The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-1604 advisory.

    [60.7.2-1.0.1]
    - fix LD_LIBRARY_PATH
    - Add firefox-oracle-default-prefs.js and remove the corresponding Red Hat one

    [60.7.2-1]
    - Update to 60.7.2 ESR

    [60.7.1-1]
    - Updated to 60.7.1 ESR

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Oracle Linux 6 host has a package installed that is affected by multiple vulnerabilities as referenced in the ELSA-2019-1624 advisory.

    [60.7.2-2.0.1]
    - Replaced thunderbird-redhat-default-prefs.js with thunderbird-oracle-default-prefs.js

    [60.7.2-2]
    - Update to 60.7.2 build2

    [60.7.2-1]
    - Update to 60.7.2

    [60.7.1-1]
    - Update to 60.7.1

Tenable has extracted the preceding description block directly from the Oracle Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Redhat Enterprise Linux 7 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1626 advisory.

    Mozilla Thunderbird is a standalone mail and newsgroup client.

    This update upgrades Thunderbird to version 60.7.2.

    Security Fix(es):

    * Mozilla: Type confusion in Array.pop (CVE-2019-11707)

    * thunderbird: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c (CVE-2019-11705)

    * Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)

    * thunderbird: Heap buffer over read in icalparser.c parser_get_next_char (CVE-2019-11703)

    * thunderbird: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c     (CVE-2019-11704)

    * thunderbird: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c     (CVE-2019-11706)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

An update for firefox is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Firefox is an open source web browser, designed for standards compliance, performance, and portability.

This update upgrades Firefox to version 60.7.2 ESR.

Security Fix(es) :

* Mozilla: Type confusion in Array.pop (CVE-2019-11707)

* Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

An update for thunderbird is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

Mozilla Thunderbird is a standalone mail and newsgroup client.

This update upgrades Thunderbird to version 60.7.2.

Security Fix(es) :

* Mozilla: Type confusion in Array.pop (CVE-2019-11707)

* thunderbird: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c (CVE-2019-11705)

* Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)

* thunderbird: Heap buffer over read in icalparser.c parser_get_next_char (CVE-2019-11703)

* thunderbird: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c (CVE-2019-11704)

* thunderbird: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c (CVE-2019-11706)

For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the RHSA-2019:1696 advisory.

    Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and     portability.

    This update upgrades Firefox to version 60.7.2 ESR.

    Security Fix(es):

    * Mozilla: Type confusion in Array.pop (CVE-2019-11707)

    * Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)

    For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and     other related information, refer to the CVE page(s) listed in the References section.

Tenable has extracted the preceding description block directly from the Red Hat Enterprise Linux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:1623 advisory.

  - libical: Heap buffer over read in icalparser.c parser_get_next_char (CVE-2019-11703)

  - libical: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c (CVE-2019-11704)

  - libical: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c (CVE-2019-11705)

  - libical: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c     (CVE-2019-11706)

  - Mozilla: Type confusion in Array.pop (CVE-2019-11707)

  - Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote CentOS Linux 8 host has a package installed that is affected by multiple vulnerabilities as referenced in the CESA-2019:1696 advisory.

  - Mozilla: Type confusion in Array.pop (CVE-2019-11707)

  - Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3916:03 advisory.

    * Mozilla: Type confusion in Array.pop (CVE-2019-11707)
      * thunderbird: Stack buffer overflow in icalrecur_add_bydayrules in icalrecur.c (CVE-2019-11705)
      * Mozilla: Sandbox escape using Prompt:Open (CVE-2019-11708)
      * thunderbird: Heap buffer over read in icalparser.c parser_get_next_char (CVE-2019-11703)
      * thunderbird: Heap buffer overflow in icalmemory_strdup_and_dequote function in icalvalue.c     (CVE-2019-11704)
      * thunderbird: Type confusion in icaltimezone_get_vtimezone_properties function in icalproperty.c     (CVE-2019-11706)

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote MiracleLinux 4 host has a package installed that is affected by multiple vulnerabilities as referenced in the AXSA:2019-3914:03 advisory.

    [Security Fix]
    -  CVE-2019-11707, CVE-2019-11708     CVE

    CVEJVNhttp://jvndb.jvn.jp/

Tenable has extracted the preceding description block directly from the MiracleLinux security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
126300	Oracle Linux 6 : firefox (ELSA-2019-1604)	Nessus	Oracle Linux Local Security Checks	2019/6/27	2024/10/22	critical
126317	Oracle Linux 6 : thunderbird (ELSA-2019-1624)	Nessus	Oracle Linux Local Security Checks	2019/6/28	2024/10/22	critical
126321	RHEL 7 : thunderbird (RHSA-2019:1626)	Nessus	Red Hat Local Security Checks	2019/6/28	2024/11/6	critical
126385	CentOS 7 : firefox (CESA-2019:1603)	Nessus	CentOS Local Security Checks	2019/7/2	2023/4/25	critical
126389	CentOS 7 : thunderbird (CESA-2019:1626)	Nessus	CentOS Local Security Checks	2019/7/2	2023/4/25	critical
126558	RHEL 8 : firefox (RHSA-2019:1696)	Nessus	Red Hat Local Security Checks	2019/7/9	2024/11/6	critical
145575	CentOS 8 : thunderbird (CESA-2019:1623)	Nessus	CentOS Local Security Checks	2021/1/29	2023/4/25	critical
145685	CentOS 8 : firefox (CESA-2019:1696)	Nessus	CentOS Local Security Checks	2021/1/29	2023/4/25	critical
289516	MiracleLinux 4 : thunderbird-60.7.2-2.AXS4 (AXSA:2019-3916:03)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/17	critical
289908	MiracleLinux 4 : firefox-60.7.2-1.0.1.AXS4 (AXSA:2019-3914:03)	Nessus	Miracle Linux Local Security Checks	2026/1/16	2026/1/17	critical

検出

プラグインの検索

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical