The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2017:1106 advisory.

    Mozilla Firefox is an open source web browser.

    This update upgrades Firefox to version 52.1.0 ESR.

    Security Fix(es):

    * Multiple flaws were found in the processing of malformed web content. A web page containing malicious     content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the     user running Firefox. (CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434,     CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441,     CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448,     CVE-2017-5449, CVE-2017-5451, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5459, CVE-2017-5460,     CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467, CVE-2017-5469)

    Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Mozilla     developers and community, Nils, Holger Fuhrmannek, Atte Kettunen, Takeshi Terada, Huzaifa Sidhpurwala,     Nicolas Grgoire, Chamal De Silva, Chun Han Hsiao, Ivan Fratric of Google Project Zero, Anonymous working     with Trend Micro's Zero Day Initiative, Haik Aftandilian, Paul Theriault, Julian Hector, Petr Cerny, Jordi     Chancel, and Heather Miller of Google Skia team as the original reporters.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

This update upgrades Firefox to version 52.1.0 ESR.

Security Fix(es) :

  - Multiple flaws were found in the processing of malformed     web content. A web page containing malicious content     could cause Firefox to crash or, potentially, execute     arbitrary code with the privileges of the user running     Firefox. (CVE-2017-5429, CVE-2017-5430, CVE-2017-5432,     CVE-2017-5433, CVE-2017-5434, CVE-2017-5435,     CVE-2017-5436, CVE-2017-5438,     CVE-2017-5439, CVE-2017-5440, CVE-2017-5441,     CVE-2017-5442, CVE-2017-5443, CVE-2017-5444,     CVE-2017-5445, CVE-2017-5446, CVE-2017-5447,     CVE-2017-5448, CVE-2017-5449, CVE-2017-5451,     CVE-2017-5454, CVE-2017-5455, CVE-2017-5456,     CVE-2017-5459, CVE-2017-5460, CVE-2017-5464,     CVE-2017-5465, CVE-2017-5466, CVE-2017-5467,     CVE-2017-5469)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3260-1 advisory.

    Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially     crafted website, an attacker could potentially exploit these to read uninitialized memory, obtain     sensitive information, spoof the addressbar contents or other UI elements, escape the sandbox to read     local files, conduct cross-site scripting (XSS) attacks, cause a denial of service via application crash,     or execute arbitrary code. (CVE-2017-5429, CVE-2017-5430, CVE-2017-5432, CVE-2017-5433, CVE-2017-5434,     CVE-2017-5435, CVE-2017-5436, CVE-2017-5437, CVE-2017-5438, CVE-2017-5439, CVE-2017-5440, CVE-2017-5441,     CVE-2017-5442, CVE-2017-5443, CVE-2017-5444, CVE-2017-5445, CVE-2017-5446, CVE-2017-5447, CVE-2017-5448,     CVE-2017-5449, CVE-2017-5451, CVE-2017-5453, CVE-2017-5454, CVE-2017-5455, CVE-2017-5456, CVE-2017-5458,     CVE-2017-5459, CVE-2017-5460, CVE-2017-5461, CVE-2017-5464, CVE-2017-5465, CVE-2017-5466, CVE-2017-5467,     CVE-2017-5468, CVE-2017-5469)

    A flaw was discovered in the DRBG number generation in NSS. If an attacker were able to perform a machine-     in-the-middle attack, this flaw could potentially be exploited to view sensitive information.
    (CVE-2017-5462)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is 45.x prior to 45.9. It is, therefore, affected by the following vulnerabilities :

  - Multiple buffer overflow conditions exist in the FLEX     generated code due to improper validation of certain     input. An unauthenticated, remote attacker can exploit     these to execute arbitrary code. (CVE-2016-6354,     CVE-2017-5469)

  - Multiple flaws exist in the Libevent library, within     files evdns.c and evutil.c, due to improper validation     of input when handling IP address strings, empty base     name strings, and DNS packets. An unauthenticated,     remote attacker can exploit these to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2016-10195, CVE-2016-10196, CVE-2016-10197)

