The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2018:0648 advisory.

  - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125)

  - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127)

  - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129)

  - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144)

  - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145)

  - Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 7 : thunderbird (RHSA-2018:0648)

critical Nessus Plugin ID 108868

Version 1.13