The version of Mozilla Firefox installed on the remote macOS or     Mac OS X host is prior to 60. It is, therefore, affected by multiple     critical and high severity vulnerabilities.

USN-3645-1 fixed vulnerabilities in Firefox. The update caused an issue where users experienced long UI pauses in some circumsances.
This update fixes the problem.

We apologize for the inconvenience.

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, bypass same-origin restrictions, conduct cross-site scripting (XSS) attacks, install lightweight themes without user interaction, spoof the filename in the downloads panel, or execute arbitrary code.
(CVE-2018-5150, CVE-2018-5151, CVE-2018-5153, CVE-2018-5154, CVE-2018-5155, CVE-2018-5157, CVE-2018-5158, CVE-2018-5159, CVE-2018-5160, CVE-2018-5163, CVE-2018-5164, CVE-2018-5168, CVE-2018-5173, CVE-2018-5175, CVE-2018-5177, CVE-2018-5180)

Multiple security issues were discovered with WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to obtain sensitive information, or bypass security restrictions. (CVE-2018-5152, CVE-2018-5166)

It was discovered that the web console and JavaScript debugger incorrectly linkified chrome: and JavaScript URLs. If a user were tricked in to clicking a specially crafted link, an attacker could potentially exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2018-5167)

It was discovered that dragging and dropping link text on to the home button could set the home page to include chrome pages. If a user were tricked in to dragging and dropping a specially crafted link on to the home button, an attacker could potentially exploit this bypass security restrictions. (CVE-2018-5169)

It was discovered that the Live Bookmarks page and PDF viewer would run script pasted from the clipboard. If a user were tricked in to copying and pasting specially crafted text, an attacker could potentially exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2018-5172)

It was discovered that the JSON viewer incorrectly linkified javascript: URLs. If a user were tricked in to clicking on a specially crafted link, an attacker could potentially exploit this to obtain sensitive information. (CVE-2018-5176)

It was discovered that dragging a file: URL on to a tab that is running in a different process would cause the file to open in that process. If a user were tricked in to dragging a file: URL, an attacker could potentially exploit this to bypass intended security policies. (CVE-2018-5181)

It was discovered that dragging text that is a file: URL on to the addressbar would open the specified file. If a user were tricked in to dragging specially crafted text on to the addressbar, an attacker could potentially exploit this to bypass intended security policies.
(CVE-2018-5182).

Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The version of Mozilla Thunderbird installed on the remote Windows host is prior to 52.8 It is, therefore, affected by multiple vulnerabilities.

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails.

This update upgrades Thunderbird to version 52.8.0.

Security Fix(es) :

  - Mozilla: Memory safety bugs fixed in Firefox 60 and     Firefox ESR 52.8 (CVE-2018-5150)

  - Mozilla: Backport critical security fixes in Skia     (CVE-2018-5183)

  - Mozilla: Use-after-free with SVG animations and clip     paths (CVE-2018-5154)

  - Mozilla: Use-after-free with SVG animations and text     paths (CVE-2018-5155)

  - Mozilla: Integer overflow and out-of-bounds write in     Skia (CVE-2018-5159)

  - Mozilla: Full plaintext recovery in S/MIME via     chosen-ciphertext attack (CVE-2018-5184)

  - Mozilla: Hang via malformed headers (CVE-2018-5161)

  - Mozilla: Encrypted mail leaks plaintext through src     attribute (CVE-2018-5162)

  - Mozilla: Lightweight themes can be installed without     user interaction (CVE-2018-5168)

  - Mozilla: Filename spoofing for external attachments     (CVE-2018-5170)

  - Mozilla: Buffer overflow during UTF-8 to Unicode string     conversion through legacy extension (CVE-2018-5178)

  - Mozilla: Leaking plaintext through HTML forms     (CVE-2018-5185)

According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Use-after-free in compositor potentially allows code     execution (CVE-2018-5148)

  - Memory safety bugs fixed in Firefox 60 and Firefox ESR     52.8 (CVE-2018-5150)

  - Backport critical security fixes in Skia     (CVE-2018-5183)

  - Use-after-free with SVG animations and clip paths     (CVE-2018-5154)

  - Use-after-free with SVG animations and text paths     (CVE-2018-5155)

  - Same-origin bypass of PDF Viewer to view protected PDF     files (CVE-2018-5157)

  - Malicious PDF can inject JavaScript into PDF Viewer     (CVE-2018-5158)

  - Integer overflow and out-of-bounds write in Skia     (CVE-2018-5159)

  - Lightweight themes can be installed without user     interaction (CVE-2018-5168)

  - Buffer overflow during UTF-8 to Unicode string     conversion through legacy extension (CVE-2018-5178)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for MozillaFirefox to 68.2.0 ESR fixes the following issues :

Mozilla Firefox was updated to version 68.2.0 ESR (bsc#1154738).

Security issues fixed :

CVE-2019-15903: Fixed a heap overflow in the expat library (bsc#1149429).

CVE-2019-11757: Fixed a use-after-free when creating index updates in IndexedDB (bsc#1154738).

CVE-2019-11758: Fixed a potentially exploitable crash due to 360 Total Security (bsc#1154738).

CVE-2019-11759: Fixed a stack-based buffer overflow in HKDF output (bsc#1154738).

CVE-2019-11760: Fixed a stack-based buffer overflow in WebRTC networking (bsc#1154738).

CVE-2019-11761: Fixed an unintended access to a privileged JSONView object (bsc#1154738).

CVE-2019-11762: Fixed a same-origin-property violation (bsc#1154738).

CVE-2019-11763: Fixed an XSS bypass (bsc#1154738).

CVE-2019-11764: Fixed several memory safety bugs (bsc#1154738).

Non-security issues fixed: Firefox 60.7 ESR changed the user interface language (bsc#1137990).

Wrong Firefox GUI Language (bsc#1120374).

Fixed an inadvertent crash report transmission without user opt-in (bsc#1074235).

Firefox hangs randomly when browsing and scrolling (bsc#1043008).

Firefox stops loading page until mouse is moved (bsc#1025108).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Versions of Mozilla Firefox ESR earlier than 52.8 are unpatched for the following vulnerabilities :

 - A use-after-free error exists that is triggered when enumerating attributes for SVG animations with clip paths. With a specially crafted SVG file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - A use-after-free error exists in 'layout/svg/SVGTextFrame.cpp' that is triggered when adjusting layouts for SVG animations with text paths. With a specially crafted SVG file, a context-dependent attacker can dereference already freed memory and potentially execute arbitrary code.
 - An unspecified flaw exists in the PDF viewer that may allow a context-dependent attacker to bypass the same-origin policy and view restricted PDF files on a third-party website.
 - A flaw exists that allows a cross-site scripting (XSS) attack. This flaw exists exists because the PDF viewer does not properly sanitize input to PostScript calculator functions before returning it to users. This may allow a context-dependent attacker to create a specially crafted request that executes arbitrary script code in a user's browser session within the trust relationship between their browser and the server.
 - An integer overflow condition exists in 'include/private/SkTDArray.h' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - A flaw exists in the installation of themes. This may allow a context-dependent attacker to manipulate the baseURI property  of a theme element to bypass intended user interaction checks, allowing for the installation of unintended themes. This may be used to 'e.g'. deface a page with content from unintended themes.
 - A flaw exists that is triggered as the program sets the SEE_MASK_FLAG_NO_UI flag for Windows Defender SmartScreen when handling certain downloads. This may result in the download file prompt not displaying to the user, potentially causing files to be opened without the user's intent.
 - An assertion flaw exists in the 'FilterNodeArithmeticCombineSoftware::SetAttribute()' function in 'gfx/2d/FilterNodeSoftware.cpp' that is triggered as certain input is not properly validated. This may allow a context-dependent attacker to cause an out-of-bounds read and potentially disclose memory contents.
 - A flaw exists that is triggered when asynchronously calling methods from the CamerasChild class in 'dom/media/systemservices/CamerasChild.cpp'. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code.
 - An overflow condition exists that is triggered as certain input is not properly validated when performing UTF8 to Unicode string conversion. This may allow a context-dependent attacker to cause a buffer overflow, potentially allowing the execution of arbitrary code.
 - Multiple unspecified flaws exist exist related to the use of insecure versions of Skia that may allow an attacker to perform memory corruption attacks, or potentially have other impacts. No further details have been provided.

ID	Name	Product	Family	Published	Updated	Severity
109867	Mozilla Firefox < 60 Multiple Critical Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	5/17/2018	11/4/2019	critical
109940	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Firefox regression (USN-3645-2)	Nessus	Ubuntu Local Security Checks	5/21/2018	10/20/2023	critical
109946	Mozilla Thunderbird < 52.8 Multiple Vulnerabilities (EFAIL)	Nessus	Windows	5/22/2018	11/4/2019	critical
110101	Debian DSA-4209-1 : thunderbird - security update	Nessus	Debian Local Security Checks	5/25/2018	4/5/2019	critical
110121	Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20180524)	Nessus	Scientific Linux Local Security Checks	5/25/2018	5/29/2020	critical
110130	EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1126)	Nessus	Huawei Local Security Checks	5/29/2018	1/6/2021	critical
130450	SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2019:2872-1)	Nessus	SuSE Local Security Checks	11/1/2019	4/16/2024	critical
700337	Mozilla Firefox ESR < 52.8 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	8/21/2018	11/6/2019	high

Detections

Analytics

Plugins Search

critical

critical

critical

critical

critical

critical

critical

high