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-5429)

  - A use-after-free error exists in input text selection     that allows an unauthenticated, remote attacker to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5432)

  - A use-after-free error exists in the SMIL animation     functions when handling animation elements. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5433)

  - A use-after-free error exists when redirecting focus     handling that allows an unauthenticated, remote attacker     to cause a denial of service condition or the execution     of arbitrary code. (CVE-2017-5434)

  - A use-after-free error exists in design mode     interactions when handling transaction processing in     the editor. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5435)

  - An out-of-bounds write error exists in the Graphite 2     library when handling specially crafted Graphite fonts.
    An unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5436)

  - A use-after-free error exists in the nsAutoPtr()     function during XSLT processing due to the result     handler being held by a freed handler. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5438)

  - A use-after-free error exists in the Length() function     in nsTArray when handling template parameters during     XSLT processing. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5439)

  - A use-after-free error exists in the txExecutionState     destructor when processing XSLT content. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5440)

  - A use-after-free error exists when holding a selection     during scroll events. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2017-5441)

  - A use-after-free error exists when changing styles in     DOM elements that allows an unauthenticated, remote     attacker to cause a denial of service condition or the     execution of arbitrary code. (CVE-2017-5442)

  - An out-of-bounds write error exists while decoding     improperly formed BinHex format archives that allows an     unauthenticated, remote attacker to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2017-5443)

  - A buffer overflow condition exists while parsing     application/http-index-format format content due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, via     improperly formatted data, to disclose out-of-bounds     memory content. (CVE-2017-5444)

  - A flaw exists in nsDirIndexParser.cpp when parsing     application/http-index-format format content in which     uninitialized values are used to create an array. An     unauthenticated, remote attacker can exploit this to     disclose memory contents. (CVE-2017-5445)

  - An out-of-bounds read error exists when handling HTTP/2     DATA connections to a server that sends DATA frames with     incorrect content. An unauthenticated, remote attacker     can exploit to cause a denial of service condition or     the disclosure of memory contents. (CVE-2017-5446)

  - An out-of-bounds read error exists when processing glyph     widths during text layout. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition or the disclosure of memory contents.
    (CVE-2017-5447)

  - An out-of-bounds write error exists in the     ClearKeyDecryptor::Decrypt() function within file     ClearKeyDecryptionManager.cpp when decrypting     Clearkey-encrypted media content. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    This vulnerability can only be exploited if a secondary     mechanism can be used to escape the Gecko Media Plugin     (GMP) sandbox. (CVE-2017-5448)

  - A buffer overflow condition exists in WebGL when     handling web content due to improper validation of     certain input. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5459)

  - A use-after-free error exists in frame selection when     handling a specially crafted combination of script     content and key presses by the user. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2017-5460)

  - An out-of-bounds write error exists in the Network     Security Services (NSS) library during Base64 decoding     operations due to insufficient memory being allocated to     a buffer. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5461)

  - A flaw exists in the Network Security Services (NSS)     library during DRBG number generation due to the     internal state V not correctly carrying bits over. An     unauthenticated, remote attacker can exploit this to     potentially cause predictable random number generation.
    (CVE-2017-5462)

  - A flaw exists when making changes to DOM content in the     accessibility tree due to improper validation of certain     input, which can lead to the DOM tree becoming out of     sync with the accessibility tree. An unauthenticated,     remote attacker can exploit this to corrupt memory,     resulting in a denial of service condition or the     execution of arbitrary code. (CVE-2017-5464)

  - An out-of-bounds read error exists in ConvolvePixel when     processing SVG content, which allows for otherwise     inaccessible memory being copied into SVG graphic     content. An unauthenticated, remote attacker can exploit     this to disclose memory contents or cause a denial of     service condition. (CVE-2017-5465)

