arbitrary file read from a compromised content process (CVE-2022-46872)

  - Mozilla: Drag and Dropped Filenames could have been truncated to malicious extensions (CVE-2022-46874)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 102.6 and Thunderbird 102.6 (CVE-2022-46878)

  - Mozilla: Use-after-free in WebGL (CVE-2022-46880, CVE-2022-46882)

  - Mozilla: Memory corruption in WebGL (CVE-2022-46881)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
168845	RHEL 9 : thunderbird (RHSA-2022:9080)	Nessus	Red Hat Local Security Checks	12/16/2022	4/28/2024	critical
168847	RHEL 9 : firefox (RHSA-2022:9066)	Nessus	Red Hat Local Security Checks	12/16/2022	4/28/2024	critical
168843	RHEL 8 : firefox (RHSA-2022:9068)	Nessus	Red Hat Local Security Checks	12/16/2022	4/28/2024	critical
168833	RHEL 8 : firefox (RHSA-2022:9069)	Nessus	Red Hat Local Security Checks	12/15/2022	4/21/2024	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical