The version of Firefox installed on the remote Windows host is prior to 43. It is, therefore, affected by the following vulnerabilities :

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues by convincing a user     to visit a specially crafted web page, resulting in the     execution of arbitrary code. (CVE-2015-7201)

  - Multiple unspecified memory corruption issues exist due     to improper validation of user-supplied input. A remote     attacker can exploit these issues by convincing a user     to visit a specially crafted web page, resulting in the     execution of arbitrary code. (CVE-2015-7202)

  - An overflow condition exists in the LoadFontFamilyData()     function due to improper validation of user-supplied     input. A remote attacker can exploit this to cause a     buffer overflow, resulting in the execution of arbitrary     code. (CVE-2015-7203)

  - A flaw exists in the PropertyWriteNeedsTypeBarrier()     function due to improper handling of unboxed objects     during JavaScript variable assignments. A remote     attacker can exploit this to execute arbitrary code.
    (CVE-2015-7204)

  - A flaw exists in the RtpHeaderParser::Parse() function     due to improper handling of RTP headers. An     unauthenticated, remote attacker can exploit this, via     specially crafted RTP headers, to execute arbitrary     code. (CVE-2015-7205)

  - A same-origin bypass vulnerability exists that is     triggered after a redirect when the function is used     alongside an iframe to host a page. An attacker can     exploit this to gain access to cross-origin URL     information. (CVE-2015-7207)

  - The SetCookieInternal() function improperly allows     control characters (e.g. ASCII code 11) to be inserted     into cookies. An attacker can exploit this to inject     cookies. (CVE-2015-7208)

  - A use-after-free error exists due to improper prevention     of datachannel operations on closed PeerConnections. An     attacker can exploit this to dereference already freed     memory, resulting in the execution of arbitrary code.
    (CVE-2015-7210)

  - A flaw exists in the ParseURI() function due to improper     handling of a hash (#) character in the data: URI. An     attacker can exploit this to spoof the URL bar.
    (CVE-2015-7211)

  - An overflow condition exists in the AllocateForSurface()     function due to improper validation of user-supplied     input when handling texture allocation in graphics     operations. An attacker can exploit this to execute     arbitrary code. (CVE-2015-7212)

  - An integer overflow condition exists in the     readMetaData() function due to improper validation of     user-supplied input when handling a specially crafted     MP4 file. An attacker can exploit this to execute     arbitrary code. (CVE-2015-7213)

  - A same-origin bypass vulnerability exists due to     improper handling of 'data:' and 'view-source:' URIs. An     attacker can exploit this to read data from cross-site     URLs and local files. (CVE-2015-7214)

  - An information disclosure vulnerability exists due to     improper handling of error events in web workers. An     attacker can exploit this to gain access to sensitive     cross-origin information. (CVE-2015-7215)

  - Multiple integer underflow conditions exist due to     improper  validation of user-supplied input when     handling HTTP2 frames. An attacker can exploit these to     crash the application, resulting in a denial of service.
    (CVE-2015-7218, CVE-2015-7219)

  - An overflow condition exists in the XDRBuffer::grow()     function due to improper validation of user-supplied     input. An attacker can exploit this to cause a buffer     overflow, resulting in the execution of arbitrary code.
    (CVE-2015-7220)

  - An overflow condition exists in the GrowCapacity()     function due to improper validation of user-supplied     input. An attacker can exploit this to cause a buffer     overflow, resulting in the execution of arbitrary code.
    (CVE-2015-7221)

  - An integer underflow condition exists in the bundled     version of libstagefright in the parseChunk() function     that is triggered when handling 'covr' chunks. An     unauthenticated, remote attacker can exploit this, via     specially crafted media content, to crash the     application or execute arbitrary code. (CVE-2015-7222)

  - A privilege escalation vulnerability exists in the     Extension.jsm script due to a failure to restrict     WebExtension APIs from being injected into documents     without WebExtension principals. An attacker can exploit     this to conduct a cross-site scripting attack, resulting     in the execution of arbitrary script code in a user's     browser session. (CVE-2015-7223)

The Mozilla Project reports :

MFSA 2015-134 Miscellaneous memory safety hazards (rv:43.0 / rv:38.5)

MFSA 2015-135 Crash with JavaScript variable assignment with unboxed objects

MFSA 2015-136 Same-origin policy violation using perfomance.getEntries and history navigation

MFSA 2015-137 Firefox allows for control characters to be set in cookies

MFSA 2015-138 Use-after-free in WebRTC when datachannel is used after being destroyed

MFSA 2015-139 Integer overflow allocating extremely large textures

MFSA 2015-140 Cross-origin information leak through web workers error events

MFSA 2015-141 Hash in data URI is incorrectly parsed

MFSA 2015-142 DOS due to malformed frames in HTTP/2

MFSA 2015-143 Linux file chooser crashes on malformed images due to flaws in Jasper library

MFSA 2015-144 Buffer overflows found through code inspection

MFSA 2015-145 Underflow through code inspection

MFSA 2015-146 Integer overflow in MP4 playback in 64-bit versions

MFSA 2015-147 Integer underflow and buffer overflow processing MP4 metadata in libstagefright

MFSA 2015-148 Privilege escalation vulnerabilities in WebExtension APIs

MFSA 2015-149 Cross-site reading attack through data and view-source URIs

The remote host is affected by the vulnerability described in GLSA-201512-10 (Mozilla Products: Multiple vulnerabilities)

    Multiple vulnerabilities have been discovered in Mozilla Firefox and       Mozilla Thunderbird. Please review the CVE identifiers referenced below       for details.
  Impact :

    A remote attacker could entice a user to view a specially crafted web       page or email, possibly resulting in execution of arbitrary code or a       Denial of Service condition.
  Workaround :

    There is no known workaround at this time.

ID	名稱	產品	系列	已發布	已更新	嚴重性
87476	Firefox < 43 Multiple Vulnerabilities	Nessus	Windows	2015/12/17	2026/6/23	critical
87385	FreeBSD : mozilla -- multiple vulnerabilities (2c2d1c39-1396-459a-91f5-ca03ee7c64c6)	Nessus	FreeBSD Local Security Checks	2015/12/16	2021/1/6	critical
87710	GLSA-201512-10 : Mozilla Products: Multiple vulnerabilities (Bar Mitzvah) (Logjam)	Nessus	Gentoo Local Security Checks	2016/1/4	2022/12/5	critical

偵測

搜尋 Plugin

critical

critical

critical