The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.1. It is, therefore, affected by the following vulnerabilities :

  - Multiple buffer overflow conditions exist in the FLEX     generated code due to improper validation of certain     input. An unauthenticated, remote attacker can exploit     these to execute arbitrary code. (CVE-2016-6354,     CVE-2017-5469)

  - Multiple flaws exist in the Libevent library, within     files evdns.c and evutil.c, due to improper validation     of input when handling IP address strings, empty base     name strings, and DNS packets. An unauthenticated,     remote attacker can exploit these to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2016-10195, CVE-2016-10196, CVE-2016-10197)

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-5429, CVE-2017-5430)

  - A use-after-free error exists in input text selection     that allows an unauthenticated, remote attacker to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5432)

  - A use-after-free error exists in the SMIL animation     functions when handling animation elements. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5433)

  - A use-after-free error exists when redirecting focus     handling that allows an unauthenticated, remote attacker     to cause a denial of service condition or the execution     of arbitrary code. (CVE-2017-5434)

  - A use-after-free error exists in design mode     interactions when handling transaction processing in     the editor. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5435)

  - An out-of-bounds write error exists in the Graphite 2     library when handling specially crafted Graphite fonts.
    An unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5436)

  - A use-after-free error exists in the nsAutoPtr()     function during XSLT processing due to the result     handler being held by a freed handler. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5438)

  - A use-after-free error exists in the Length() function     in nsTArray when handling template parameters during     XSLT processing. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5439)

  - A use-after-free error exists in the txExecutionState     destructor when processing XSLT content. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5440)

  - A use-after-free error exists when holding a selection     during scroll events. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2017-5441)

  - A use-after-free error exists when changing styles in     DOM elements that allows an unauthenticated, remote     attacker to cause a denial of service condition or the     execution of arbitrary code. (CVE-2017-5442)

  - An out-of-bounds write error exists while decoding     improperly formed BinHex format archives that allows an     unauthenticated, remote attacker to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2017-5443)

  - A buffer overflow condition exists while parsing     application/http-index-format format content due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, via     improperly formatted data, to disclose out-of-bounds     memory content. (CVE-2017-5444)

  - A flaw exists in nsDirIndexParser.cpp when parsing     application/http-index-format format content in which     uninitialized values are used to create an array. An     unauthenticated, remote attacker can exploit this to     disclose memory contents. (CVE-2017-5445)

  - An out-of-bounds read error exists when handling HTTP/2     DATA connections to a server that sends DATA frames with     incorrect content. An unauthenticated, remote attacker     can exploit to cause a denial of service condition or     the disclosure of memory contents. (CVE-2017-5446)

  - An out-of-bounds read error exists when processing glyph     widths during text layout. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition or the disclosure of memory contents.
    (CVE-2017-5447)

  - An out-of-bounds write error exists in the     ClearKeyDecryptor::Decrypt() function within file     ClearKeyDecryptionManager.cpp when decrypting     Clearkey-encrypted media content. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    This vulnerability can only be exploited if a secondary     mechanism can be used to escape the Gecko Media Plugin     (GMP) sandbox. (CVE-2017-5448)

  - A flaw exists when handling bidirectional Unicode text     in conjunction with CSS animations that allows an     unauthenticated, remote attacker to cause a denial of     service condition or the execution or arbitrary code.
    (CVE-2017-5449)

  - A flaw exists in the handling of specially crafted     'onblur' events. An unauthenticated, remote attacker can     exploit this, via a specially crafted event, to spoof     the address bar, making the loaded site appear to be     different from the one actually loaded. (CVE-2017-5451)

  - A flaw exists in the FileSystemSecurity::Forget()     function within file FileSystemSecurity.cpp when using     the File Picker due to improper sanitization of input     containing path traversal sequences. An unauthenticated,     remote attacker can exploit this to bypass file system     access protections in the sandbox and read arbitrary     files on the local file system. (CVE-2017-5454)

