Test ID:	1.3.6.1.4.1.25623.1.0.813047
Category:	General
Title:	Mozilla Firefox ESR Security Advisories (MFSA2018-08, MFSA2018-08) - Windows
Summary:	Mozilla Firefox ESR is prone to a remote code execution (RCE) vulnerability.
Description:	Summary: Mozilla Firefox ESR is prone to a remote code execution (RCE) vulnerability. Vulnerability Insight: The flaw exists due to an out of bounds memory write error in libvorbis library. Vulnerability Impact: Successful exploitation will allow attackers to execute arbitrary code within the context of the user running the affected application. Failed exploit attempts will likely cause denial-of-service conditions. Affected Software/OS: Mozilla Firefox ESR version before 52.7.2 on Windows. Solution: Upgrade to Mozilla Firefox ESR version 52.7.2 or later. CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-5146 BugTraq ID: 103432 http://www.securityfocus.com/bid/103432 Debian Security Information: DSA-4140 (Google Search) https://www.debian.org/security/2018/dsa-4140 Debian Security Information: DSA-4143 (Google Search) https://www.debian.org/security/2018/dsa-4143 Debian Security Information: DSA-4155 (Google Search) https://www.debian.org/security/2018/dsa-4155 https://security.gentoo.org/glsa/201811-13 https://lists.debian.org/debian-lts-announce/2018/03/msg00022.html https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html https://lists.debian.org/debian-lts-announce/2018/04/msg00033.html RedHat Security Advisories: RHSA-2018:0549 https://access.redhat.com/errata/RHSA-2018:0549 RedHat Security Advisories: RHSA-2018:0647 https://access.redhat.com/errata/RHSA-2018:0647 RedHat Security Advisories: RHSA-2018:0648 https://access.redhat.com/errata/RHSA-2018:0648 RedHat Security Advisories: RHSA-2018:0649 https://access.redhat.com/errata/RHSA-2018:0649 RedHat Security Advisories: RHSA-2018:1058 https://access.redhat.com/errata/RHSA-2018:1058 http://www.securitytracker.com/id/1040544 https://usn.ubuntu.com/3545-1/ https://usn.ubuntu.com/3599-1/ https://usn.ubuntu.com/3604-1/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.