Vulnerabilities > CVE-2018-5125 - Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in multiple products

047910
CVSS 8.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
HIGH
Integrity impact
HIGH
Availability impact
HIGH
network
low complexity
canonical
redhat
debian
mozilla
CWE-119
nessus

Summary

Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59.

Vulnerable Configurations

Part Description Count
OS
Canonical
4
OS
Redhat
6
OS
Debian
2
Application
Mozilla
961

Common Attack Pattern Enumeration and Classification (CAPEC)

  • Buffer Overflow via Environment Variables
    This attack pattern involves causing a buffer overflow through manipulation of environment variables. Once the attacker finds that they can modify an environment variable, they may try to overflow associated buffers. This attack leverages implicit trust often placed in environment variables.
  • Overflow Buffers
    Buffer Overflow attacks target improper or missing bounds checking on buffer operations, typically triggered by input injected by an attacker. As a consequence, an attacker is able to write past the boundaries of allocated buffer regions in memory, causing a program crash or potentially redirection of execution as per the attackers' choice.
  • Client-side Injection-induced Buffer Overflow
    This type of attack exploits a buffer overflow vulnerability in targeted client software through injection of malicious content from a custom-built hostile service.
  • Filter Failure through Buffer Overflow
    In this attack, the idea is to cause an active filter to fail by causing an oversized transaction. An attacker may try to feed overly long input strings to the program in an attempt to overwhelm the filter (by causing a buffer overflow) and hoping that the filter does not fail securely (i.e. the user input is let into the system unfiltered).
  • MIME Conversion
    An attacker exploits a weakness in the MIME conversion routine to cause a buffer overflow and gain control over the mail server machine. The MIME system is designed to allow various different information formats to be interpreted and sent via e-mail. Attack points exist when data are converted to MIME compatible format and back.

Nessus

  • NASL familyFreeBSD Local Security Checks
    NASL idFREEBSD_PKG_C71CDC953C1845B7866AAF28B59AABB5.NASL
    descriptionMozilla Foundation reports : CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList CVE-2018-5128: Use-after-free manipulating editor selection ranges CVE-2018-5129: Out-of-bounds write with malformed IPC messages CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources CVE-2018-5132: WebExtension Find API can search privileged pages CVE-2018-5133: Value of the app.support.baseURL preference is not properly sanitized CVE-2018-5134: WebExtensions may use view-source: URLs to bypass content restrictions CVE-2018-5135: WebExtension browserAction can inject scripts into unintended contexts CVE-2018-5136: Same-origin policy violation with data: URL shared workers CVE-2018-5137: Script content can access legacy extension non-contentaccessible resources CVE-2018-5138: Android Custom Tab address spoofing through long domain names CVE-2018-5140: Moz-icon images accessible to web content through moz-icon: protocol CVE-2018-5141: DOS attack through notifications Push API CVE-2018-5142: Media Capture and Streams API permissions display incorrect origin with data: and blob: URLs CVE-2018-5143: Self-XSS pasting javascript: URL with embedded tab into addressbar CVE-2018-5126: Memory safety bugs fixed in Firefox 59 CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
    last seen2020-06-01
    modified2020-06-02
    plugin id108315
    published2018-03-14
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108315
    titleFreeBSD : mozilla -- multiple vulnerabilities (c71cdc95-3c18-45b7-866a-af28b59aabb5)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from the FreeBSD VuXML database :
    #
    # Copyright 2003-2019 Jacques Vidrine and contributors
    #
    # Redistribution and use in source (VuXML) and 'compiled' forms (SGML,
    # HTML, PDF, PostScript, RTF and so forth) with or without modification,
    # are permitted provided that the following conditions are met:
    # 1. Redistributions of source code (VuXML) must retain the above
    #    copyright notice, this list of conditions and the following
    #    disclaimer as the first lines of this file unmodified.
    # 2. Redistributions in compiled form (transformed to other DTDs,
    #    published online in any format, converted to PDF, PostScript,
    #    RTF and other formats) must reproduce the above copyright
    #    notice, this list of conditions and the following disclaimer
    #    in the documentation and/or other materials provided with the
    #    distribution.
    # 
    # THIS DOCUMENTATION IS PROVIDED BY THE AUTHOR AND CONTRIBUTORS "AS IS"
    # AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO,
    # THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
    # PURPOSE ARE DISCLAIMED. IN NO EVENT SHALL THE AUTHOR OR CONTRIBUTORS
    # BE LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY,
    # OR CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT
    # OF SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR
    # BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY,
    # WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE
    # OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS DOCUMENTATION,
    # EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108315);
      script_version("1.8");
      script_cvs_date("Date: 2019/07/10 16:04:13");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5126", "CVE-2018-5127", "CVE-2018-5128", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5132", "CVE-2018-5133", "CVE-2018-5134", "CVE-2018-5135", "CVE-2018-5136", "CVE-2018-5137", "CVE-2018-5138", "CVE-2018-5140", "CVE-2018-5141", "CVE-2018-5142", "CVE-2018-5143");
    
      script_name(english:"FreeBSD : mozilla -- multiple vulnerabilities (c71cdc95-3c18-45b7-866a-af28b59aabb5)");
      script_summary(english:"Checks for updated packages in pkg_info output");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:
    "The remote FreeBSD host is missing one or more security-related
    updates."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Mozilla Foundation reports :
    
    CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList
    
    CVE-2018-5128: Use-after-free manipulating editor selection ranges
    
    CVE-2018-5129: Out-of-bounds write with malformed IPC messages
    
    CVE-2018-5130: Mismatched RTP payload type can trigger memory
    corruption
    
    CVE-2018-5131: Fetch API improperly returns cached copies of
    no-store/no-cache resources
    
    CVE-2018-5132: WebExtension Find API can search privileged pages
    
    CVE-2018-5133: Value of the app.support.baseURL preference is not
    properly sanitized
    
    CVE-2018-5134: WebExtensions may use view-source: URLs to bypass
    content restrictions
    
    CVE-2018-5135: WebExtension browserAction can inject scripts into
    unintended contexts
    
    CVE-2018-5136: Same-origin policy violation with data: URL shared
    workers
    
    CVE-2018-5137: Script content can access legacy extension
    non-contentaccessible resources
    
    CVE-2018-5138: Android Custom Tab address spoofing through long domain
    names
    
    CVE-2018-5140: Moz-icon images accessible to web content through
    moz-icon: protocol
    
    CVE-2018-5141: DOS attack through notifications Push API
    
    CVE-2018-5142: Media Capture and Streams API permissions display
    incorrect origin with data: and blob: URLs
    
    CVE-2018-5143: Self-XSS pasting javascript: URL with embedded tab into
    addressbar
    
    CVE-2018-5126: Memory safety bugs fixed in Firefox 59
    
    CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR
    52.7"
      );
      # https://www.mozilla.org/security/advisories/mfsa2018-06/
      script_set_attribute(
        attribute:"see_also",
        value:"https://www.mozilla.org/en-US/security/advisories/mfsa2018-06/"
      );
      # https://www.mozilla.org/security/advisories/mfsa2018-07/
      script_set_attribute(
        attribute:"see_also",
        value:"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/"
      );
      # https://vuxml.freebsd.org/freebsd/c71cdc95-3c18-45b7-866a-af28b59aabb5.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?ba37cbe5"
      );
      script_set_attribute(attribute:"solution", value:"Update the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:firefox");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:firefox-esr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:libxul");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:linux-firefox");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:linux-seamonkey");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:linux-thunderbird");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:seamonkey");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:thunderbird");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:freebsd:freebsd:waterfox");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:freebsd:freebsd");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/03/13");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/13");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/14");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"FreeBSD Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/FreeBSD/release", "Host/FreeBSD/pkg_info");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("freebsd_package.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/FreeBSD/release")) audit(AUDIT_OS_NOT, "FreeBSD");
    if (!get_kb_item("Host/FreeBSD/pkg_info")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    flag = 0;
    
    if (pkg_test(save_report:TRUE, pkg:"firefox<59.0_1,1")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"waterfox<56.0.4.36_3")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"seamonkey<2.49.3")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"linux-seamonkey<2.49.3")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"firefox-esr<52.7.0,1")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"linux-firefox<52.7.0,2")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"libxul<52.7.0")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"thunderbird<52.7.0")) flag++;
    if (pkg_test(save_report:TRUE, pkg:"linux-thunderbird<52.7.0")) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:pkg_report_get());
      else security_hole(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyUbuntu Local Security Checks
    NASL idUBUNTU_USN-3596-2.NASL
    descriptionUSN-3596-1 fixed vulnerabilities in Firefox. The update caused an issue where it was not possible to customize the toolbars when running Firefox in Unity. This update fixes the problem. We apologize for the inconvenience. Original advisory details : Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash or opening new tabs, escape the sandbox, bypass same-origin restrictions, obtain sensitive information, confuse the user with misleading permission requests, or execute arbitrary code. (CVE-2018-5125, CVE-2018-5126, CVE-2018-5127, CVE-2018-5128, CVE-2018-5129, CVE-2018-5130, CVE-2018-5136, CVE-2018-5137, CVE-2018-5140, CVE-2018-5141, CVE-2018-5142) It was discovered that the fetch() API could incorrectly return cached copies of no-store/no-cache resources in some circumstances. A local attacker could potentially exploit this to obtain sensitive information in environments where multiple users share a common profile. (CVE-2018-5131) Multiple security issues were discovered with WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to obtain sensitive information or bypass security restrictions. (CVE-2018-5132, CVE-2018-5134, CVE-2018-5135) It was discovered that the value of app.support.baseURL is not sanitized properly. If a malicious local application were to set this to a specially crafted value, an attacker could potentially exploit this to execute arbitrary code. (CVE-2018-5133) It was discovered that javascript: URLs with embedded tab characters could be pasted in to the addressbar. If a user were tricked in to copying a specially crafted URL in to the addressbar, an attacker could exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2018-5143). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id108949
    published2018-04-10
    reporterUbuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108949
    titleUbuntu 14.04 LTS / 16.04 LTS : firefox regression (USN-3596-2)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Ubuntu Security Notice USN-3596-2. The text 
    # itself is copyright (C) Canonical, Inc. See 
    # <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
    # trademark of Canonical, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108949);
      script_version("1.6");
      script_cvs_date("Date: 2019/09/18 12:31:48");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5126", "CVE-2018-5127", "CVE-2018-5128", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5132", "CVE-2018-5133", "CVE-2018-5134", "CVE-2018-5135", "CVE-2018-5136", "CVE-2018-5137", "CVE-2018-5140", "CVE-2018-5141", "CVE-2018-5142", "CVE-2018-5143");
      script_xref(name:"USN", value:"3596-2");
    
      script_name(english:"Ubuntu 14.04 LTS / 16.04 LTS : firefox regression (USN-3596-2)");
      script_summary(english:"Checks dpkg output for updated package.");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Ubuntu host is missing a security-related patch."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "USN-3596-1 fixed vulnerabilities in Firefox. The update caused an
    issue where it was not possible to customize the toolbars when running
    Firefox in Unity. This update fixes the problem.
    
