The remote Debian 11 / 12 host has packages installed that are affected by a vulnerability as referenced in the dsa-5645 advisory.

  - An attacker was able to inject an event handler into a privileged object that would allow arbitrary     JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does     not affect mobile versions of Firefox. This vulnerability affects Firefox < 124.0.1 and Firefox ESR <     115.9.1. (CVE-2024-29944)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

Detections

Analytics

Debian dsa-5645 : firefox-esr - security update

high Nessus Plugin ID 192510

Version 1.1

Version 1.0

Version 1.1 Aug 28, 2024, 7:43 PM CVSS metrics ("CVSSv3 score" set to 8.4) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H") Plugin Feed: 202408281943
Version 1.0 Mar 24, 2024, 3:24 AM New Plugin Feed: 202403240324