  - An unspecified flaw exists in the internal feed reader     APIs when handling messages. An unauthenticated, remote     attacker can exploit this to escape the sandbox and     gain elevated privileges if it can be combined with     another vulnerability that allows remote code execution     inside the sandboxed process. (CVE-2017-5455)

  - A flaw exists in the Entries API when using a file     system request constructor through an IPC message. An     unauthenticated, remote attacker can exploit this to     bypass file system access protections in the sandbox     and gain read and write access to the local file system.
    (CVE-2017-5456)

  - A buffer overflow condition exists in WebGL when     handling web content due to improper validation of     certain input. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5459)

  - A use-after-free error exists in frame selection when     handling a specially crafted combination of script     content and key presses by the user. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2017-5460)

  - An out-of-bounds write error exists in the Network     Security Services (NSS) library during Base64 decoding     operations due to insufficient memory being allocated to     a buffer. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5461)

  - A flaw exists in the Network Security Services (NSS)     library during DRBG number generation due to the     internal state V not correctly carrying bits over. An     unauthenticated, remote attacker can exploit this to     potentially cause predictable random number generation.
    (CVE-2017-5462)

  - A flaw exists when making changes to DOM content in the     accessibility tree due to improper validation of certain     input, which can lead to the DOM tree becoming out of     sync with the accessibility tree. An unauthenticated,     remote attacker can exploit this to corrupt memory,     resulting in a denial of service condition or the     execution of arbitrary code. (CVE-2017-5464)

  - An out-of-bounds read error exists in ConvolvePixel when     processing SVG content, which allows for otherwise     inaccessible memory being copied into SVG graphic     content. An unauthenticated, remote attacker can exploit     this to disclose memory contents or cause a denial of     service condition. (CVE-2017-5465)

  - A cross-site script (XSS) vulnerability exists due to     improper handling of data:text/html URL redirects when     a reload is triggered, which causes the reloaded     data:text/html page to have its origin set incorrectly.
    An unauthenticated, remote attacker can exploit this,     via a specially crafted request, to execute arbitrary     script code in a user's browser session. (CVE-2017-5466)

  - A memory corruption issue exists when rendering Skia     content outside of the bounds of a clipping region due     to improper validation of certain input. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5467)

The version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 53. It is, therefore, affected by the following vulnerabilities :

  - Multiple buffer overflow conditions exist in the FLEX     generated code due to improper validation of certain     input. An unauthenticated, remote attacker can exploit     these to execute arbitrary code. (CVE-2016-6354,     CVE-2017-5469)

  - Multiple flaws exist in the Libevent library, within     files evdns.c and evutil.c, due to improper validation     of input when handling IP address strings, empty base     name strings, and DNS packets. An unauthenticated,     remote attacker can exploit these to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2016-10195, CVE-2016-10196, CVE-2016-10197)

  - Multiple memory corruption issues exist that allow an     unauthenticated, remote attacker to execute arbitrary     code. (CVE-2017-5429, CVE-2017-5430)

  - A use-after-free error exists in input text selection     that allows an unauthenticated, remote attacker to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5432)

  - A use-after-free error exists in the SMIL animation     functions when handling animation elements. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5433)

  - A use-after-free error exists when redirecting focus     handling that allows an unauthenticated, remote attacker     to cause a denial of service condition or the execution     of arbitrary code. (CVE-2017-5434)

  - A use-after-free error exists in design mode     interactions when handling transaction processing in     the editor. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5435)

  - An out-of-bounds write error exists in the Graphite 2     library when handling specially crafted Graphite fonts.
    An unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5436)

  - A use-after-free error exists in the nsAutoPtr()     function during XSLT processing due to the result     handler being held by a freed handler. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5438)

  - A use-after-free error exists in the Length() function     in nsTArray when handling template parameters during     XSLT processing. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5439)

  - A use-after-free error exists in the txExecutionState     destructor when processing XSLT content. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5440)