    We apologize for the inconvenience.
    
    Original advisory details :
    
    Multiple security issues were discovered in Firefox. If a user were
    tricked in to opening a specially crafted website, an attacker could
    potentially exploit these to cause a denial of service via application
    crash or opening new tabs, escape the sandbox, bypass same-origin
    restrictions, obtain sensitive information, confuse the user with
    misleading permission requests, or execute arbitrary code.
    (CVE-2018-5125, CVE-2018-5126, CVE-2018-5127, CVE-2018-5128,
    CVE-2018-5129, CVE-2018-5130, CVE-2018-5136, CVE-2018-5137,
    CVE-2018-5140, CVE-2018-5141, CVE-2018-5142)
    
    It was discovered that the fetch() API could incorrectly
    return cached copies of no-store/no-cache resources in some
    circumstances. A local attacker could potentially exploit
    this to obtain sensitive information in environments where
    multiple users share a common profile. (CVE-2018-5131)
    
    Multiple security issues were discovered with WebExtensions.
    If a user were tricked in to installing a specially crafted
    extension, an attacker could potentially exploit these to
    obtain sensitive information or bypass security
    restrictions. (CVE-2018-5132, CVE-2018-5134, CVE-2018-5135)
    
    It was discovered that the value of app.support.baseURL is
    not sanitized properly. If a malicious local application
    were to set this to a specially crafted value, an attacker
    could potentially exploit this to execute arbitrary code.
    (CVE-2018-5133)
    
    It was discovered that javascript: URLs with embedded tab
    characters could be pasted in to the addressbar. If a user
    were tricked in to copying a specially crafted URL in to the
    addressbar, an attacker could exploit this to conduct
    cross-site scripting (XSS) attacks. (CVE-2018-5143).
    
    Note that Tenable Network Security has extracted the preceding
    description block directly from the Ubuntu security advisory. Tenable
    has attempted to automatically clean and format it as much as possible
    without introducing additional issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://usn.ubuntu.com/3596-2/"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected firefox package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:firefox");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:14.04");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:16.04");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/04/06");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/04/10");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Ubuntu Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("ubuntu.inc");
    include("misc_func.inc");
    
    if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/Ubuntu/release");
    if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu");
    release = chomp(release);
    if (! preg(pattern:"^(14\.04|16\.04)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 14.04 / 16.04", "Ubuntu " + release);
    if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu);
    
    flag = 0;
    
    if (ubuntu_check(osver:"14.04", pkgname:"firefox", pkgver:"59.0.2+build1-0ubuntu0.14.04.4")) flag++;
    if (ubuntu_check(osver:"16.04", pkgname:"firefox", pkgver:"59.0.2+build1-0ubuntu0.16.04.3")) flag++;
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_HOLE,
        extra      : ubuntu_report_get()
      );
      exit(0);
    }
    else
    {
      tested = ubuntu_pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox");
    }
    
  • NASL familyScientific Linux Local Security Checks
    NASL idSL_20180315_FIREFOX_ON_SL7_X.NASL
    descriptionThis update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145)
    last seen2020-05-31
    modified2018-03-16
    plugin id108399
    published2018-03-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108399
    titleScientific Linux Security Update : firefox on SL7.x x86_64 (20180315)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text is (C) Scientific Linux.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108399);
      script_version("1.6");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145");
    
      script_name(english:"Scientific Linux Security Update : firefox on SL7.x x86_64 (20180315)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis",
        value:
    "The remote Scientific Linux host is missing one or more security
    updates."
      );
      script_set_attribute(
        attribute:"description",
        value:
    "This update upgrades Firefox to version 52.7.0 ESR.
    
    Security Fix(es) :
    
      - Mozilla: Memory safety bugs fixed in Firefox 59 and
        Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125)
    
      - Mozilla: Buffer overflow manipulating SVG
        animatedPathSegList (MFSA 2018-07) (CVE-2018-5127)
    
      - Mozilla: Out-of-bounds write with malformed IPC messages
        (MFSA 2018-07) (CVE-2018-5129)
    
      - Mozilla: Mismatched RTP payload type can trigger memory
        corruption (MFSA 2018-07) (CVE-2018-5130)
    
      - Mozilla: Fetch API improperly returns cached copies of
        no-store/no-cache resources (MFSA 2018-07)
        (CVE-2018-5131)
    
      - Mozilla: Integer overflow during Unicode conversion
        (MFSA 2018-07) (CVE-2018-5144)
    
      - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7
        (MFSA 2018-07) (CVE-2018-5145)"
      );
      # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1803&L=scientific-linux-errata&F=&S=&P=9570
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?9d7ec040"
      );
      script_set_attribute(
        attribute:"solution",
        value:"Update the affected firefox and / or firefox-debuginfo packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:firefox");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:firefox-debuginfo");
      script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Scientific Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux");
    os_ver = pregmatch(pattern: "Scientific Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Scientific Linux");
    os_ver = os_ver[1];
    if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Scientific Linux 7.x", "Scientific Linux " + os_ver);
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu);
    if ("x86_64" >!< cpu) audit(AUDIT_ARCH_NOT, "x86_64", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"SL7", cpu:"x86_64", reference:"firefox-52.7.0-1.el7_4", allowmaj:TRUE)) flag++;
    if (rpm_check(release:"SL7", cpu:"x86_64", reference:"firefox-debuginfo-52.7.0-1.el7_4", allowmaj:TRUE)) flag++;
    
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_HOLE,
        extra      : rpm_report_get()
      );
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox / firefox-debuginfo");
    }
    
  • NASL familyOracle Linux Local Security Checks
    NASL idORACLELINUX_ELSA-2018-0526.NASL
    descriptionFrom Red Hat Security Advisory 2018:0526 : An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-05-31
    modified2018-03-16
    plugin id108393
    published2018-03-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108393
    titleOracle Linux 6 : firefox (ELSA-2018-0526)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Red Hat Security Advisory RHSA-2018:0526 and 
    # Oracle Linux Security Advisory ELSA-2018-0526 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108393);
      script_version("1.5");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145");
      script_xref(name:"RHSA", value:"2018:0526");
    
      script_name(english:"Oracle Linux 6 : firefox (ELSA-2018-0526)");
      script_summary(english:"Checks rpm output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis",
        value:"The remote Oracle Linux host is missing a security update."
      );
      script_set_attribute(
        attribute:"description",
        value:
    "From Red Hat Security Advisory 2018:0526 :
    
    An update for firefox is now available for Red Hat Enterprise Linux 6.
    
    Red Hat Product Security has rated this update as having a security
    impact of Critical. A Common Vulnerability Scoring System (CVSS) base
    score, which gives a detailed severity rating, is available for each
    vulnerability from the CVE link(s) in the References section.
    
    Mozilla Firefox is an open source web browser.
    
    This update upgrades Firefox to version 52.7.0 ESR.
    
    Security Fix(es) :
    
    * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
    (MFSA 2018-07) (CVE-2018-5125)
    
    * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA
    2018-07) (CVE-2018-5127)
    
    * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA
    2018-07) (CVE-2018-5129)
    
    * Mozilla: Mismatched RTP payload type can trigger memory corruption
    (MFSA 2018-07) (CVE-2018-5130)
    
    * Mozilla: Fetch API improperly returns cached copies of
    no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131)
    
    * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)
    (CVE-2018-5144)
    
    * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)
    (CVE-2018-5145)
    
    For more details about the security issue(s), including the impact, a
    CVSS score, acknowledgments, and other related information, refer to
    the CVE page(s) listed in the References section."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://oss.oracle.com/pipermail/el-errata/2018-March/007587.html"
      );
      script_set_attribute(
        attribute:"solution",
        value:"Update the affected firefox package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:firefox");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:6");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Oracle Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/OracleLinux")) audit(AUDIT_OS_NOT, "Oracle Linux");
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:release)) audit(AUDIT_OS_NOT, "Oracle Linux");
    os_ver = pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Oracle Linux");
    os_ver = os_ver[1];
    if (! preg(pattern:"^6([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Oracle Linux 6", "Oracle Linux " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Oracle Linux", cpu);
    
    flag = 0;
    if (rpm_check(release:"EL6", reference:"firefox-52.7.0-1.0.1.el6_9", allowmaj:TRUE)) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
      else security_hole(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox");
    }
    
  • NASL familyWindows
    NASL idMOZILLA_FIREFOX_52_7_ESR.NASL
    descriptionThe version of Mozilla Firefox ESR installed on the remote Windows host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes.
    last seen2020-06-01
    modified2020-06-02
    plugin id108376
    published2018-03-15
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108376
    titleMozilla Firefox ESR < 52.7 Multiple Vulnerabilities
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108376);
      script_version("1.4");
      script_cvs_date("Date: 2019/11/08");
    
      script_cve_id(
        "CVE-2018-5125",
        "CVE-2018-5127",
        "CVE-2018-5129",
        "CVE-2018-5130",
        "CVE-2018-5131",
        "CVE-2018-5144",
        "CVE-2018-5145"
      );
      script_xref(name:"MFSA", value:"2018-07");
    
      script_name(english:"Mozilla Firefox ESR < 52.7 Multiple Vulnerabilities");
      script_summary(english:"Checks the version of Firefox.");
    
      script_set_attribute(attribute:"synopsis", value:
    "A web browser installed on the remote Windows host is affected by
    multiple vulnerabilities.");
      script_set_attribute(attribute:"description", value:
    "The version of Mozilla Firefox ESR installed on the remote Windows
    host is prior to 52.7. It is, therefore, affected by multiple
    vulnerabilities, some of which allow code execution and potentially
    exploitable crashes.");
      script_set_attribute(attribute:"see_also", value:"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/");
      script_set_attribute(attribute:"solution", value:
    "Upgrade to Mozilla Firefox ESR version 52.7 or later.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
      script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
      script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-5145");
    
