The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2023:3143 advisory.

  - Mozilla: Browser prompts could have been obscured by popups (CVE-2023-32205)

  - Mozilla: Crash in RLBox Expat driver (CVE-2023-32206)

  - Mozilla: Potential permissions request bypass via clickjacking (CVE-2023-32207)

  - Mozilla: Content process crash due to invalid wasm code (CVE-2023-32211)

  - Mozilla: Potential spoof due to obscured address bar (CVE-2023-32212)

  - Mozilla: Potential memory corruption in FileReader::DoReadData() (CVE-2023-32213)

  - Mozilla: Memory safety bugs fixed in Firefox 113 and Firefox ESR 102.11 (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-3137 advisory.

  - A missing delay in popup notifications could have made it possible for an attacker to trick a user into     granting permissions.  (CVE-2023-32207)

  - A type checking bug would have led to invalid code being compiled.  (CVE-2023-32211)

  - Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian     Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112     and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code.  (CVE-2023-32215)

  - When reading a file, an uninitialized value could have been used as read limit.  (CVE-2023-32213)

  - An out-of-bound read could have led to a crash in the RLBox Expat driver.  (CVE-2023-32206)

  - In multiple cases browser prompts could have been obscured by popups controlled by content. These could     have led to potential user confusion and spoofing attacks.  (CVE-2023-32205)

  - An attacker could have positioned a <code>datalist</code> element to obscure the address bar.
    (CVE-2023-32212)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2023-3150 advisory.

  - When reading a file, an uninitialized value could have been used as read limit.  (CVE-2023-32213)

  - Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian     Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112     and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code.  (CVE-2023-32215)

  - In multiple cases browser prompts could have been obscured by popups controlled by content. These could     have led to potential user confusion and spoofing attacks.  (CVE-2023-32205)

  - An attacker could have positioned a <code>datalist</code> element to obscure the address bar.
    (CVE-2023-32212)

  - An out-of-bound read could have led to a crash in the RLBox Expat driver.  (CVE-2023-32206)

  - A type checking bug would have led to invalid code being compiled.  (CVE-2023-32211)

  - A missing delay in popup notifications could have made it possible for an attacker to trick a user into     granting permissions.  (CVE-2023-32207)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Rocky Linux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the RLSA-2023:3221 advisory.

  - In multiple cases browser prompts could have been obscured by popups controlled by content. These could     have led to potential user confusion and spoofing attacks.  (CVE-2023-32205)

  - An out-of-bound read could have led to a crash in the RLBox Expat driver.  (CVE-2023-32206)

  - A missing delay in popup notifications could have made it possible for an attacker to trick a user into     granting permissions.  (CVE-2023-32207)

  - A type checking bug would have led to invalid code being compiled.  (CVE-2023-32211)

  - An attacker could have positioned a <code>datalist</code> element to obscure the address bar.
    (CVE-2023-32212)

  - When reading a file, an uninitialized value could have been used as read limit.  (CVE-2023-32213)

  - Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian     Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112     and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code.  (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2023-3143 advisory.

  - A missing delay in popup notifications could have made it possible for an attacker to trick a user into     granting permissions.  (CVE-2023-32207)

  - Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian     Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112     and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code.  (CVE-2023-32215)

  - An attacker could have positioned a <code>datalist</code> element to obscure the address bar.
    (CVE-2023-32212)

  - In multiple cases browser prompts could have been obscured by popups controlled by content. These could     have led to potential user confusion and spoofing attacks.  (CVE-2023-32205)

  - An out-of-bound read could have led to a crash in the RLBox Expat driver.  (CVE-2023-32206)

  - A type checking bug would have led to invalid code being compiled.  (CVE-2023-32211)

  - When reading a file, an uninitialized value could have been used as read limit.  (CVE-2023-32213)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Firefox installed on the remote Windows host is prior to 113.0. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2023-16 advisory.

  - In multiple cases browser prompts could have been obscured by popups controlled by content. These could     have led to potential user confusion and spoofing attacks. (CVE-2023-32205)

  - An out-of-bound read could have led to a crash in the RLBox Expat driver. (CVE-2023-32206)

  - A missing delay in popup notifications could have made it possible for an attacker to trick a user into     granting permissions. (CVE-2023-32207)

  - Service workers could reveal script base URL due to dynamic <code>import()</code>. (CVE-2023-32208)

  - A maliciously crafted favicon could have led to an out of memory crash. (CVE-2023-32209)

  - Documents were incorrectly assuming an ordering of principal objects when ensuring we were loading an     appropriately privileged principal. In certain circumstances it might have been possible to cause a     document to be loaded with a higher privileged principal than intended. (CVE-2023-32210)

  - A type checking bug would have led to invalid code being compiled. (CVE-2023-32211)

  - An attacker could have positioned a <code>datalist</code> element to obscure the address bar.
    (CVE-2023-32212)

  - When reading a file, an uninitialized value could have been used as read limit. (CVE-2023-32213)

  - Protocol handlers <code>ms-cxh</code> and <code>ms-cxh-full</code> could have been leveraged to trigger a     denial of service. Note: This attack only affects Windows. Other operating systems are not affected.
    (CVE-2023-32214)

  - Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian     Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112     and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code. (CVE-2023-32215)

  - Mozilla developers and community members Ronald Crane, Andrew McCreight, Randell Jesup and the Mozilla     Fuzzing Team reported memory safety bugs present in Firefox 112. Some of these bugs showed evidence of     memory corruption and we presume that with enough effort some of these could have been exploited to run     arbitrary code. (CVE-2023-32216)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote SUSE Linux SLES15 / SLES_SAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:2175-1 advisory.

