The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:0515 advisory.

  - Mozilla: Off-by-one error in OpenType Sanitizer (MFSA 2012-31) (CVE-2011-3062)

  - Mozilla: Miscellaneous memory safety hazards (rv:12.0/ rv:10.0.4) (MFSA 2012-20) (CVE-2012-0467,     CVE-2012-0468)

  - Mozilla: use-after-free in IDBKeyRange (MFSA 2012-22) (CVE-2012-0469)

  - Mozilla: Invalid frees causes heap corruption in gfxImageSurface  (MFSA 2012-23) (CVE-2012-0470)

  - Mozilla: Potential XSS via multibyte content processing errors (MFSA 2012-24) (CVE-2012-0471)

  - Mozilla: Potential memory corruption during font rendering using cairo-dwrite (MFSA 2012-25)     (CVE-2012-0472)

  - Mozilla: WebGL.drawElements may read illegal video memory due to FindMaxUshortElement error (MFSA 2012-26)     (CVE-2012-0473)

  - Mozilla: Page load short-circuit can lead to XSS (MFSA 2012-27) (CVE-2012-0474)

  - Mozilla: Potential XSS through ISO-2022-KR/ISO-2022-CN decoding issues (MFSA 2012-29) (CVE-2012-0477)

  - Mozilla: Crash with WebGL content using textImage2D (MFSA 2012-30) (CVE-2012-0478)

  - Mozilla: Potential site identity spoofing when loading RSS and Atom feeds (MFSA 2012-33) (CVE-2012-0479)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 : firefox (RHSA-2012:0515)

medium Nessus Plugin ID 58867

Version 1.30