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/03/13");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/13");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/15");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/a:mozilla:firefox_esr");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_family(english:"Windows");
    
      script_copyright(english:"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
    
      script_dependencies("mozilla_org_installed.nasl");
      script_require_keys("Mozilla/Firefox/Version");
    
      exit(0);
    }
    
    include("mozilla_version.inc");
    
    port = get_kb_item("SMB/transport");
    if (!port) port = 445;
    
    installs = get_kb_list("SMB/Mozilla/Firefox/*");
    if (isnull(installs)) audit(AUDIT_NOT_INST, "Firefox");
    
    mozilla_check_version(installs:installs, product:'firefox', esr:TRUE, fix:'52.7', min:'52', severity:SECURITY_HOLE);
    
  • NASL familyUbuntu Local Security Checks
    NASL idUBUNTU_USN-3688-1.NASL
    descriptionMultiple memory safety issues were fixed in Spidermonkey. An attacker could potentially exploit these to cause a denial of service, or execute arbitrary code. Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id110622
    published2018-06-20
    reporterUbuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/110622
    titleUbuntu 17.10 / 18.04 LTS : mozjs52 vulnerabilities (USN-3688-1)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Ubuntu Security Notice USN-3688-1. The text 
    # itself is copyright (C) Canonical, Inc. See 
    # <http://www.ubuntu.com/usn/>. Ubuntu(R) is a registered 
    # trademark of Canonical, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(110622);
      script_version("1.5");
      script_cvs_date("Date: 2019/09/18 12:31:48");
    
      script_cve_id("CVE-2017-7810", "CVE-2017-7826", "CVE-2018-5089", "CVE-2018-5125", "CVE-2018-5150");
      script_xref(name:"USN", value:"3688-1");
    
      script_name(english:"Ubuntu 17.10 / 18.04 LTS : mozjs52 vulnerabilities (USN-3688-1)");
      script_summary(english:"Checks dpkg output for updated package.");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Ubuntu host is missing a security-related patch."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Multiple memory safety issues were fixed in Spidermonkey. An attacker
    could potentially exploit these to cause a denial of service, or
    execute arbitrary code.
    
    Note that Tenable Network Security has extracted the preceding
    description block directly from the Ubuntu security advisory. Tenable
    has attempted to automatically clean and format it as much as possible
    without introducing additional issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://usn.ubuntu.com/3688-1/"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected libmozjs-52-0 package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:canonical:ubuntu_linux:libmozjs-52-0");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:17.10");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:canonical:ubuntu_linux:18.04:-:lts");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/06/19");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/06/20");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Ubuntu Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/cpu", "Host/Ubuntu", "Host/Ubuntu/release", "Host/Debian/dpkg-l");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("ubuntu.inc");
    include("misc_func.inc");
    
    if ( ! get_kb_item("Host/local_checks_enabled") ) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/Ubuntu/release");
    if ( isnull(release) ) audit(AUDIT_OS_NOT, "Ubuntu");
    release = chomp(release);
    if (! preg(pattern:"^(17\.10|18\.04)$", string:release)) audit(AUDIT_OS_NOT, "Ubuntu 17.10 / 18.04", "Ubuntu " + release);
    if ( ! get_kb_item("Host/Debian/dpkg-l") ) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Ubuntu", cpu);
    
    flag = 0;
    
    if (ubuntu_check(osver:"17.10", pkgname:"libmozjs-52-0", pkgver:"52.8.1-0ubuntu0.17.10.1")) flag++;
    if (ubuntu_check(osver:"18.04", pkgname:"libmozjs-52-0", pkgver:"52.8.1-0ubuntu0.18.04.1")) flag++;
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_HOLE,
        extra      : ubuntu_report_get()
      );
      exit(0);
    }
    else
    {
      tested = ubuntu_pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "libmozjs-52-0");
    }
    
  • NASL familyCentOS Local Security Checks
    NASL idCENTOS_RHSA-2018-0648.NASL
    descriptionAn update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro
    last seen2020-05-31
    modified2018-04-10
    plugin id108899
    published2018-04-10
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108899
    titleCentOS 7 : thunderbird (CESA-2018:0648)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2018:0648 and 
    # CentOS Errata and Security Advisory 2018:0648 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108899);
      script_version("1.9");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146");
      script_xref(name:"RHSA", value:"2018:0648");
    
      script_name(english:"CentOS 7 : thunderbird (CESA-2018:0648)");
      script_summary(english:"Checks rpm output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis",
        value:"The remote CentOS host is missing a security update."
      );
      script_set_attribute(
        attribute:"description",
        value:
    "An update for thunderbird is now available for Red Hat Enterprise
    Linux 7.
    
    Red Hat Product Security has rated this update as having a security
    impact of Important. A Common Vulnerability Scoring System (CVSS) base
    score, which gives a detailed severity rating, is available for each
    vulnerability from the CVE link(s) in the References section.
    
    Mozilla Thunderbird is a standalone mail and newsgroup client.
    
    This update upgrades Thunderbird to version 52.7.0.
    
    Security Fix(es) :
    
    * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
    (MFSA 2018-07) (CVE-2018-5125)
    
    * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)
    (CVE-2018-5145)
    
    * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08)
    (CVE-2018-5146)
    
    * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA
    2018-07) (CVE-2018-5127)
    
    * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA
    2018-07) (CVE-2018-5129)
    
    * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)
    (CVE-2018-5144)
    
    For more details about the security issue(s), including the impact, a
    CVSS score, and other related information, refer to the CVE page(s)
    listed in the References section.
    
    Red Hat would like to thank the Mozilla project for reporting these
    issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian
    Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles,
    Philipp, Jet Villegas, Richard Zhu via Trend Micro's Zero Day
    Initiative, Nils, James Grant, and Root Object as the original
    reporters."
      );
      # https://lists.centos.org/pipermail/centos-announce/2018-April/022815.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?cca56faf"
      );
      script_set_attribute(
        attribute:"solution",
        value:"Update the affected thunderbird package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
      script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-5144");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:thunderbird");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/04/09");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/04/10");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"CentOS Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/CentOS/release", "Host/CentOS/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/CentOS/release");
    if (isnull(release) || "CentOS" >!< release) audit(AUDIT_OS_NOT, "CentOS");
    os_ver = pregmatch(pattern: "CentOS(?: Linux)? release ([0-9]+)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "CentOS");
    os_ver = os_ver[1];
    if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "CentOS 7.x", "CentOS " + os_ver);
    
    if (!get_kb_item("Host/CentOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "CentOS", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"CentOS-7", cpu:"x86_64", reference:"thunderbird-52.7.0-1.el7.centos", allowmaj:TRUE)) flag++;
    
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_HOLE,
        extra      : rpm_report_get()
      );
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "thunderbird");
    }
    
  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2018-313.NASL
    descriptionThis update for Mozilla Thunderbird to version 52.7 fixes multiple issues. The following bugs were fixed : - Searching message bodies of messages in local folders, including filter and quick filter operations, did not find content in message attachments - Better error handling for Yahoo accounts The following security fixes are included as part of the mozilla platform. In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671) : - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5146: Out of bounds memory write in libvorbis - CVE-2018-5125: Memory safety bugs fixed in Thunderbird 52.7 - CVE-2018-5145: Memory safety bugs fixed in Thunderbird 52.7
    last seen2020-06-05
    modified2018-03-27
    plugin id108636
    published2018-03-27
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108636
    titleopenSUSE Security Update : Mozilla Thunderbird (openSUSE-2018-313)
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from openSUSE Security Update openSUSE-2018-313.
    #
    # The text description of this plugin is (C) SUSE LLC.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108636);
      script_version("1.6");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/04");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146");
    
      script_name(english:"openSUSE Security Update : Mozilla Thunderbird (openSUSE-2018-313)");
      script_summary(english:"Check for the openSUSE-2018-313 patch");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote openSUSE host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "This update for Mozilla Thunderbird to version 52.7 fixes multiple
    issues. The following bugs were fixed :
    
      - Searching message bodies of messages in local folders,
        including filter and quick filter operations, did not
        find content in message attachments
    
      - Better error handling for Yahoo accounts The following
        security fixes are included as part of the mozilla
        platform. In general, these flaws cannot be exploited
        through email in Thunderbird because scripting is
        disabled when reading mail, but are potentially risks in
        browser or browser-like contexts (MFSA 2018-09,
        bsc#1085130, bsc#1085671) :
    
      - CVE-2018-5127: Buffer overflow manipulating SVG
        animatedPathSegList
    
      - CVE-2018-5129: Out-of-bounds write with malformed IPC
        messages
    
      - CVE-2018-5144: Integer overflow during Unicode
        conversion
    
      - CVE-2018-5146: Out of bounds memory write in libvorbis
    
      - CVE-2018-5125: Memory safety bugs fixed in Thunderbird
        52.7
    
      - CVE-2018-5145: Memory safety bugs fixed in Thunderbird
        52.7"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1085130"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1085671"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected Mozilla Thunderbird packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-buildsymbols");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-debuginfo");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-debugsource");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-devel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-translations-common");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-translations-other");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:42.3");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/26");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/27");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"SuSE Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/SuSE/release");
    if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE");
    if (release !~ "^(SUSE42\.3)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "42.3", release);
    if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    ourarch = get_kb_item("Host/cpu");
    if (!ourarch) audit(AUDIT_UNKNOWN_ARCH);
    if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch);
    
    flag = 0;
    
    if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-52.7-60.1") ) flag++;
    if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-buildsymbols-52.7-60.1") ) flag++;
    if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-debuginfo-52.7-60.1") ) flag++;
    if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-debugsource-52.7-60.1") ) flag++;
    if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-devel-52.7-60.1") ) flag++;
    if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-translations-common-52.7-60.1") ) flag++;
    if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-translations-other-52.7-60.1") ) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
      else security_hole(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "MozillaThunderbird / MozillaThunderbird-buildsymbols / etc");
    }
    
  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DLA-1308.NASL
    descriptionSeveral security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code or denial of service. For Debian 7
    last seen2020-03-17
    modified2018-03-16
    plugin id108385
    published2018-03-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108385
    titleDebian DLA-1308-1 : firefox-esr security update
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Debian Security Advisory DLA-1308-1. The text
    # itself is copyright (C) Software in the Public Interest, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108385);
      script_version("1.4");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/12");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145");
    
      script_name(english:"Debian DLA-1308-1 : firefox-esr security update");
      script_summary(english:"Checks dpkg output for the updated packages.");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Debian host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Several security issues have been found in the Mozilla Firefox web
    browser: Multiple memory safety errors and other implementation errors
    may lead to the execution of arbitrary code or denial of service.
    
    For Debian 7 'Wheezy', these problems have been fixed in version
    52.7.1esr-1~deb7u1.
    
    We recommend that you upgrade your firefox-esr packages.
    
    NOTE: Tenable Network Security has extracted the preceding description
    block directly from the DLA security advisory. Tenable has attempted
    to automatically clean and format it as much as possible without
    introducing additional issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://packages.debian.org/source/wheezy/firefox-esr"
      );
      script_set_attribute(attribute:"solution", value:"Upgrade the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-dbg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-dev");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ach");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-af");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-all");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-an");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-as");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ast");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-az");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-be");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-bg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-bn-bd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-bn-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-bs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ca");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-cs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-cy");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-da");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-de");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-dsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-el");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-en-gb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-en-za");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-eo");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-es-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-es-cl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-es-es");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-es-mx");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-et");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-eu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-fa");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ff");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-fi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-fr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-fy-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ga-ie");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-gd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-gl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-gn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-gu-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-he");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hi-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hy-am");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-id");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-is");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-it");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ja");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-kk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-km");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-kn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ko");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-lij");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-lt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-lv");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-mai");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-mk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ml");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-mr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ms");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-nb-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-nn-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-or");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-pa-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-pl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-pt-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-pt-pt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-rm");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ro");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ru");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-si");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-son");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sq");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sv-se");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ta");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-te");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-th");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-tr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-uk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-uz");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-vi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-xh");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-zh-cn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-zh-tw");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-dbg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-dev");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ach");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-af");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-all");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-an");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-as");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ast");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-az");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-be");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-bg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-bn-bd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-bn-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-bs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ca");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-cs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-cy");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-da");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-de");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-dsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-el");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-en-gb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-en-za");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-eo");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-es-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-es-cl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-es-es");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-es-mx");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-et");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-eu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-fa");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ff");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-fi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-fr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-fy-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ga-ie");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-gd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-gl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-gn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-gu-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-he");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hi-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hy-am");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-id");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-is");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-it");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ja");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-kk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-km");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-kn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ko");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-lij");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-lt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-lv");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-mai");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-mk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ml");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-mr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ms");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-nb-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-nn-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-or");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-pa-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-pl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-pt-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-pt-pt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-rm");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ro");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ru");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-si");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-son");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sq");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sv-se");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ta");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-te");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-th");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-tr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-uk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-uz");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-vi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-xh");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-zh-cn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-zh-tw");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:7.0");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Debian Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("debian_package.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
    if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    flag = 0;
    if (deb_check(release:"7.0", prefix:"firefox-esr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-dbg", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-dev", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ach", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-af", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-all", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-an", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ar", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-as", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ast", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-az", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-be", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-bg", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-bn-bd", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-bn-in", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-br", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-bs", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ca", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-cs", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-cy", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-da", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-de", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-dsb", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-el", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-en-gb", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-en-za", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-eo", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-es-ar", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-es-cl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-es-es", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-es-mx", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-et", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-eu", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-fa", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ff", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-fi", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-fr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-fy-nl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ga-ie", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-gd", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-gl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-gn", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-gu-in", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-he", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hi-in", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hsb", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hu", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hy-am", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-id", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-is", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-it", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ja", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-kk", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-km", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-kn", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ko", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-lij", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-lt", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-lv", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-mai", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-mk", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ml", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-mr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ms", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-nb-no", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-nl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-nn-no", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-or", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-pa-in", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-pl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-pt-br", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-pt-pt", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-rm", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ro", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ru", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-si", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sk", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-son", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sq", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sv-se", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ta", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-te", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-th", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-tr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-uk", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-uz", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-vi", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-xh", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-zh-cn", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-zh-tw", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-dbg", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-dev", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ach", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-af", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-all", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-an", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ar", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-as", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ast", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-az", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-be", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-bg", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-bn-bd", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-bn-in", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-br", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-bs", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ca", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-cs", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-cy", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-da", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-de", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-dsb", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-el", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-en-gb", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-en-za", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-eo", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-es-ar", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-es-cl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-es-es", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-es-mx", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-et", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-eu", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-fa", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ff", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-fi", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-fr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-fy-nl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ga-ie", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-gd", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-gl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-gn", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-gu-in", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-he", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hi-in", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hsb", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hu", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hy-am", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-id", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-is", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-it", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ja", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-kk", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-km", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-kn", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ko", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-lij", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-lt", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-lv", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-mai", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-mk", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ml", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-mr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ms", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-nb-no", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-nl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-nn-no", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-or", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-pa-in", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-pl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-pt-br", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-pt-pt", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-rm", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ro", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ru", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-si", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sk", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sl", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-son", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sq", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sv-se", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ta", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-te", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-th", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-tr", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-uk", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-uz", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-vi", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-xh", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-zh-cn", reference:"52.7.1esr-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceweasel-l10n-zh-tw", reference:"52.7.1esr-1~deb7u1")) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());
      else security_hole(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyScientific Linux Local Security Checks
    NASL idSL_20180405_THUNDERBIRD_ON_SL7_X.NASL
    descriptionThis update upgrades Thunderbird to version 52.7.0. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) - Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144)
    last seen2020-05-31
    modified2018-04-10
    plugin id108944
    published2018-04-10
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108944
    titleScientific Linux Security Update : thunderbird on SL7.x x86_64 (20180405)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text is (C) Scientific Linux.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108944);
      script_version("1.8");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146");
    
      script_name(english:"Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20180405)");
      script_summary(english:"Checks rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis",
        value:
    "The remote Scientific Linux host is missing one or more security
    updates."
      );
      script_set_attribute(
        attribute:"description",
        value:
    "This update upgrades Thunderbird to version 52.7.0.
    
    Security Fix(es) :
    
      - Mozilla: Memory safety bugs fixed in Firefox 59 and
        Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125)
    
      - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7
        (MFSA 2018-07) (CVE-2018-5145)
    
      - Mozilla: Vorbis audio processing out of bounds write
        (MFSA 2018-08) (CVE-2018-5146)
    
      - Mozilla: Buffer overflow manipulating SVG
        animatedPathSegList (MFSA 2018-07) (CVE-2018-5127)
    
      - Mozilla: Out-of-bounds write with malformed IPC messages
        (MFSA 2018-07) (CVE-2018-5129)
    
      - Mozilla: Integer overflow during Unicode conversion
        (MFSA 2018-07) (CVE-2018-5144)"
      );
      # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1804&L=scientific-linux-errata&F=&S=&P=832
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?5e98934c"
      );
      script_set_attribute(
        attribute:"solution",
        value:
    "Update the affected thunderbird and / or thunderbird-debuginfo
    packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:thunderbird");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:thunderbird-debuginfo");
      script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/04/05");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/04/10");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Scientific Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux");
    os_ver = pregmatch(pattern: "Scientific Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Scientific Linux");
    os_ver = os_ver[1];
    if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Scientific Linux 7.x", "Scientific Linux " + os_ver);
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu);
    if ("x86_64" >!< cpu) audit(AUDIT_ARCH_NOT, "x86_64", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"SL7", cpu:"x86_64", reference:"thunderbird-52.7.0-1.el7_4", allowmaj:TRUE)) flag++;
    if (rpm_check(release:"SL7", cpu:"x86_64", reference:"thunderbird-debuginfo-52.7.0-1.el7_4", allowmaj:TRUE)) flag++;
    
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_HOLE,
        extra      : rpm_report_get()
      );
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "thunderbird / thunderbird-debuginfo");
    }
    
  • NASL familyOracle Linux Local Security Checks
    NASL idORACLELINUX_ELSA-2018-0527.NASL
    descriptionFrom Red Hat Security Advisory 2018:0527 : An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-05-31
    modified2018-03-16
    plugin id108394
    published2018-03-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108394
    titleOracle Linux 7 : firefox (ELSA-2018-0527)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Red Hat Security Advisory RHSA-2018:0527 and 
    # Oracle Linux Security Advisory ELSA-2018-0527 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108394);
      script_version("1.5");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145");
      script_xref(name:"RHSA", value:"2018:0527");
    
      script_name(english:"Oracle Linux 7 : firefox (ELSA-2018-0527)");
      script_summary(english:"Checks rpm output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis",
        value:"The remote Oracle Linux host is missing a security update."
      );
      script_set_attribute(
        attribute:"description",
        value:
    "From Red Hat Security Advisory 2018:0527 :
    
    An update for firefox is now available for Red Hat Enterprise Linux 7.
    
    Red Hat Product Security has rated this update as having a security
    impact of Critical. A Common Vulnerability Scoring System (CVSS) base
    score, which gives a detailed severity rating, is available for each
    vulnerability from the CVE link(s) in the References section.
    
    Mozilla Firefox is an open source web browser.
    
    This update upgrades Firefox to version 52.7.0 ESR.
    
    Security Fix(es) :
    
    * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
    (MFSA 2018-07) (CVE-2018-5125)
    
    * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA
    2018-07) (CVE-2018-5127)
    
    * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA
    2018-07) (CVE-2018-5129)
    
    * Mozilla: Mismatched RTP payload type can trigger memory corruption
    (MFSA 2018-07) (CVE-2018-5130)
    
    * Mozilla: Fetch API improperly returns cached copies of
    no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131)
    
    * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)
    (CVE-2018-5144)
    
    * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)
    (CVE-2018-5145)
    
    For more details about the security issue(s), including the impact, a
    CVSS score, acknowledgments, and other related information, refer to
    the CVE page(s) listed in the References section."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://oss.oracle.com/pipermail/el-errata/2018-March/007586.html"
      );
      script_set_attribute(
        attribute:"solution",
        value:"Update the affected firefox package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:firefox");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:7");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Oracle Linux Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/OracleLinux")) audit(AUDIT_OS_NOT, "Oracle Linux");
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:release)) audit(AUDIT_OS_NOT, "Oracle Linux");
    os_ver = pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Oracle Linux");
    os_ver = os_ver[1];
    if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Oracle Linux 7", "Oracle Linux " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Oracle Linux", cpu);
    if ("x86_64" >!< cpu) audit(AUDIT_ARCH_NOT, "x86_64", cpu);
    
    flag = 0;
    if (rpm_check(release:"EL7", cpu:"x86_64", reference:"firefox-52.7.0-1.0.1.el7_4", allowmaj:TRUE)) flag++;
    
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get());
      else security_hole(0);
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox");
    }
    