  - In multiple cases browser prompts could have been obscured by popups controlled by content. These could     have led to potential user confusion and spoofing attacks. This vulnerability affects Firefox < 113,     Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32205)

  - An out-of-bound read could have led to a crash in the RLBox Expat driver. This vulnerability affects     Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32206)

  - A missing delay in popup notifications could have made it possible for an attacker to trick a user into     granting permissions. This vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird <     102.11. (CVE-2023-32207)

  - A type checking bug would have led to invalid code being compiled. This vulnerability affects Firefox <     113, Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32211)

  - An attacker could have positioned a <code>datalist</code> element to obscure the address bar. This     vulnerability affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32212)

  - When reading a file, an uninitialized value could have been used as read limit. This vulnerability affects     Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32213)

  - Protocol handlers `ms-cxh` and `ms-cxh-full` could have been leveraged to trigger a denial of service.
    *Note: This attack only affects Windows. Other operating systems are not affected.* This vulnerability     affects Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32214)

  - Mozilla developers and community members Gabriele Svelto, Andrew Osmond, Emily McDonough, Sebastian     Hengst, Andrew McCreight and the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 112     and Firefox ESR 102.10. Some of these bugs showed evidence of memory corruption and we presume that with     enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects     Firefox < 113, Firefox ESR < 102.11, and Thunderbird < 102.11. (CVE-2023-32215)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This Solaris system is missing necessary patches to address critical security updates :

The remote NewStart CGSL host, running version MAIN 6.02, has firefox packages installed that are affected by multiple vulnerabilities:

  - crossbeam-deque is a package of work-stealing deques for building task schedulers when programming in     Rust. In versions prior to 0.7.4 and 0.8.0, the result of the race condition is that one or more tasks in     the worker queue can be popped twice instead of other tasks that are forgotten and never popped. If tasks     are allocated on the heap, this can cause double free and a memory leak. If not, this still can cause a     logical bug. Crates using `Stealer::steal`, `Stealer::steal_batch`, or `Stealer::steal_batch_and_pop` are     affected by this issue. This has been fixed in crossbeam-deque 0.8.1 and 0.7.4. (CVE-2021-32810)

  - Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these     bugs showed evidence of memory corruption and we presume that with enough effort some of these could have     been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14,     and Firefox < 92. (CVE-2021-38493)

  - During operations on MessageTasks, a task may have been removed while it was still scheduled, resulting in     memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 78.15,     Thunderbird < 91.2, Firefox ESR < 91.2, Firefox ESR < 78.15, and Firefox < 93. (CVE-2021-38496)

  - Through use of reportValidity() and window.open(), a plain-text validation message could have been     overlaid on another origin, leading to possible user confusion and spoofing attacks. This vulnerability     affects Firefox < 93, Thunderbird < 91.2, and Firefox ESR < 91.2. (CVE-2021-38497)

  - During process shutdown, a document could have caused a use-after-free of a languages service object,     leading to memory corruption and a potentially exploitable crash. This vulnerability affects Firefox < 93,     Thunderbird < 91.2, and Firefox ESR < 91.2. (CVE-2021-38498)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
175941	RHEL 9 : firefox (RHSA-2023:3143)	Nessus	Red Hat Local Security Checks	5/17/2023	4/28/2024	high
175985	Oracle Linux 7 : firefox (ELSA-2023-3137)	Nessus	Oracle Linux Local Security Checks	5/17/2023	6/9/2023	high
175993	Oracle Linux 9 : thunderbird (ELSA-2023-3150)	Nessus	Oracle Linux Local Security Checks	5/17/2023	6/16/2023	high
176079	Rocky Linux 8 : thunderbird (RLSA-2023:3221)	Nessus	Rocky Linux Local Security Checks	5/18/2023	6/16/2023	high
176107	Oracle Linux 9 : firefox (ELSA-2023-3143)	Nessus	Oracle Linux Local Security Checks	5/19/2023	6/9/2023	high
175330	Mozilla Firefox < 113.0	Nessus	Windows	5/9/2023	7/7/2023	critical
175594	SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2023:2175-1)	Nessus	SuSE Local Security Checks	5/14/2023	7/14/2023	high
178626	Oracle Solaris Critical Patch Update : jul2023_SRU11_4_58_144_3	Nessus	Solaris Local Security Checks	7/20/2023	7/26/2023	critical
206859	NewStart CGSL MAIN 6.02 : firefox Multiple Vulnerabilities (NS-SA-2024-0066)	Nessus	NewStart CGSL Local Security Checks	9/10/2024	9/17/2024	critical

Detections

Analytics

Plugins Search

high

high

high

high

high

critical

high

critical

critical