This update upgrades Firefox to version 60.9.0 ESR.&#13; &#13;
Security Fix(es):&#13; &#13;

  - Mozilla: Sandbox escape through Firefox Sync     (CVE-2019-9812)&#13; &#13;

  - Mozilla: Memory safety bugs fixed in Firefox 69, Firefox     ESR 68.1, and&#13; Firefox ESR 60.9     (CVE-2019-11740)&#13; &#13;

  - Mozilla: Same-origin policy violation with SVG filters     and canvas to&#13; steal cross-origin images     (CVE-2019-11742)&#13; &#13;

  - Mozilla: XSS by breaking out of title and textarea     elements using&#13; innerHTML (CVE-2019-11744)&#13;
    &#13;

  - Mozilla: Use-after-free while manipulating video     (CVE-2019-11746)&#13; &#13;

  - Mozilla: Use-after-free while extracting a key value in     IndexedDB&#13; (CVE-2019-11752)&#13; &#13;

  - firefox: stored passwords in 'Saved Logins' can be     copied without master&#13; password entry     (CVE-2019-11733)&#13; &#13;

  - Mozilla: Cross-origin access to unload event attributes     (CVE-2019-11743)&#13; --&#13;

The version of Thunderbird installed on the remote macOS or Mac OS X host is prior to 60.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2019-29 advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Multiple security issues have been found in Thunderbird which could potentially result in the execution of arbitrary code, cross-site scripting, information disclosure and a covert content attack on S/MIME encryption using a crafted multipart/alternative message.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2773 advisory.

  - Mozilla: Covert Content Attack on S/MIME encryption using a crafted multipart/alternative message     (CVE-2019-11739)

  - Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and     Thunderbird 60.9 (CVE-2019-11740)

  - Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images     (CVE-2019-11742)

  - Mozilla: Cross-origin access to unload event attributes (CVE-2019-11743)

  - Mozilla: XSS by breaking out of title and textarea elements using innerHTML (CVE-2019-11744)

  - Mozilla: Use-after-free while manipulating video (CVE-2019-11746)

  - Mozilla: Use-after-free while extracting a key value in IndexedDB (CVE-2019-11752)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:2694 advisory.

  - Mozilla: Sandbox escape through Firefox Sync (CVE-2019-9812)

  - firefox: stored passwords in 'Saved Logins' can be copied without master password entry (CVE-2019-11733)

  - Mozilla: Memory safety bugs fixed in Firefox 69, Firefox ESR 68.1, Firefox ESR 60.9, Thunderbird 68.1, and     Thunderbird 60.9 (CVE-2019-11740)

  - Mozilla: Same-origin policy violation with SVG filters and canvas to steal cross-origin images     (CVE-2019-11742)

  - Mozilla: Cross-origin access to unload event attributes (CVE-2019-11743)

  - Mozilla: XSS by breaking out of title and textarea elements using innerHTML (CVE-2019-11744)

  - Mozilla: Use-after-free while manipulating video (CVE-2019-11746)

  - Mozilla: Use-after-free while extracting a key value in IndexedDB (CVE-2019-11752)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
128667	Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20190910)	Nessus	Scientific Linux Local Security Checks	9/11/2019	4/26/2024	critical
128774	Mozilla Thunderbird < 60.9 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	9/16/2019	4/26/2024	high
128783	Debian DSA-4523-1 : thunderbird - security update	Nessus	Debian Local Security Checks	9/16/2019	4/26/2024	high
129037	RHEL 7 : thunderbird (RHSA-2019:2773)	Nessus	Red Hat Local Security Checks	9/19/2019	4/28/2024	high
128660	RHEL 6 : firefox (RHSA-2019:2694)	Nessus	Red Hat Local Security Checks	9/11/2019	4/27/2024	critical

Detections

Analytics

Plugins Search

critical

high

high

high

critical