The version of Firefox ESR installed on the remote macOS or Mac OS X host is prior to 115.3. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-42 advisory.

  - A compromised content process could have provided malicious data to <code>FilterNodeD2D1</code> resulting     in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.
    (CVE-2023-5168)

  - A compromised content process could have provided malicious data in a <code>PathRecording</code> resulting     in an out-of-bounds write, leading to a potentially exploitable crash in a privileged process.
    (CVE-2023-5169)

  - During Ion compilation, a Garbage Collection could have resulted in a use-after-free condition, allowing     an attacker to write two NUL bytes, and cause a potentially exploitable crash. (CVE-2023-5171)

  - If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently     freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash. This bug only     affects Firefox on Windows when run in non-standard configurations (such as using <code>runas</code>).
    Other operating systems are unaffected. (CVE-2023-5174)

  - Memory safety bugs present in Firefox 117, Firefox ESR 115.2, and Thunderbird 115.2. Some of these bugs     showed evidence of memory corruption and we presume that with enough effort some of these could have been     exploited to run arbitrary code. (CVE-2023-5176)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

Mozilla Firefox ESR < 115.3

critical Nessus Plugin ID 181878

Version 1.3

Version 1.2

Version 1.1

Version 1.0

Version 1.3 Oct 6, 2023, 10:25 AM IAVM reference Plugin Feed: 202310061025
Version 1.2 Oct 2, 2023, 4:16 PM CVSS metrics ("CVSSv2 score" changed from 7.5 to 10.0. "CVSSv2 vector" changed from "CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P" to "CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C") Plugin Feed: 202310021616
Version 1.1 Sep 29, 2023, 10:10 AM IAVM reference STIG Severity (set to "I") Plugin Feed: 202309291010
Version 1.0 Sep 26, 2023, 8:16 PM New Plugin Feed: 202309262016