  • NASL familyWindows
    NASL idMOZILLA_FIREFOX_59_0.NASL
    descriptionThe version of Mozilla Firefox installed on the remote Windows host is prior to 59. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes.
    last seen2020-06-01
    modified2020-06-02
    plugin id108377
    published2018-03-15
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108377
    titleMozilla Firefox < 59 Multiple Vulnerabilities
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108377);
      script_version("1.3");
      script_cvs_date("Date: 2019/11/08");
    
      script_cve_id(
        "CVE-2018-5125",
        "CVE-2018-5126",
        "CVE-2018-5127",
        "CVE-2018-5128",
        "CVE-2018-5129",
        "CVE-2018-5130",
        "CVE-2018-5131",
        "CVE-2018-5132",
        "CVE-2018-5133",
        "CVE-2018-5134",
        "CVE-2018-5135",
        "CVE-2018-5136",
        "CVE-2018-5137",
        "CVE-2018-5138",
        "CVE-2018-5140",
        "CVE-2018-5141",
        "CVE-2018-5142",
        "CVE-2018-5143"
      );
      script_xref(name:"MFSA", value:"2018-06");
    
      script_name(english:"Mozilla Firefox < 59 Multiple Vulnerabilities");
      script_summary(english:"Checks the version of Firefox.");
    
      script_set_attribute(attribute:"synopsis", value:
    "A web browser installed on the remote Windows host is affected by
    multiple vulnerabilities.");
      script_set_attribute(attribute:"description", value:
    "The version of Mozilla Firefox installed on the remote Windows host
    is prior to 59. It is, therefore, affected by multiple
    vulnerabilities, some of which allow code execution and potentially
    exploitable crashes.");
      script_set_attribute(attribute:"see_also", value:"https://www.mozilla.org/en-US/security/advisories/mfsa2018-06/");
      script_set_attribute(attribute:"solution", value:
    "Upgrade to Mozilla Firefox version 59 or later.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
      script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C");
      script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-5128");
    
      script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/03/13");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/13");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/15");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"cpe:/a:mozilla:firefox");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_family(english:"Windows");
    
      script_copyright(english:"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.");
    
      script_dependencies("mozilla_org_installed.nasl");
      script_require_keys("Mozilla/Firefox/Version");
    
      exit(0);
    }
    
    include("mozilla_version.inc");
    
    port = get_kb_item("SMB/transport");
    if (!port) port = 445;
    
    installs = get_kb_list("SMB/Mozilla/Firefox/*");
    if (isnull(installs)) audit(AUDIT_NOT_INST, "Firefox");
    
    mozilla_check_version(installs:installs, product:'firefox', fix:'59', severity:SECURITY_HOLE, xss:TRUE);
    
  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DSA-4155.NASL
    descriptionMultiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure.
    last seen2020-06-01
    modified2020-06-02
    plugin id108697
    published2018-03-29
    reporterThis script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108697
    titleDebian DSA-4155-1 : thunderbird - security update
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Debian Security Advisory DSA-4155. The text 
    # itself is copyright (C) Software in the Public Interest, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108697);
      script_version("1.7");
      script_cvs_date("Date: 2018/11/13 12:30:46");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146");
      script_xref(name:"DSA", value:"4155");
    
      script_name(english:"Debian DSA-4155-1 : thunderbird - security update");
      script_summary(english:"Checks dpkg output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Debian host is missing a security-related update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Multiple security issues have been found in Thunderbird, which may
    lead to the execution of arbitrary code, denial of service or
    information disclosure."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://security-tracker.debian.org/tracker/source-package/thunderbird"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://packages.debian.org/source/jessie/thunderbird"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://packages.debian.org/source/stretch/thunderbird"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://www.debian.org/security/2018/dsa-4155"
      );
      script_set_attribute(
        attribute:"solution", 
        value:
    "Upgrade the thunderbird packages.
    
    For the oldstable distribution (jessie), these problems have been
    fixed in version 1:52.7.0-1~deb8u1.
    
    For the stable distribution (stretch), these problems have been fixed
    in version 1:52.7.0-1~deb9u1."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:8.0");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/28");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/29");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Debian Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("debian_package.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
    if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    flag = 0;
    if (deb_check(release:"8.0", prefix:"calendar-google-provider", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-dbg", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-dev", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-all", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-ar", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-ast", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-be", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-bg", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-bn-bd", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-br", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-ca", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-cs", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-da", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-de", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-dsb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-el", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-en-gb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-es-ar", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-es-es", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-et", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-eu", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-fi", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-fr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-fy-nl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-ga-ie", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-gd", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-gl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-he", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-hr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-hsb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-hu", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-hy-am", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-id", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-is", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-it", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-ja", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-kab", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-ko", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-lt", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-nb-no", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-nl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-nn-no", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-pa-in", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-pl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-pt-br", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-pt-pt", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-rm", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-ro", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-ru", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-si", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-sk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-sl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-sq", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-sr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-sv-se", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-ta-lk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-tr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-uk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-vi", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-zh-cn", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"icedove-l10n-zh-tw", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-extension", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-ar", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-ast", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-be", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-bg", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-bn-bd", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-br", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-ca", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-cs", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-cy", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-da", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-de", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-dsb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-el", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-en-gb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-es-ar", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-es-es", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-et", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-eu", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-fi", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-fr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-fy-nl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-ga-ie", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-gd", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-gl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-he", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-hr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-hsb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-hu", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-hy-am", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-id", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-is", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-it", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-ja", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-kab", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-ko", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-lt", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-nb-no", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-nl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-nn-no", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-pa-in", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-pl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-pt-br", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-pt-pt", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-rm", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-ro", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-ru", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-si", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-sk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-sl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-sq", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-sr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-sv-se", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-ta-lk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-tr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-uk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-vi", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-zh-cn", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceowl-l10n-zh-tw", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-ar", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-ast", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-be", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-bg", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-bn-bd", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-br", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-ca", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-cs", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-cy", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-da", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-de", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-dsb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-el", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-en-gb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-es-ar", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-es-es", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-et", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-eu", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-fi", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-fr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-fy-nl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-ga-ie", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-gd", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-gl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-he", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-hr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-hsb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-hu", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-hy-am", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-id", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-is", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-it", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-ja", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-kab", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-ko", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-lt", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-nb-no", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-nl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-nn-no", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-pa-in", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-pl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-pt-br", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-pt-pt", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-rm", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-ro", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-ru", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-si", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-sk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-sl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-sq", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-sr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-sv-se", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-ta-lk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-tr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-uk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-vi", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-zh-cn", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"lightning-l10n-zh-tw", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-dbg", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-dev", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-all", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ar", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ast", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-be", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-bg", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-bn-bd", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-br", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ca", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-cs", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-da", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-de", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-dsb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-el", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-en-gb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-es-ar", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-es-es", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-et", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-eu", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-fi", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-fr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-fy-nl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ga-ie", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-gd", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-gl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-he", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-hr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-hsb", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-hu", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-hy-am", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-id", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-is", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-it", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ja", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-kab", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ko", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-lt", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-nb-no", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-nl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-nn-no", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-pa-in", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-pl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-pt-br", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-pt-pt", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-rm", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ro", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ru", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-si", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sl", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sq", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sv-se", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ta-lk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-tr", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-uk", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-vi", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-zh-cn", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"thunderbird-l10n-zh-tw", reference:"1:52.7.0-1~deb8u1")) flag++;
    if (deb_check(release:"9.0", prefix:"calendar-google-provider", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-dbg", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-dev", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-all", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-ar", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-ast", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-be", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-bg", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-bn-bd", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-br", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-ca", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-cs", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-da", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-de", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-dsb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-el", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-en-gb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-es-ar", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-es-es", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-et", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-eu", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-fi", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-fr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-fy-nl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-ga-ie", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-gd", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-gl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-he", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-hr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-hsb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-hu", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-hy-am", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-id", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-is", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-it", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-ja", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-kab", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-ko", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-lt", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-nb-no", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-nl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-nn-no", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-pa-in", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-pl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-pt-br", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-pt-pt", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-rm", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-ro", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-ru", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-si", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-sk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-sl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-sq", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-sr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-sv-se", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-ta-lk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-tr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-uk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-vi", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-zh-cn", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"icedove-l10n-zh-tw", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-extension", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-ar", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-ast", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-be", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-bg", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-bn-bd", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-br", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-ca", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-cs", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-cy", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-da", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-de", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-dsb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-el", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-en-gb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-es-ar", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-es-es", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-et", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-eu", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-fi", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-fr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-fy-nl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-ga-ie", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-gd", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-gl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-he", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-hr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-hsb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-hu", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-hy-am", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-id", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-is", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-it", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-ja", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-kab", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-ko", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-lt", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-nb-no", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-nl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-nn-no", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-pa-in", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-pl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-pt-br", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-pt-pt", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-rm", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-ro", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-ru", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-si", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-sk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-sl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-sq", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-sr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-sv-se", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-ta-lk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-tr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-uk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-vi", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-zh-cn", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceowl-l10n-zh-tw", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-ar", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-ast", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-be", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-bg", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-bn-bd", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-br", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-ca", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-cs", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-cy", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-da", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-de", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-dsb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-el", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-en-gb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-es-ar", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-es-es", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-et", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-eu", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-fi", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-fr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-fy-nl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-ga-ie", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-gd", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-gl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-he", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-hr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-hsb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-hu", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-hy-am", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-id", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-is", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-it", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-ja", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-kab", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-ko", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-lt", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-nb-no", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-nl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-nn-no", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-pa-in", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-pl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-pt-br", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-pt-pt", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-rm", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-ro", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-ru", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-si", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-sk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-sl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-sq", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-sr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-sv-se", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-ta-lk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-tr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-uk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-vi", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-zh-cn", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"lightning-l10n-zh-tw", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-dbg", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-dev", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-all", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ar", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ast", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-be", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-bg", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-bn-bd", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-br", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ca", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-cs", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-da", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-de", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-dsb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-el", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-en-gb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-es-ar", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-es-es", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-et", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-eu", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-fi", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-fr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-fy-nl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ga-ie", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-gd", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-gl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-he", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-hr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-hsb", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-hu", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-hy-am", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-id", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-is", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-it", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ja", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-kab", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ko", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-lt", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-nb-no", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-nl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-nn-no", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-pa-in", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-pl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-pt-br", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-pt-pt", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-rm", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ro", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ru", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-si", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sl", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sq", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sv-se", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ta-lk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-tr", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-uk", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-vi", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-zh-cn", reference:"1:52.7.0-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"thunderbird-l10n-zh-tw", reference:"1:52.7.0-1~deb9u1")) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());
      else security_hole(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-0527.NASL
    descriptionAn update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-05-31
    modified2018-03-16
    plugin id108397
    published2018-03-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108397
    titleRHEL 7 : firefox (RHSA-2018:0527)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2018:0527. The text 
    # itself is copyright (C) Red Hat, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108397);
      script_version("1.10");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145");
      script_xref(name:"RHSA", value:"2018:0527");
    
      script_name(english:"RHEL 7 : firefox (RHSA-2018:0527)");
      script_summary(english:"Checks the rpm output for the updated packages");
    
      script_set_attribute(
        attribute:"synopsis",
        value:"The remote Red Hat host is missing one or more security updates."
      );
      script_set_attribute(
        attribute:"description",
        value:
    "An update for firefox is now available for Red Hat Enterprise Linux 7.
    
