Test ID:	1.3.6.1.4.1.25623.1.0.883129
Category:	CentOS Local Security Checks
Title:	CentOS Update for firefox CESA-2019:3281 centos6
Summary:	The remote host is missing an update for the 'firefox'; package(s) announced via the CESA-2019:3281 advisory.
Description:	Summary: The remote host is missing an update for the 'firefox' package(s) announced via the CESA-2019:3281 advisory. Vulnerability Insight: Mozilla Firefox is an open-source web browser, designed for standards compliance, performance, and portability. This update upgrades Firefox to version 68.2.0 ESR. Security Fix(es): * Mozilla: Memory safety bugs fixed in Firefox 70 and Firefox ESR 68.2 (CVE-2019-11764) * Mozilla: Use-after-free when creating index updates in IndexedDB (CVE-2019-11757) * Mozilla: Potentially exploitable crash due to 360 Total Security (CVE-2019-11758) * Mozilla: Stack buffer overflow in HKDF output (CVE-2019-11759) * Mozilla: Stack buffer overflow in WebRTC networking (CVE-2019-11760) * Mozilla: Unintended access to a privileged JSONView object (CVE-2019-11761) * Mozilla: document.domain-based origin isolation has same-origin-property violation (CVE-2019-11762) * Mozilla: Incorrect HTML parsing results in XSS bypass technique (CVE-2019-11763) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. Affected Software/OS: 'firefox' package(s) on CentOS 6. Solution: Please install the updated package(s). CVSS Score: 6.8 CVSS Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-11757 https://security.gentoo.org/glsa/202003-10 https://usn.ubuntu.com/4335-1/ Common Vulnerability Exposure (CVE) ID: CVE-2019-11758 Common Vulnerability Exposure (CVE) ID: CVE-2019-11759 Common Vulnerability Exposure (CVE) ID: CVE-2019-11760 Common Vulnerability Exposure (CVE) ID: CVE-2019-11761 Common Vulnerability Exposure (CVE) ID: CVE-2019-11762 Common Vulnerability Exposure (CVE) ID: CVE-2019-11763 Common Vulnerability Exposure (CVE) ID: CVE-2019-11764 https://bugzilla.mozilla.org/buglist.cgi?bug_id=1558522%2C1577061%2C1548044%2C1571223%2C1573048%2C1578933%2C1575217%2C1583684%2C1586845%2C1581950%2C1583463%2C1586599
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.