  - A use-after-free error exists when holding a selection     during scroll events. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition or the execution of arbitrary code.
    (CVE-2017-5441)

  - A use-after-free error exists when changing styles in     DOM elements that allows an unauthenticated, remote     attacker to cause a denial of service condition or the     execution of arbitrary code. (CVE-2017-5442)

  - An out-of-bounds write error exists while decoding     improperly formed BinHex format archives that allows an     unauthenticated, remote attacker to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2017-5443)

  - A buffer overflow condition exists while parsing     application/http-index-format format content due to     improper validation of user-supplied input. An     unauthenticated, remote attacker can exploit this, via     improperly formatted data, to disclose out-of-bounds     memory content. (CVE-2017-5444)

  - A flaw exists in nsDirIndexParser.cpp when parsing     application/http-index-format format content in which     uninitialized values are used to create an array. An     unauthenticated, remote attacker can exploit this to     disclose memory contents. (CVE-2017-5445)

  - An out-of-bounds read error exists when handling HTTP/2     DATA connections to a server that sends DATA frames with     incorrect content. An unauthenticated, remote attacker     can exploit to cause a denial of service condition or     the disclosure of memory contents. (CVE-2017-5446)

  - An out-of-bounds read error exists when processing glyph     widths during text layout. An unauthenticated, remote     attacker can exploit this to cause a denial of service     condition or the disclosure of memory contents.
    (CVE-2017-5447)

  - An out-of-bounds write error exists in the     ClearKeyDecryptor::Decrypt() function within file     ClearKeyDecryptionManager.cpp when decrypting     Clearkey-encrypted media content. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    This vulnerability can only be exploited if a secondary     mechanism can be used to escape the Gecko Media Plugin     (GMP) sandbox. (CVE-2017-5448)

  - A flaw exists when handling bidirectional Unicode text     in conjunction with CSS animations that allows an     unauthenticated, remote attacker to cause a denial of     service condition or the execution or arbitrary code.
    (CVE-2017-5449)

  - A flaw exists in the handling of specially crafted     'onblur' events. An unauthenticated, remote attacker can     exploit this, via a specially crafted event, to spoof     the address bar, making the loaded site appear to be     different from the one actually loaded. (CVE-2017-5451)

  - A flaw exists in the RSS reader preview page due to     improper sanitization of URL parameters for a feed's     TITLE element. An unauthenticated, remote attacker can     exploit this to spoof the TITLE element. However, no     scripted content can be run. (CVE-2017-5453)

  - A flaw exists in the FileSystemSecurity::Forget()     function within file FileSystemSecurity.cpp when using     the File Picker due to improper sanitization of input     containing path traversal sequences. An unauthenticated,     remote attacker can exploit this to bypass file system     access protections in the sandbox and read arbitrary     files on the local file system. (CVE-2017-5454)

  - An unspecified flaw exists in the internal feed reader     APIs when handling messages. An unauthenticated, remote     attacker can exploit this to escape the sandbox and     gain elevated privileges if it can be combined with     another vulnerability that allows remote code execution     inside the sandboxed process. (CVE-2017-5455)

  - A flaw exists in the Entries API when using a file     system request constructor through an IPC message. An     unauthenticated, remote attacker can exploit this to     bypass file system access protections in the sandbox     and gain read and write access to the local file system.
    (CVE-2017-5456)

  - A reflected cross-site scripting (XSS) vulnerability     exists when dragging and dropping a 'javascript:' URL     into the address bar due to improper validation of     input. An unauthenticated, remote attacker can exploit     this to execute arbitrary script code in a user's     browser session. (CVE-2017-5458)

  - A buffer overflow condition exists in WebGL when     handling web content due to improper validation of     certain input. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5459)

  - A use-after-free error exists in frame selection when     handling a specially crafted combination of script     content and key presses by the user. An unauthenticated,     remote attacker can exploit this to cause a denial of     service condition or the execution of arbitrary code.
    (CVE-2017-5460)

