From Red Hat Security Advisory 2020:2037 :

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2037 advisory.

  - Mozilla: Use-after-free during worker shutdown     (CVE-2020-12387)

  - Mozilla: Arbitrary local file access with 'Copy as cURL'     (CVE-2020-12392)

  - Mozilla: Memory safety bugs fixed in Firefox 76 and     Firefox ESR 68.8 (CVE-2020-12395)

  - Mozilla: Buffer overflow in SCTP chunk input validation     (CVE-2020-6831)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2020:2046 advisory.

  - usrsctp: Buffer overflow in AUTH chunk input validation (CVE-2020-6831)

  - Mozilla: Use-after-free during worker shutdown (CVE-2020-12387)

  - Mozilla: Arbitrary local file access with 'Copy as cURL' (CVE-2020-12392)

  - Mozilla: Memory safety bugs fixed in Firefox 76 and Firefox ESR 68.8 (CVE-2020-12395)

  - Mozilla: Sender Email Address Spoofing using encoded Unicode characters (CVE-2020-12397)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Security Fix(es) :

  - Mozilla: Use-after-free during worker shutdown     (CVE-2020-12387)

  - Mozilla: Memory safety bugs fixed in Firefox 76 and     Firefox ESR 68.8 (CVE-2020-12395)

  - usrsctp: Buffer overflow in AUTH chunk input validation     (CVE-2020-6831)

  - Mozilla: Arbitrary local file access with 'Copy as cURL'     (CVE-2020-12392)

  - Mozilla: Sender Email Address Spoofing using encoded     Unicode characters (CVE-2020-12397)

The remote host is affected by the vulnerability described in GLSA-202005-03 (Mozilla Thunderbird: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Thunderbird.
      Please review the CVE identifiers referenced below for details.
  Impact :

    A remote attacker may be able to execute arbitrary code, cause a Denial       of Service condition or spoof sender email address.
  Workaround :

    There is no known workaround at this time.

ID	Name	Product	Family	Published	Updated	Severity
136418	Oracle Linux 7 : firefox (ELSA-2020-2037)	Nessus	Oracle Linux Local Security Checks	5/8/2020	3/13/2024	critical
136476	RHEL 8 : thunderbird (RHSA-2020:2046)	Nessus	Red Hat Local Security Checks	5/11/2020	4/28/2024	critical
136487	Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20200511)	Nessus	Scientific Linux Local Security Checks	5/12/2020	3/12/2024	critical
136540	GLSA-202005-03 : Mozilla Thunderbird: Multiple vulnerabilities	Nessus	Gentoo Local Security Checks	5/13/2020	3/12/2024	critical
147407	NewStart CGSL MAIN 4.06 : firefox Multiple Vulnerabilities (NS-SA-2021-0004)	Nessus	NewStart CGSL Local Security Checks	3/10/2021	4/25/2023	critical

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical