Test ID:	1.3.6.1.4.1.25623.1.2.1.2025.14
Category:	General
Title:	Mozilla Firefox Security Advisory (MFSA2025-14) - Linux
Summary:	This host is missing a security update for Mozilla Firefox.
Description:	Summary: This host is missing a security update for Mozilla Firefox. Vulnerability Insight: CVE-2025-1931: Use-after-free in WebTransportChild It was possible to cause a use-after-free in the content process side of a WebTransport connection, leading to a potentially exploitable crash. CVE-2025-1932: Inconsistent comparator in XSLT sorting led to out-of-bounds access An inconsistent comparator in xslt/txNodeSorter could have resulted in potentially exploitable out-of-bounds access. Only affected version 122 and later. CVE-2025-1933: JIT corruption of WASM i32 return values on 64-bit CPUs On 64-bit CPUs, when the JIT compiles WASM i32 return values they can pick up bits from left over memory. This can potentially cause them to be treated as a different type. CVE-2025-1934: Unexpected GC during RegExp bailout processing It was possible to interrupt the processing of a RegExp bailout and run additional JavaScript, potentially triggering garbage collection when the engine was not expecting it. CVE-2025-1942: Disclosure of uninitialized memory when .toUpperCase() causes string to get longer When String.toUpperCase() caused a string to get longer it was possible for uninitialized memory to be incorporated into the result string CVE-2025-1935: Clickjacking the registerProtocolHandler info-bar A web page could trick a user into setting that site as the default handler for a custom URL protocol. CVE-2025-1936: Adding %00 and a fake extension to a jar: URL changed the interpretation of the contents jar: URLs retrieve local file ... [Please see the references for more information on the vulnerabilities] Affected Software/OS: Firefox version(s) below 136. Solution: The vendor has released an update. Please see the reference(s) for more information. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2025-1931 Common Vulnerability Exposure (CVE) ID: CVE-2025-1932 Common Vulnerability Exposure (CVE) ID: CVE-2025-1933 Common Vulnerability Exposure (CVE) ID: CVE-2025-1934 Common Vulnerability Exposure (CVE) ID: CVE-2025-1935 Common Vulnerability Exposure (CVE) ID: CVE-2025-1936 Common Vulnerability Exposure (CVE) ID: CVE-2025-1937 Common Vulnerability Exposure (CVE) ID: CVE-2025-1938 Common Vulnerability Exposure (CVE) ID: CVE-2025-1942 Common Vulnerability Exposure (CVE) ID: CVE-2025-1943
Copyright	Copyright (C) 2025 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.