The remote Redhat Enterprise Linux 5 / 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2012:0388 advisory.

  - Mozilla: XSS with multiple Content Security Policy headers (MFSA 2012-15) (CVE-2012-0451)

  - Mozilla: XSS with Drag and Drop and Javascript: URL (MFSA 2012-13) (CVE-2012-0455)

  - Mozilla: SVG issues found with Address Sanitizer (MFSA 2012-14) (CVE-2012-0456, CVE-2012-0457)

  - Mozilla: Escalation of privilege with Javascript: URL as home page (MFSA 2012-16) (CVE-2012-0458)

  - Mozilla: Crash when accessing keyframe cssText after dynamic modification (MFSA 2012-17) (CVE-2012-0459)

  - Mozilla: window.fullScreen writeable by untrusted content (MFSA 2012-18) (CVE-2012-0460)

  - Mozilla: Miscellaneous memory safety hazards (rv:11.0/ rv:10.0.3 / rv:1.9.2.28) (MFSA 2012-19)     (CVE-2012-0461, CVE-2012-0462, CVE-2012-0464)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 : thunderbird (RHSA-2012:0388)

medium Nessus Plugin ID 58339

Version 1.27