Test ID:	1.3.6.1.4.1.25623.1.0.882944
Category:	CentOS Local Security Checks
Title:	CentOS Update for firefox CESA-2018:2693 centos6
Summary:	Check the version of firefox
Description:	Summary: Check the version of firefox Vulnerability Insight: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 60.2.0 ESR. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2 (CVE-2018-12376) * Mozilla: Use-after-free in driver timers (CVE-2018-12377) * Mozilla: Use-after-free in IndexedDB (CVE-2018-12378) * Mozilla: Proxy bypass using automount and autofs (CVE-2017-16541) * Mozilla: Out-of-bounds write with malicious MAR file (CVE-2018-12379) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Alex Gaynor, Boris Zbarsky, Christoph Diehl, Christian Holler, Jason Kratzer, Jed Davis, Tyson Smith, Bogdan Tara, Karl Tomlinson, Mats Palmgren, Nika Layzell, Ted Campbell, Nils, Zhanjia Song, and Holger Fuhrmannek as the original reporters. Affected Software/OS: firefox on CentOS 6 Solution: Please install the updated packages. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2017-16541 BugTraq ID: 101665 http://www.securityfocus.com/bid/101665 Debian Security Information: DSA-4327 (Google Search) https://www.debian.org/security/2018/dsa-4327 https://security.gentoo.org/glsa/201810-01 https://security.gentoo.org/glsa/201811-13 https://blog.torproject.org/tor-browser-709-released https://bugzilla.mozilla.org/show_bug.cgi?id=1412081 https://trac.torproject.org/projects/tor/ticket/24052 https://www.bleepingcomputer.com/news/security/tormoil-vulnerability-leaks-real-ip-address-from-tor-browser-users/ https://www.wearesegment.com/research/tormoil-torbrowser-unspecified-critical-security-vulnerability/ https://lists.debian.org/debian-lts-announce/2018/11/msg00011.html RedHat Security Advisories: RHSA-2018:2692 https://access.redhat.com/errata/RHSA-2018:2692 RedHat Security Advisories: RHSA-2018:2693 https://access.redhat.com/errata/RHSA-2018:2693 RedHat Security Advisories: RHSA-2018:3403 https://access.redhat.com/errata/RHSA-2018:3403 RedHat Security Advisories: RHSA-2018:3458 https://access.redhat.com/errata/RHSA-2018:3458 http://www.securitytracker.com/id/1041610 Common Vulnerability Exposure (CVE) ID: CVE-2018-12376 BugTraq ID: 105280 http://www.securityfocus.com/bid/105280 Debian Security Information: DSA-4287 (Google Search) https://www.debian.org/security/2018/dsa-4287 https://usn.ubuntu.com/3761-1/ https://usn.ubuntu.com/3793-1/ Common Vulnerability Exposure (CVE) ID: CVE-2018-12377 Common Vulnerability Exposure (CVE) ID: CVE-2018-12378 Common Vulnerability Exposure (CVE) ID: CVE-2018-12379
Copyright	Copyright (C) 2018 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.