    Red Hat Product Security has rated this update as having a security
    impact of Critical. A Common Vulnerability Scoring System (CVSS) base
    score, which gives a detailed severity rating, is available for each
    vulnerability from the CVE link(s) in the References section.
    
    Mozilla Firefox is an open source web browser.
    
    This update upgrades Firefox to version 52.7.0 ESR.
    
    Security Fix(es) :
    
    * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
    (MFSA 2018-07) (CVE-2018-5125)
    
    * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA
    2018-07) (CVE-2018-5127)
    
    * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA
    2018-07) (CVE-2018-5129)
    
    * Mozilla: Mismatched RTP payload type can trigger memory corruption
    (MFSA 2018-07) (CVE-2018-5130)
    
    * Mozilla: Fetch API improperly returns cached copies of
    no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131)
    
    * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)
    (CVE-2018-5144)
    
    * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)
    (CVE-2018-5145)
    
    For more details about the security issue(s), including the impact, a
    CVSS score, acknowledgments, and other related information, refer to
    the CVE page(s) listed in the References section."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/errata/RHSA-2018:0527"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2018-5125"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2018-5127"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2018-5129"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2018-5130"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2018-5131"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2018-5144"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://access.redhat.com/security/cve/cve-2018-5145"
      );
      script_set_attribute(
        attribute:"solution",
        value:"Update the affected firefox and / or firefox-debuginfo packages."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:firefox");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:firefox-debuginfo");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7.4");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7.5");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7.6");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7.7");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Red Hat Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("misc_func.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/RedHat/release");
    if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat");
    os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat");
    os_ver = os_ver[1];
    if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 7.x", "Red Hat " + os_ver);
    
    if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu);
    
    yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo");
    if (!empty_or_null(yum_updateinfo)) 
    {
      rhsa = "RHSA-2018:0527";
      yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa);
      if (!empty_or_null(yum_report))
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : yum_report 
        );
        exit(0);
      }
      else
      {
        audit_message = "affected by Red Hat security advisory " + rhsa;
        audit(AUDIT_OS_NOT, audit_message);
      }
    }
    else
    {
      flag = 0;
      if (rpm_check(release:"RHEL7", reference:"firefox-52.7.0-1.el7_4", allowmaj:TRUE)) flag++;
    
      if (rpm_check(release:"RHEL7", reference:"firefox-debuginfo-52.7.0-1.el7_4", allowmaj:TRUE)) flag++;
    
    
      if (flag)
      {
        security_report_v4(
          port       : 0,
          severity   : SECURITY_HOLE,
          extra      : rpm_report_get() + redhat_report_package_caveat()
        );
        exit(0);
      }
      else
      {
        tested = pkg_tests_get();
        if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
        else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox / firefox-debuginfo");
      }
    }
    
  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DLA-1327.NASL
    descriptionMultiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure. For Debian 7
    last seen2020-03-17
    modified2018-03-30
    plugin id108727
    published2018-03-30
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108727
    titleDebian DLA-1327-1 : thunderbird security update
    code
    #%NASL_MIN_LEVEL 80502
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were
    # extracted from Debian Security Advisory DLA-1327-1. The text
    # itself is copyright (C) Software in the Public Interest, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108727);
      script_version("1.6");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/12");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146");
    
      script_name(english:"Debian DLA-1327-1 : thunderbird security update");
      script_summary(english:"Checks dpkg output for the updated packages.");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Debian host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Multiple security issues have been found in Thunderbird, which may
    lead to the execution of arbitrary code, denial of service or
    information disclosure.
    
    For Debian 7 'Wheezy', these problems have been fixed in version
    1:52.7.0-1~deb7u1.
    
    We recommend that you upgrade your thunderbird packages.
    
    NOTE: Tenable Network Security has extracted the preceding description
    block directly from the DLA security advisory. Tenable has attempted
    to automatically clean and format it as much as possible without
    introducing additional issues."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://packages.debian.org/source/wheezy/thunderbird"
      );
      script_set_attribute(attribute:"solution", value:"Upgrade the affected packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:calendar-google-provider");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-dbg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-dev");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-all");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ast");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-be");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-bg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-bn-bd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ca");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-cs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-da");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-de");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-dsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-el");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-en-gb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-es-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-es-es");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-et");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-eu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-fi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-fr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-fy-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ga-ie");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-gd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-gl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-he");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-hr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-hsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-hu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-hy-am");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-id");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-is");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-it");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ja");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-kab");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ko");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-lt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-nb-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-nn-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-pa-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-pl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-pt-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-pt-pt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-rm");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ro");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ru");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-si");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sq");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sv-se");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ta-lk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-tr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-uk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-vi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-zh-cn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-zh-tw");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-extension");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ast");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-be");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-bg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-bn-bd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ca");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-cs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-cy");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-da");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-de");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-dsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-el");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-en-gb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-es-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-es-es");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-et");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-eu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-fi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-fr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-fy-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ga-ie");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-gd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-gl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-he");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-hr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-hsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-hu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-hy-am");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-id");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-is");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-it");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ja");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-kab");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ko");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-lt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-nb-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-nn-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-pa-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-pl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-pt-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-pt-pt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-rm");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ro");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ru");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-si");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sq");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sv-se");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ta-lk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-tr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-uk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-vi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-zh-cn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-zh-tw");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ast");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-be");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-bg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-bn-bd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ca");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-cs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-cy");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-da");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-de");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-dsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-el");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-en-gb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-es-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-es-es");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-et");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-eu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-fi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-fr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-fy-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ga-ie");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-gd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-gl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-he");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-hr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-hsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-hu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-hy-am");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-id");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-is");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-it");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ja");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-kab");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ko");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-lt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-nb-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-nn-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-pa-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-pl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-pt-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-pt-pt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-rm");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ro");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ru");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-si");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sq");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sv-se");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ta-lk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-tr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-uk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-vi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-zh-cn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-zh-tw");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-dbg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-dev");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-all");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ast");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-be");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-bg");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-bn-bd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ca");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-cs");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-da");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-de");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-dsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-el");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-en-gb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-ar");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-es");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-et");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-eu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fy-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ga-ie");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-gd");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-gl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-he");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hsb");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hu");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hy-am");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-id");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-is");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-it");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ja");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-kab");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ko");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-lt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nb-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nn-no");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pa-in");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-br");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-pt");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-rm");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ro");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ru");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-si");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sl");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sq");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sv-se");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ta-lk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-tr");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-uk");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-vi");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-cn");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-tw");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:7.0");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/29");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/30");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Debian Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("debian_package.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
    if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    flag = 0;
    if (deb_check(release:"7.0", prefix:"calendar-google-provider", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-dbg", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-dev", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-all", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-ar", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-ast", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-be", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-bg", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-bn-bd", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-br", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-ca", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-cs", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-da", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-de", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-dsb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-el", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-en-gb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-es-ar", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-es-es", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-et", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-eu", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-fi", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-fr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-fy-nl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-ga-ie", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-gd", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-gl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-he", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-hr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-hsb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-hu", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-hy-am", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-id", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-is", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-it", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-ja", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-kab", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-ko", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-lt", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-nb-no", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-nl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-nn-no", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-pa-in", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-pl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-pt-br", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-pt-pt", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-rm", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-ro", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-ru", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-si", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-sk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-sl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-sq", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-sr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-sv-se", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-ta-lk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-tr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-uk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-vi", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-zh-cn", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"icedove-l10n-zh-tw", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-extension", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-ar", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-ast", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-be", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-bg", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-bn-bd", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-br", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-ca", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-cs", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-cy", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-da", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-de", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-dsb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-el", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-en-gb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-es-ar", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-es-es", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-et", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-eu", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-fi", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-fr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-fy-nl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-ga-ie", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-gd", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-gl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-he", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-hr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-hsb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-hu", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-hy-am", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-id", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-is", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-it", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-ja", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-kab", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-ko", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-lt", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-nb-no", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-nl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-nn-no", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-pa-in", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-pl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-pt-br", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-pt-pt", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-rm", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-ro", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-ru", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-si", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-sk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-sl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-sq", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-sr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-sv-se", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-ta-lk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-tr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-uk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-vi", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-zh-cn", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"iceowl-l10n-zh-tw", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-ar", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-ast", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-be", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-bg", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-bn-bd", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-br", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-ca", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-cs", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-cy", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-da", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-de", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-dsb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-el", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-en-gb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-es-ar", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-es-es", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-et", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-eu", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-fi", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-fr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-fy-nl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-ga-ie", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-gd", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-gl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-he", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-hr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-hsb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-hu", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-hy-am", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-id", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-is", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-it", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-ja", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-kab", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-ko", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-lt", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-nb-no", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-nl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-nn-no", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-pa-in", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-pl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-pt-br", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-pt-pt", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-rm", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-ro", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-ru", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-si", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-sk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-sl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-sq", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-sr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-sv-se", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-ta-lk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-tr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-uk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-vi", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-zh-cn", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"lightning-l10n-zh-tw", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-dbg", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-dev", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-all", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ar", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ast", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-be", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-bg", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-bn-bd", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-br", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ca", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-cs", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-da", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-de", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-dsb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-el", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-en-gb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-es-ar", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-es-es", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-et", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-eu", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-fi", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-fr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-fy-nl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ga-ie", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-gd", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-gl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-he", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-hr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-hsb", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-hu", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-hy-am", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-id", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-is", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-it", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ja", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-kab", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ko", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-lt", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-nb-no", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-nl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-nn-no", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-pa-in", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-pl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-pt-br", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-pt-pt", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-rm", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ro", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ru", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-si", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sl", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sq", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sv-se", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ta-lk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-tr", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-uk", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-vi", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-zh-cn", reference:"1:52.7.0-1~deb7u1")) flag++;
    if (deb_check(release:"7.0", prefix:"thunderbird-l10n-zh-tw", reference:"1:52.7.0-1~deb7u1")) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());
      else security_hole(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyCentOS Local Security Checks
    NASL idCENTOS_RHSA-2018-0526.NASL
    descriptionAn update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id108383
    published2018-03-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108383
    titleCentOS 6 : firefox (CESA-2018:0526)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Red Hat Security Advisory RHSA-2018:0526 and 
    # CentOS Errata and Security Advisory 2018:0526 respectively.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108383);
      script_version("1.7");
      script_cvs_date("Date: 2020/02/18");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145");
      script_xref(name:"RHSA", value:"2018:0526");
    
      script_name(english:"CentOS 6 : firefox (CESA-2018:0526)");
      script_summary(english:"Checks rpm output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote CentOS host is missing a security update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "An update for firefox is now available for Red Hat Enterprise Linux 6.
    
