Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code or denial of service.

The version of Firefox ESR installed on the remote Windows host is prior to 52.8. It is, therefore, affected by multiple vulnerabilities as referenced in the mfsa2018-12 advisory.

  - Mozilla developers backported selected changes in the Skia library to the ESR52 branch of Firefox. These     changes correct memory corruption issues including invalid buffer reads and writes during graphic     operations. (CVE-2018-5183)

  - A use-after-free vulnerability can occur while enumerating attributes during SVG animations with clip     paths. This results in a potentially exploitable crash. (CVE-2018-5154)

  - A use-after-free vulnerability can occur while adjusting layout during SVG animations with text paths.
    This results in a potentially exploitable crash. (CVE-2018-5155)

  - Same-origin protections for the PDF viewer can be bypassed, allowing a malicious site to intercept     messages meant for the viewer. This could allow the site to retrieve PDF files restricted to viewing by an     authenticated user on a third-party website. (CVE-2018-5157)

  - The PDF viewer does not sufficiently sanitize PostScript calculator functions, allowing malicious     JavaScript to be injected through a crafted PDF file. This JavaScript can then be run with the permissions     of the PDF viewer by its worker. (CVE-2018-5158)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or attacks on encrypted emails.

The remote Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3660-1 advisory.

    Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially     crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of     service via application crash, install lightweight themes without user interaction, or execute arbitrary     code. (CVE-2018-5150, CVE-2018-5154, CVE-2018-5155, CVE-2018-5159, CVE-2018-5168, CVE-2018-5178)

    An issue was discovered when processing message headers in Thunderbird. If a user were tricked in to     opening a specially crafted message, an attacker could potentially exploit this to cause a denial of     service via application hang. (CVE-2018-5161)

    It was discovered encrypted messages could leak plaintext via the src attribute of remote images or links.
    An attacker could potentially exploit this to obtain sensitive information. (CVE-2018-5162)

    It was discovered that the filename of an attachment could be spoofed. An attacker could potentially     exploit this by tricking the user in to opening an attachment of a different type to the one expected.
    (CVE-2018-5170)

    Multiple security issues were discovered in Skia. If a user were tricked in to opening a specially crafted     message, an attacker could potentially exploit these to cause a denial of service via application crash,     or execute arbitrary code. (CVE-2018-5183)

    It was discovered that S/MIME encrypted messages with remote content could leak plaintext via a chosen-     ciphertext attack. An attacker could potentially exploit this to obtain sensitive information.
    (CVE-2018-5184)

    It was discovered that plaintext of decrypted emails could leak by submitting an embedded form. An     attacker could potentially exploit this to obtain sensitive information. (CVE-2018-5185)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
109739	Debian DSA-4199-1 : firefox-esr - security update	Nessus	Debian Local Security Checks	2018/5/14	2024/10/9	critical
109868	Mozilla Firefox ESR < 52.8	Nessus	Windows	2018/5/17	2025/11/18	critical
110101	Debian DSA-4209-1 : thunderbird - security update	Nessus	Debian Local Security Checks	2018/5/25	2024/10/1	critical
110191	Ubuntu 14.04 LTS / 16.04 LTS / 18.04 LTS : Thunderbird vulnerabilities (USN-3660-1)	Nessus	Ubuntu Local Security Checks	2018/5/29	2024/8/27	critical

偵測

搜尋 Plugin

critical

critical

critical

critical