The remote Redhat Enterprise Linux 5 / 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2012:1210 advisory.

  - Mozilla: Miscellaneous memory safety hazards (rv:15.0/ rv:10.0.7) (MFSA 2012-57) (CVE-2012-1970)

  - Mozilla: Multiple Use-after-free issues (MFSA 2012-58) (CVE-2012-1972, CVE-2012-1973, CVE-2012-1974,     CVE-2012-1975, CVE-2012-1976, CVE-2012-3956, CVE-2012-3957, CVE-2012-3958, CVE-2012-3959, CVE-2012-3960,     CVE-2012-3961, CVE-2012-3962, CVE-2012-3963, CVE-2012-3964)

  - Mozilla: Memory corruption with bitmap format images with negative height (MFSA 2012-61) (CVE-2012-3966)

  - Mozilla: WebGL use-after-free and memory corruption (MFSA 2012-62) (CVE-2012-3967, CVE-2012-3968)

  - Mozilla: SVG buffer overflow and use-after-free issues (MFSA 2012-63) (CVE-2012-3969, CVE-2012-3970)

  - Mozilla: Out-of-bounds read in format-number in XSLT (MFSA 2012-65) (CVE-2012-3972)

  - Mozilla: Incorrect site SSL certificate data display (MFSA 2012-69) (CVE-2012-3976)

  - Mozilla: Location object security checks bypassed by chrome code (MFSA 2012-70) (CVE-2012-3978)

  - Mozilla: Web console eval capable of executing chrome-privileged code (MFSA 2012-72) (CVE-2012-3980)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 / 6 : firefox (RHSA-2012:1210)

high Nessus Plugin ID 61704

Version 1.26