    Red Hat Product Security has rated this update as having a security
    impact of Critical. A Common Vulnerability Scoring System (CVSS) base
    score, which gives a detailed severity rating, is available for each
    vulnerability from the CVE link(s) in the References section.
    
    Mozilla Firefox is an open source web browser.
    
    This update upgrades Firefox to version 52.7.0 ESR.
    
    Security Fix(es) :
    
    * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
    (MFSA 2018-07) (CVE-2018-5125)
    
    * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA
    2018-07) (CVE-2018-5127)
    
    * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA
    2018-07) (CVE-2018-5129)
    
    * Mozilla: Mismatched RTP payload type can trigger memory corruption
    (MFSA 2018-07) (CVE-2018-5130)
    
    * Mozilla: Fetch API improperly returns cached copies of
    no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131)
    
    * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07)
    (CVE-2018-5144)
    
    * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07)
    (CVE-2018-5145)
    
    For more details about the security issue(s), including the impact, a
    CVSS score, acknowledgments, and other related information, refer to
    the CVE page(s) listed in the References section."
      );
      # https://lists.centos.org/pipermail/centos-announce/2018-March/022803.html
      script_set_attribute(
        attribute:"see_also",
        value:"http://www.nessus.org/u?ba9f9518"
      );
      script_set_attribute(
        attribute:"solution", 
        value:"Update the affected firefox package."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
      script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-5144");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:firefox");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:6");
    
      script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11");
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"CentOS Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/CentOS/release", "Host/CentOS/rpm-list");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    release = get_kb_item("Host/CentOS/release");
    if (isnull(release) || "CentOS" >!< release) audit(AUDIT_OS_NOT, "CentOS");
    os_ver = pregmatch(pattern: "CentOS(?: Linux)? release ([0-9]+)", string:release);
    if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "CentOS");
    os_ver = os_ver[1];
    if (! preg(pattern:"^6([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "CentOS 6.x", "CentOS " + os_ver);
    
    if (!get_kb_item("Host/CentOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "CentOS", cpu);
    
    
    flag = 0;
    if (rpm_check(release:"CentOS-6", reference:"firefox-52.7.0-1.el6.centos", allowmaj:TRUE)) flag++;
    
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_HOLE,
        extra      : rpm_report_get()
      );
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox");
    }
    
  • NASL familyDebian Local Security Checks
    NASL idDEBIAN_DSA-4139.NASL
    descriptionSeveral security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code, denial of service or information disclosure.
    last seen2020-06-01
    modified2020-06-02
    plugin id108387
    published2018-03-16
    reporterThis script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108387
    titleDebian DSA-4139-1 : firefox-esr - security update
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    # The descriptive text and package checks in this plugin were  
    # extracted from Debian Security Advisory DSA-4139. The text 
    # itself is copyright (C) Software in the Public Interest, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(108387);
      script_version("1.5");
      script_cvs_date("Date: 2018/11/13 12:30:46");
    
      script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145");
      script_xref(name:"DSA", value:"4139");
    
      script_name(english:"Debian DSA-4139-1 : firefox-esr - security update");
      script_summary(english:"Checks dpkg output for the updated package");
    
      script_set_attribute(
        attribute:"synopsis", 
        value:"The remote Debian host is missing a security-related update."
      );
      script_set_attribute(
        attribute:"description", 
        value:
    "Several security issues have been found in the Mozilla Firefox web
    browser: Multiple memory safety errors and other implementation errors
    may lead to the execution of arbitrary code, denial of service or
    information disclosure."
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://security-tracker.debian.org/tracker/source-package/firefox-esr"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://packages.debian.org/source/jessie/firefox-esr"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://packages.debian.org/source/stretch/firefox-esr"
      );
      script_set_attribute(
        attribute:"see_also",
        value:"https://www.debian.org/security/2018/dsa-4139"
      );
      script_set_attribute(
        attribute:"solution", 
        value:
    "Upgrade the firefox-esr packages.
    
    For the oldstable distribution (jessie), these problems have been
    fixed in version 52.7.1esr-1~deb8u1.
    
    For the stable distribution (stretch), these problems have been fixed
    in version 52.7.1esr-1~deb9u1."
      );
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:8.0");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_copyright(english:"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof.");
      script_family(english:"Debian Local Security Checks");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l");
    
      exit(0);
    }
    
    
    include("audit.inc");
    include("debian_package.inc");
    
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian");
    if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    
    flag = 0;
    if (deb_check(release:"8.0", prefix:"firefox-esr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-dbg", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-dev", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ach", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-af", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-all", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-an", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ar", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-as", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ast", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-az", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-be", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-bg", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-bn-bd", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-bn-in", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-br", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-bs", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ca", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-cs", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-cy", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-da", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-de", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-dsb", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-el", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-en-gb", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-en-za", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-eo", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-es-ar", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-es-cl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-es-es", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-es-mx", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-et", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-eu", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-fa", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ff", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-fi", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-fr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-fy-nl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ga-ie", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-gd", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-gl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-gn", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-gu-in", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-he", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hi-in", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hsb", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hu", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hy-am", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-id", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-is", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-it", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ja", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-kk", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-km", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-kn", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ko", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-lij", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-lt", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-lv", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-mai", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-mk", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ml", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-mr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ms", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-nb-no", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-nl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-nn-no", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-or", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-pa-in", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-pl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-pt-br", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-pt-pt", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-rm", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ro", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ru", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-si", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sk", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-son", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sq", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sv-se", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ta", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-te", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-th", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-tr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-uk", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-uz", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-vi", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-xh", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-zh-cn", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-zh-tw", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-dbg", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-dev", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ach", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-af", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-all", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-an", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ar", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-as", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ast", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-az", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-be", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-bg", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-bn-bd", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-bn-in", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-br", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-bs", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ca", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-cs", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-cy", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-da", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-de", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-dsb", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-el", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-en-gb", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-en-za", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-eo", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-es-ar", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-es-cl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-es-es", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-es-mx", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-et", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-eu", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-fa", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ff", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-fi", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-fr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-fy-nl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ga-ie", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-gd", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-gl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-gn", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-gu-in", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-he", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hi-in", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hsb", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hu", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hy-am", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-id", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-is", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-it", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ja", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-kk", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-km", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-kn", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ko", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-lij", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-lt", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-lv", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-mai", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-mk", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ml", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-mr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ms", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-nb-no", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-nl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-nn-no", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-or", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-pa-in", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-pl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-pt-br", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-pt-pt", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-rm", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ro", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ru", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-si", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sk", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sl", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-son", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sq", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sv-se", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ta", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-te", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-th", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-tr", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-uk", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-uz", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-vi", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-xh", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-zh-cn", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"8.0", prefix:"iceweasel-l10n-zh-tw", reference:"52.7.1esr-1~deb8u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-dev", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ach", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-af", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-all", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-an", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ar", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-as", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ast", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-az", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-bg", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-bn-bd", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-bn-in", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-br", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-bs", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ca", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-cak", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-cs", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-cy", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-da", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-de", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-dsb", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-el", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-en-gb", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-en-za", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-eo", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-es-ar", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-es-cl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-es-es", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-es-mx", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-et", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-eu", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-fa", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ff", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-fi", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-fr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-fy-nl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ga-ie", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-gd", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-gl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-gn", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-gu-in", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-he", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hi-in", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hsb", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hu", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hy-am", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-id", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-is", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-it", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ja", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ka", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-kab", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-kk", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-km", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-kn", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ko", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-lij", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-lt", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-lv", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-mai", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-mk", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ml", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-mr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ms", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-nb-no", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-nl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-nn-no", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-or", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-pa-in", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-pl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-pt-br", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-pt-pt", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-rm", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ro", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ru", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-si", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sk", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-son", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sq", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sv-se", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ta", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-te", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-th", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-tr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-uk", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-uz", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-vi", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-xh", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-zh-cn", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-zh-tw", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-dev", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ach", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-af", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-all", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-an", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ar", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-as", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ast", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-az", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-bg", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-bn-bd", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-bn-in", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-br", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-bs", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ca", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-cak", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-cs", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-cy", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-da", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-de", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-dsb", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-el", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-en-gb", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-en-za", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-eo", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-es-ar", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-es-cl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-es-es", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-es-mx", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-et", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-eu", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-fa", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ff", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-fi", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-fr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-fy-nl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ga-ie", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-gd", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-gl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-gn", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-gu-in", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-he", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hi-in", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hsb", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hu", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hy-am", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-id", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-is", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-it", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ja", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ka", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-kab", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-kk", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-km", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-kn", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ko", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-lij", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-lt", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-lv", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-mai", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-mk", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ml", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-mr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ms", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-nb-no", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-nl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-nn-no", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-or", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-pa-in", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-pl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-pt-br", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-pt-pt", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-rm", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ro", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ru", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-si", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sk", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sl", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-son", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sq", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sv-se", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ta", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-te", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-th", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-tr", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-uk", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-uz", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-vi", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-xh", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-zh-cn", reference:"52.7.1esr-1~deb9u1")) flag++;
    if (deb_check(release:"9.0", prefix:"iceweasel-l10n-zh-tw", reference:"52.7.1esr-1~deb9u1")) flag++;
    
    if (flag)
    {
      if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get());
      else security_hole(0);
      exit(0);
    }
    else audit(AUDIT_HOST_NOT, "affected");
    
  • NASL familyHuawei Local Security Checks
    NASL idEULEROS_SA-2018-1118.NASL
    descriptionAccording to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code.(CVE-2018-5146) - Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) - Use-after-free in compositor potentially allows code execution (CVE-2018-5148) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-05-08
    modified2018-05-02
    plugin id109516
    published2018-05-02
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109516
    titleEulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1118)
    code
    #
    # (C) Tenable Network Security, Inc.
    #
    
    include("compat.inc");
    
    if (description)
    {
      script_id(109516);
      script_version("1.35");
      script_set_attribute(attribute:"plugin_modification_date", value:"2020/07/14");
    
      script_cve_id(
        "CVE-2018-5125",
        "CVE-2018-5127",
        "CVE-2018-5129",
        "CVE-2018-5130",
        "CVE-2018-5131",
        "CVE-2018-5144",
        "CVE-2018-5145",
        "CVE-2018-5146",
        "CVE-2018-5148"
      );
    
      script_name(english:"EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1118)");
      script_summary(english:"Checks the rpm output for the updated packages.");
    
      script_set_attribute(attribute:"synopsis", value:
    "The remote EulerOS host is missing multiple security updates.");
      script_set_attribute(attribute:"description", value:
    "According to the versions of the firefox package installed, the
    EulerOS installation on the remote host is affected by the following
    vulnerabilities :
    
