Test ID:	1.3.6.1.4.1.25623.1.0.814048
Category:	General
Title:	Mozilla Firefox ESR Security Advisories (MFSA2018-22, MFSA2018-23) - Mac OS X
Summary:	Mozilla Firefox is prone to a denial of service (DoS) vulnerability.
Description:	Summary: Mozilla Firefox is prone to a denial of service (DoS) vulnerability. Vulnerability Insight: The flaw exists due to data stored in the local cache in the user profile directory. Vulnerability Impact: Successful exploitation will allow attackers to write data into the local cache or from locally installed malware. This issue also triggers a non-exploitable startup crash for users. Affected Software/OS: Mozilla Firefox ESR version before 60.2.1 on Mac OS X. Solution: Upgrade to Mozilla Firefox ESR version 60.2.1 or later. Please see the references for more information. CVSS Score: 4.4 CVSS Vector: AV:L/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2018-12385 BugTraq ID: 105380 http://www.securityfocus.com/bid/105380 Debian Security Information: DSA-4304 (Google Search) https://www.debian.org/security/2018/dsa-4304 Debian Security Information: DSA-4327 (Google Search) https://www.debian.org/security/2018/dsa-4327 https://security.gentoo.org/glsa/201810-01 https://security.gentoo.org/glsa/201811-13 https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html RedHat Security Advisories: RHSA-2018:2834 https://access.redhat.com/errata/RHSA-2018:2834 RedHat Security Advisories: RHSA-2018:2835 https://access.redhat.com/errata/RHSA-2018:2835 RedHat Security Advisories: RHSA-2018:3403 https://access.redhat.com/errata/RHSA-2018:3403 RedHat Security Advisories: RHSA-2018:3458 https://access.redhat.com/errata/RHSA-2018:3458 http://www.securitytracker.com/id/1041700 http://www.securitytracker.com/id/1041701 https://usn.ubuntu.com/3778-1/ https://usn.ubuntu.com/3793-1/
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.