  - An out-of-bounds write error exists in the Network     Security Services (NSS) library during Base64 decoding     operations due to insufficient memory being allocated to     a buffer. An unauthenticated, remote attacker can     exploit this to cause a denial of service condition or     the execution of arbitrary code. (CVE-2017-5461)

  - A flaw exists in the Network Security Services (NSS)     library during DRBG number generation due to the     internal state V not correctly carrying bits over. An     unauthenticated, remote attacker can exploit this to     potentially cause predictable random number generation.
    (CVE-2017-5462)

  - A flaw exists when making changes to DOM content in the     accessibility tree due to improper validation of certain     input, which can lead to the DOM tree becoming out of     sync with the accessibility tree. An unauthenticated,     remote attacker can exploit this to corrupt memory,     resulting in a denial of service condition or the     execution of arbitrary code. (CVE-2017-5464)

  - An out-of-bounds read error exists in ConvolvePixel when     processing SVG content, which allows for otherwise     inaccessible memory being copied into SVG graphic     content. An unauthenticated, remote attacker can exploit     this to disclose memory contents or cause a denial of     service condition. (CVE-2017-5465)

  - A cross-site script (XSS) vulnerability exists due to     improper handling of data:text/html URL redirects when     a reload is triggered, which causes the reloaded     data:text/html page to have its origin set incorrectly.
    An unauthenticated, remote attacker can exploit this,     via a specially crafted request, to execute arbitrary     script code in a user's browser session. (CVE-2017-5466)

  - A memory corruption issue exists when rendering Skia     content outside of the bounds of a clipping region due     to improper validation of certain input. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition or the execution of     arbitrary code. (CVE-2017-5467)

  - A flaw exists in the developer tools due to an incorrect     ownership model of privateBrowsing information. An     unauthenticated, remote attacker can exploit this to     cause a denial of service condition. (CVE-2017-5468)

The version of Firefox ESR installed on the remote Windows host is prior to 45.9. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2017-11 advisory.

  - Fixed potential buffer overflows in generated Firefox code due to     [CVE-2016-6354](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-6354) issue in Flex.
    (CVE-2017-5469)

  - A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in     an array are dropped from the animation controller while still in use. This results in a potentially     exploitable crash. (CVE-2017-5433)

  - A use-after-free vulnerability occurs during transaction processing in the editor during design mode     interactions. This results in a potentially exploitable crash. (CVE-2017-5435)

  - An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This     results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as     Mozilla products. (CVE-2017-5436)

  - An out-of-bounds write during Base64 decoding operation in the Network Security Services (NSS) library due     to insufficient memory being allocated to the buffer. This results in a potentially exploitable crash. The     NSS library has been updated to fix this issue to address this issue and Firefox ESR 45.9 has been updated     with NSS version 3.21.4. (CVE-2017-5461)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
99572	RHEL 7 : firefox (RHSA-2017:1106)	Nessus	Red Hat Local Security Checks	2017/4/21	2025/3/21	critical
99619	Scientific Linux Security Update : firefox on SL7.x x86_64 (20170420)	Nessus	Scientific Linux Local Security Checks	2017/4/24	2025/12/23	critical
99626	Ubuntu 14.04 LTS / 16.04 LTS : Firefox vulnerabilities (USN-3260-1)	Nessus	Ubuntu Local Security Checks	2017/4/24	2024/8/27	critical
99627	Mozilla Firefox ESR 45.x < 45.9 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2017/4/24	2026/3/3	critical
99628	Mozilla Firefox ESR < 52.1 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2017/4/24	2026/3/3	critical
99629	Mozilla Firefox < 53 Multiple Vulnerabilities (macOS)	Nessus	MacOS X Local Security Checks	2017/4/24	2026/3/3	critical
99630	Mozilla Firefox ESR < 45.9	Nessus	Windows	2017/4/24	2025/11/18	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical