The remote Redhat Enterprise Linux 5 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2009:1126 advisory.

  - Firefox 2 and 3 Layout engine crash (CVE-2009-1303)

  - Firefox 2 and 3 JavaScript engine crash (CVE-2009-1305)

  - Firefox jar: scheme ignores the content-disposition: header on the inner URI (CVE-2009-1306)

  - Firefox Same-origin violations when Adobe Flash loaded via view-source: protocol (CVE-2009-1307)

  - Firefox XSS hazard using third-party stylesheets and XBL bindings (CVE-2009-1308)

  - Firefox Same-origin violations in XMLHttpRequest and XPCNativeWrapper.toString (CVE-2009-1309)

  - Firefox browser engine crashes (CVE-2009-1392)

  - Firefox JavaScript engine crashes (CVE-2009-1833)

  - Firefox SSL tampering via non-200 responses to proxy CONNECT requests (CVE-2009-1836)

  - Firefox arbitrary code execution flaw (CVE-2009-1838)

  - Thunderbird mail crash (CVE-2009-2210)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Detections

Analytics

RHEL 5 : thunderbird (RHSA-2009:1126)

medium Nessus Plugin ID 63881

Version 1.13