The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1088 advisory.

    Mozilla Firefox is an open source web browser. XULRunner provides the XUL     Runtime environment for Mozilla Firefox.

    A web page containing malicious content could cause Firefox to crash or,     potentially, execute arbitrary code with the privileges of the user running     Firefox. (CVE-2012-1948, CVE-2012-1951, CVE-2012-1952, CVE-2012-1953,     CVE-2012-1954, CVE-2012-1958, CVE-2012-1962, CVE-2012-1967)

    A malicious web page could bypass same-compartment security wrappers (SCSW)     and execute arbitrary code with chrome privileges. (CVE-2012-1959)

    A flaw in the context menu functionality in Firefox could allow a malicious     website to bypass intended restrictions and allow a cross-site scripting     attack. (CVE-2012-1966)

    A page different to that in the address bar could be displayed when     dragging and dropping to the address bar, possibly making it easier for a     malicious site or user to perform a phishing attack. (CVE-2012-1950)

    A flaw in the way Firefox called history.forward and history.back could     allow an attacker to conceal a malicious URL, possibly tricking a user     into believing they are viewing a trusted site. (CVE-2012-1955)

    A flaw in a parser utility class used by Firefox to parse feeds (such as     RSS) could allow an attacker to execute arbitrary JavaScript with the     privileges of the user running Firefox. This issue could have affected     other browser components or add-ons that assume the class returns     sanitized input. (CVE-2012-1957)

    A flaw in the way Firefox handled X-Frame-Options headers could allow a     malicious website to perform a clickjacking attack. (CVE-2012-1961)

    A flaw in the way Content Security Policy (CSP) reports were generated by     Firefox could allow a malicious web page to steal a victim's OAuth 2.0     access tokens and OpenID credentials. (CVE-2012-1963)

    A flaw in the way Firefox handled certificate warnings could allow a     man-in-the-middle attacker to create a crafted warning, possibly tricking     a user into accepting an arbitrary certificate as trusted. (CVE-2012-1964)

    A flaw in the way Firefox handled feed:javascript URLs could allow output     filtering to be bypassed, possibly leading to a cross-site scripting     attack. (CVE-2012-1965)

    The nss update RHBA-2012:0337 for Red Hat Enterprise Linux 5 and 6     introduced a mitigation for the CVE-2011-3389 flaw. For compatibility     reasons, it remains disabled by default in the nss packages. This update     makes Firefox enable the mitigation by default. It can be disabled by     setting the NSS_SSL_CBC_RANDOM_IV environment variable to 0 before     launching Firefox. (BZ#838879)

    For technical details regarding these flaws, refer to the Mozilla security     advisories for Firefox 10.0.6 ESR. You can find a link to the Mozilla     advisories in the References section of this erratum.

    Red Hat would like to thank the Mozilla project for reporting these issues.
    Upstream acknowledges Benoit Jacob, Jesse Ruderman, Christian Holler, Bill     McCloskey, Abhishek Arya, Arthur Gerkis, Bill Keese, moz_bug_r_a4, Bobby     Holley, Code Audit Labs, Mariusz Mlynski, Mario Heiderich, Frdric Buclin,     Karthikeyan Bhargavan, Matt McCutchen, Mario Gomes, and Soroush Dalili as     the original reporters of these issues.

    All Firefox users should upgrade to these updated packages, which contain     Firefox version 10.0.6 ESR, which corrects these issues. After installing     the update, Firefox must be restarted for the changes to take effect.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 : firefox (RHSA-2012:1088)

medium Nessus Plugin ID 60008

Version 1.27

Version 1.26

Version 1.27 Nov 5, 2024, 12:50 PM CVSS metrics ("Cvssv4 score" set to 0.0) CVSSv2 severity (based on None, severity decreased from "High" to "Low") Plugin metadata Plugin Feed: 202411051250
Version 1.26 Apr 27, 2024, 10:42 PM CVSS metrics ("CVSSv3 score" set to 6.1) CVSS metrics ("CVSSv3 vector" set to "CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N") CVSS temporal metrics ("CVSSv3 temporal vector" set to "CVSS:3.0/E:U/RL:O/RC:C") CVSSv2 score source (set to "CVE-2012-1967") CVSSv3 score source (set to "CVE-2012-1966") CVSSv3 severity (based on CVE-2012-1966, severity decreased from "High" to "Medium") Detection (updated detection logic) Plugin metadata Reference Plugin Feed: 202404272242