The version of Mozilla Firefox ESR installed on the remote macOS or     Mac OS X host is prior to 52.8. It is, therefore, affected by multiple     critical and high severity vulnerabilities.

This update for Mozilla Thunderbird to version 52.8 fixes the following issues :

Security issues fixed (MFSA 2018-13, boo#1092548) :

  - CVE-2018-5183: Backport critical security fixes in Skia

  - CVE-2018-5154: Use-after-free with SVG animations and     clip paths

  - CVE-2018-5155: Use-after-free with SVG animations and     text paths

  - CVE-2018-5159: Integer overflow and out-of-bounds write     in Skia

  - CVE-2018-5168: Lightweight themes can be installed     without user interaction

  - CVE-2018-5178: Buffer overflow during UTF-8 to Unicode     string conversion through legacy extension

  - CVE-2018-5150: Memory safety bugs fixed in Firefox 60,     Firefox ESR 52.8, and Thunderbird 52.8

  - CVE-2018-5161: Hang via malformed headers (bsc#1093970)

  - CVE-2018-5162: Encrypted mail leaks plaintext through     src attribute (bsc#1093971)

  - CVE-2018-5170: Filename spoofing for external     attachments (bsc#1093972)

  - CVE-2018-5184: Full plaintext recovery in S/MIME via     chosen-ciphertext attack (bsc#1093969)

  - CVE-2018-5185: Leaking plaintext through HTML forms     (bsc#1093973)

This update for MozillaFirefox to ESR 52.8 release fixes the following issues: Update to Firefox ESR 52.8 (bsc#1092548) Security issues fixed :

  - MFSA 2018-12/CVE-2018-5159: Integer overflow and     out-of-bounds write in Skia

  - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject     JavaScript into PDF Viewer

  - MFSA 2018-12/CVE-2018-5168: Lightweight themes can be     installed without user interaction

  - MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in     Firefox 60 and Firefox ESR 52.8

  - MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG     animations and text paths

  - MFSA 2018-12/CVE-2018-5183: Backport critical security     fixes in Skia

  - MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF     Viewer to view protected PDF files

  - MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG     animations and clip paths

  - MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8     to Unicode string conversion through legacy extension

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Mozilla Thunderbird installed on the remote Windows host is prior to 52.8 It is, therefore, affected by multiple vulnerabilities.

Versions of Mozilla Firefox ESR earlier than 52.8 are unpatched for the following vulnerabilities :

 - A use-after-free error exists that is triggered when enumerating attributes for SVG animations with clip paths. With a specially crafted SVG file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free error exists in 'layout/svg/SVGTextFrame.cpp' that is triggered when adjusting layouts for SVG animations with text paths. With a specially crafted SVG file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - An unspecified flaw exists in the PDF viewer that may allow a context-dependent attacker to bypass the same-origin policy and view restricted PDF files on a third-party website.
 - A flaw exists that allows a cross-site scripting (XSS) attack. This flaw exists exists because the PDF viewer does not properly sanitize input to PostScript calculator functions before returning it to users. This may allow a context-dependent attacker to create a specially crafted request that executes arbitrary script code in a user's browser session within the trust relationship between their browser and the server.
 - An integer overflow condition exists in 'include/private/SkTDArray.h' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the installation of themes. This may allow a context-dependent attacker to manipulate the baseURI property  of a theme element to bypass intended user interaction checks, allowing for the installation of unintended themes. This may be used to 'e.g'. deface a page with content from unintended themes.
 - A flaw exists that is triggered as the program sets the SEE_MASK_FLAG_NO_UI flag for Windows Defender SmartScreen when handling certain downloads. This may result in the download file prompt not displaying to the user, potentially causing files to be opened without the user's intent.
 - An assertion flaw exists in the 'FilterNodeArithmeticCombineSoftware::SetAttribute()' function in 'gfx/2d/FilterNodeSoftware.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause an out-of-bounds read and potentially disclose memory contents.
 - A flaw exists that is triggered when asynchronously calling methods from the CamerasChild class in 'dom/media/systemservices/CamerasChild.cpp'. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An overflow condition exists that is triggered as certain input is not properly validated when performing UTF8 to Unicode string conversion. This may allow a context-dependent attacker to cause a buffer overflow, potentially allowing the execution of arbitrary code.
 - Multiple unspecified flaws exist exist related to the use of insecure versions of Skia that may allow an attacker to perform memory corruption attacks, or potentially have other impacts. No further details have been provided.

This update for MozillaFirefox to the ESR 52.8 release fixes the following issues :

Mozil to Firefox ESR 52.8 (bsc#1092548)

Security issues fixed :

MFSA 2018-12/CVE-2018-5159: Integer overflow and out-of-bounds write in Skia

MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer

MFSA 2018-12/CVE-2018-5168: Lightweight themes can be installed without user interaction

MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8

MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG animations and text paths

MFSA 2018-12/CVE-2018-5183: Backport critical security fixes in Skia

MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files

MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG animations and clip paths

MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Mozilla Firefox ESR installed on the remote Windows     host is prior to 52.8. It is, therefore, affected by multiple critical     and high severity vulnerabilities.

This update for MozillaFirefox to the ESR 52.8 release fixes the following issues: Mozil to Firefox ESR 52.8 (bsc#1092548) Security issues fixed :

  - MFSA 2018-12/CVE-2018-5159: Integer overflow and     out-of-bounds write in Skia

  - MFSA 2018-12/CVE-2018-5158: Malicious PDF can inject     JavaScript into PDF Viewer

  - MFSA 2018-12/CVE-2018-5168: Lightweight themes can be     installed without user interaction

  - MFSA 2018-12/CVE-2018-5150: Memory safety bugs fixed in     Firefox 60 and Firefox ESR 52.8

  - MFSA 2018-12/CVE-2018-5155: Use-after-free with SVG     animations and text paths

  - MFSA 2018-12/CVE-2018-5183: Backport critical security     fixes in Skia

  - MFSA 2018-12/CVE-2018-5157: Same-origin bypass of PDF     Viewer to view protected PDF files

  - MFSA 2018-12/CVE-2018-5154: Use-after-free with SVG     animations and clip paths

  - MFSA 2018-12/CVE-2018-5178: Buffer overflow during UTF-8     to Unicode string conversion through legacy extension

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Mozilla Firefox installed on the remote macOS or     Mac OS X host is prior to 60. It is, therefore, affected by multiple     critical and high severity vulnerabilities.

The version of Mozilla Firefox installed on the remote Windows     host is prior to 60. It is, therefore, affected by multiple critical     and high severity vulnerabilities.

Mozilla Foundation reports :

CVE-2018-5183: Backport critical security fixes in Skia

CVE-2018-5154: Use-after-free with SVG animations and clip paths

CVE-2018-5155: Use-after-free with SVG animations and text paths

CVE-2018-5157: Same-origin bypass of PDF Viewer to view protected PDF files

CVE-2018-5158: Malicious PDF can inject JavaScript into PDF Viewer

CVE-2018-5159: Integer overflow and out-of-bounds write in Skia

CVE-2018-5160: Uninitialized memory use by WebRTC encoder

CVE-2018-5152: WebExtensions information leak through webRequest API

CVE-2018-5153: Out-of-bounds read in mixed content websocket messages

CVE-2018-5163: Replacing cached data in JavaScript Start-up Bytecode Cache

CVE-2018-5164: CSP not applied to all multipart content sent with multipart/x-mixed-replace

CVE-2018-5166: WebExtension host permission bypass through filterReponseData

CVE-2018-5167: Improper linkification of chrome: and javascript:
content in web console and JavaScript debugger

CVE-2018-5168: Lightweight themes can be installed without user interaction

CVE-2018-5169: Dragging and dropping link text onto home button can set home page to include chrome pages

CVE-2018-5172: Pasted script from clipboard can run in the Live Bookmarks page or PDF viewer

CVE-2018-5173: File name spoofing of Downloads panel with Unicode characters

CVE-2018-5174: Windows Defender SmartScreen UI runs with less secure behavior for downloaded files in Windows 10 April 2018 Update

CVE-2018-5175: Universal CSP bypass on sites using strict-dynamic in their policies

CVE-2018-5176: JSON Viewer script injection

CVE-2018-5177: Buffer overflow in XSLT during number formatting

CVE-2018-5165: Checkbox for enabling Flash protected mode is inverted in 32-bit Firefox

CVE-2018-5178: Buffer overflow during UTF-8 to Unicode string conversion through legacy extension

CVE-2018-5180: heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced

CVE-2018-5181: Local file can be displayed in noopener tab through drag and drop of hyperlink

CVE-2018-5182: Local file can be displayed from hyperlink dragged and dropped on addressbar

CVE-2018-5151: Memory safety bugs fixed in Firefox 60

CVE-2018-5150: Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8

ID	Name	Product	Family	Published	Updated	Severity
109866	Mozilla Firefox ESR < 52.8 Multiple Critical Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2018/05/17	2019/04/05	high
123171	openSUSE Security Update : Mozilla Thunderbird (openSUSE-2019-364)	Nessus	SuSE Local Security Checks	2019/03/27	2019/04/02	high
109887	SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:1319-1)	Nessus	SuSE Local Security Checks	2018/05/17	2019/09/10	high
109935	openSUSE Security Update : Mozilla Thunderbird (openSUSE-2018-486)	Nessus	SuSE Local Security Checks	2018/05/21	2019/04/05	high
109946	Mozilla Thunderbird < 52.8 Multiple Vulnerabilities (EFAIL)	Nessus	Windows	2018/05/22	2019/04/05	high
700337	Mozilla Firefox ESR < 52.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	2018/08/21	2019/03/06	high
118254	SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:1334-2)	Nessus	SuSE Local Security Checks	2018/10/22	2019/09/10	high
109868	Mozilla Firefox ESR < 52.8 Multiple Critical Vulnerabilities	Nessus	Windows	2018/05/17	2019/04/05	high
109939	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:1334-1)	Nessus	SuSE Local Security Checks	2018/05/21	2019/09/10	high
109867	Mozilla Firefox < 60 Multiple Critical Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2018/05/17	2019/04/05	high
109869	Mozilla Firefox < 60 Multiple Critical Vulnerabilities	Nessus	Windows	2018/05/17	2019/04/05	high
109661	FreeBSD : mozilla -- multiple vulnerabilities (5aefc41e-d304-4ec8-8c82-824f84f08244)	Nessus	FreeBSD Local Security Checks	2018/05/10	2019/07/10	critical

Plugins Search