      - An out of bounds write flaw was found in the processing
        of vorbis audio data. A maliciously crafted file or
        audio stream could cause the application to crash or,
        potentially, execute arbitrary code.(CVE-2018-5146)
    
      - Memory safety bugs fixed in Firefox 59 and Firefox ESR
        52.7 (MFSA 2018-07) (CVE-2018-5125)
    
      - Buffer overflow manipulating SVG animatedPathSegList
        (MFSA 2018-07) (CVE-2018-5127)
    
      - Out-of-bounds write with malformed IPC messages (MFSA
        2018-07) (CVE-2018-5129)
    
      - Mismatched RTP payload type can trigger memory
        corruption (MFSA 2018-07) (CVE-2018-5130)
    
      - Fetch API improperly returns cached copies of
        no-store/no-cache resources (MFSA 2018-07)
        (CVE-2018-5131)
    
      - Integer overflow during Unicode conversion (MFSA
        2018-07) (CVE-2018-5144)
    
      - Memory safety bugs fixed in Firefox ESR 52.7 (MFSA
        2018-07) (CVE-2018-5145)
    
      - Use-after-free in compositor potentially allows code
        execution (CVE-2018-5148)
    
    Note that Tenable Network Security has extracted the preceding
    description block directly from the EulerOS security advisory. Tenable
    has attempted to automatically clean and format it as much as possible
    without introducing additional issues.");
      # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1118
      script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?0693c9c0");
      script_set_attribute(attribute:"solution", value:
    "Update the affected firefox packages.");
      script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P");
      script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H");
    
      script_set_attribute(attribute:"patch_publication_date", value:"2018/04/25");
      script_set_attribute(attribute:"plugin_publication_date", value:"2018/05/02");
    
      script_set_attribute(attribute:"plugin_type", value:"local");
      script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:firefox");
      script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:2.0");
      script_set_attribute(attribute:"generated_plugin", value:"current");
      script_end_attributes();
    
      script_category(ACT_GATHER_INFO);
      script_family(english:"Huawei Local Security Checks");
    
      script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.");
    
      script_dependencies("ssh_get_info.nasl");
      script_require_keys("Host/local_checks_enabled", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/sp");
      script_exclude_keys("Host/EulerOS/uvp_version");
    
      exit(0);
    }
    
    include("audit.inc");
    include("global_settings.inc");
    include("rpm.inc");
    
    if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
    
    release = get_kb_item("Host/EulerOS/release");
    if (isnull(release) || release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS");
    if (release !~ "^EulerOS release 2\.0(\D|$)") audit(AUDIT_OS_NOT, "EulerOS 2.0");
    
    sp = get_kb_item("Host/EulerOS/sp");
    if (isnull(sp) || sp !~ "^(2)$") audit(AUDIT_OS_NOT, "EulerOS 2.0 SP2");
    
    uvp = get_kb_item("Host/EulerOS/uvp_version");
    if (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, "EulerOS 2.0 SP2", "EulerOS UVP " + uvp);
    
    if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING);
    
    cpu = get_kb_item("Host/cpu");
    if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu);
    if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_ARCH_NOT, "i686 / x86_64", cpu);
    
    flag = 0;
    
    pkgs = ["firefox-52.7.3-1.h2"];
    
    foreach (pkg in pkgs)
      if (rpm_check(release:"EulerOS-2.0", sp:"2", reference:pkg, allowmaj:TRUE)) flag++;
    
    if (flag)
    {
      security_report_v4(
        port       : 0,
        severity   : SECURITY_HOLE,
        extra      : rpm_report_get()
      );
      exit(0);
    }
    else
    {
      tested = pkg_tests_get();
      if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested);
      else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox");
    }
    
  • NASL familyHuawei Local Security Checks
    NASL idEULEROS_SA-2018-1117.NASL
    descriptionAccording to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code.(CVE-2018-5146) - Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-03
    modified2018-05-02
    plugin id109515
    published2018-05-02
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109515
    titleEulerOS 2.0 SP1 : firefox (EulerOS-SA-2018-1117)
  • NASL familyNewStart CGSL Local Security Checks
    NASL idNEWSTART_CGSL_NS-SA-2019-0124_FIREFOX.NASL
    descriptionThe remote NewStart CGSL host, running version MAIN 4.05, has firefox packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5125) - A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5127) - A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5129) - When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59. (CVE-2018-5130) - Under certain circumstances the fetch() API can return transient local copies of resources that were sent with a no-store or no-cache cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessible to users if they share a common profile while browsing. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59. (CVE-2018-5131) - An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5144) - Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5145) - Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5089) - A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58. (CVE-2018-5091) - An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5095) - A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Thunderbird < 52.6. (CVE-2018-5096) - A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5097) - A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5098) - A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5099) - A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5102) - A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5103) - A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5104) - If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different site than the one loaded. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5117) - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code. (CVE-2018-5146) Note that Nessus has not tested for this issue but has instead relied only on the application
    last seen2020-06-01
    modified2020-06-02
    plugin id127371
    published2019-08-12
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/127371
    titleNewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0124)
  • NASL familyUbuntu Local Security Checks
    NASL idUBUNTU_USN-3596-1.NASL
    descriptionMultiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash or opening new tabs, escape the sandbox, bypass same-origin restrictions, obtain sensitive information, confuse the user with misleading permission requests, or execute arbitrary code. (CVE-2018-5125, CVE-2018-5126, CVE-2018-5127, CVE-2018-5128, CVE-2018-5129, CVE-2018-5130, CVE-2018-5136, CVE-2018-5137, CVE-2018-5140, CVE-2018-5141, CVE-2018-5142) It was discovered that the fetch() API could incorrectly return cached copies of no-store/no-cache resources in some circumstances. A local attacker could potentially exploit this to obtain sensitive information in environments where multiple users share a common profile. (CVE-2018-5131) Multiple security issues were discovered with WebExtensions. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to obtain sensitive information or bypass security restrictions. (CVE-2018-5132, CVE-2018-5134, CVE-2018-5135) It was discovered that the value of app.support.baseURL is not sanitized properly. If a malicious local application were to set this to a specially crafted value, an attacker could potentially exploit this to execute arbitrary code. (CVE-2018-5133) It was discovered that javascript: URLs with embedded tab characters could be pasted in to the addressbar. If a user were tricked in to copying a specially crafted URL in to the addressbar, an attacker could exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2018-5143). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id108370
    published2018-03-15
    reporterUbuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108370
    titleUbuntu 14.04 LTS / 16.04 LTS / 17.10 : firefox vulnerabilities (USN-3596-1)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-0648.NASL
    descriptionAn update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro
    last seen2020-05-31
    modified2018-04-06
    plugin id108868
    published2018-04-06
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108868
    titleRHEL 7 : thunderbird (RHSA-2018:0648)
  • NASL familyGentoo Local Security Checks
    NASL idGENTOO_GLSA-201811-13.NASL
    descriptionThe remote host is affected by the vulnerability described in GLSA-201811-13 (Mozilla Thunderbird: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the referenced Mozilla Foundation Security Advisories and CVE identifiers below for details. Impact : A remote attacker may be able to execute arbitrary code, cause a Denial of Service condition, obtain sensitive information, or conduct Cross-Site Request Forgery (CSRF). Workaround : There is no known workaround at this time.
    last seen2020-06-01
    modified2020-06-02
    plugin id119133
    published2018-11-26
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/119133
    titleGLSA-201811-13 : Mozilla Thunderbird: Multiple vulnerabilities
  • NASL familyCentOS Local Security Checks
    NASL idCENTOS_RHSA-2018-0647.NASL
    descriptionAn update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro
    last seen2020-05-31
    modified2018-04-10
    plugin id108898
    published2018-04-10
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108898
    titleCentOS 6 : thunderbird (CESA-2018:0647)
  • NASL familyScientific Linux Local Security Checks
    NASL idSL_20180315_FIREFOX_ON_SL6_X.NASL
    descriptionThis update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145)
    last seen2020-05-31
    modified2018-03-16
    plugin id108398
    published2018-03-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108398
    titleScientific Linux Security Update : firefox on SL6.x i386/x86_64 (20180315)
  • NASL familyGentoo Local Security Checks
    NASL idGENTOO_GLSA-201810-01.NASL
    descriptionThe remote host is affected by the vulnerability described in GLSA-201810-01 (Mozilla Firefox: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the referenced CVE identifiers for details. Impact : A remote attacker could entice a user to view a specially crafted web page, possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to perform Man-in-the-Middle attacks, obtain sensitive information, spoof the address bar, conduct clickjacking attacks, bypass security restrictions and protection mechanisms, or have other unspecified impact. Workaround : There is no known workaround at this time.
    last seen2020-06-01
    modified2020-06-02
    plugin id117894
    published2018-10-03
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/117894
    titleGLSA-201810-01 : Mozilla Firefox: Multiple vulnerabilities
  • NASL familyMacOS X Local Security Checks
    NASL idMACOSX_FIREFOX_59_0.NASL
    descriptionThe version of Mozilla Firefox installed on the remote macOS or Mac OS X host is prior to 59. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes.
    last seen2020-06-01
    modified2020-06-02
    plugin id108375
    published2018-03-15
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108375
    titleMozilla Firefox < 59 Multiple Vulnerabilities (macOS)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-0526.NASL
    descriptionAn update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-05-31
    modified2018-03-16
    plugin id108396
    published2018-03-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108396
    titleRHEL 6 : firefox (RHSA-2018:0526)
  • NASL familyScientific Linux Local Security Checks
    NASL idSL_20180405_THUNDERBIRD_ON_SL6_X.NASL
    descriptionThis update upgrades Thunderbird to version 52.7.0. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) - Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144)
    last seen2020-05-31
    modified2018-04-10
    plugin id108943
    published2018-04-10
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108943
    titleScientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20180405)
  • NASL familySuSE Local Security Checks
    NASL idSUSE_SU-2018-0907-1.NASL
    descriptionThis update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130) : - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption - CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7 - CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671) - CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671) - CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id109000
    published2018-04-11
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/109000
    titleSUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:0907-1)
  • NASL familyNewStart CGSL Local Security Checks
    NASL idNEWSTART_CGSL_NS-SA-2019-0126_THUNDERBIRD.NASL
    descriptionThe remote NewStart CGSL host, running version MAIN 4.05, has thunderbird packages installed that are affected by multiple vulnerabilities: - It is possible to spoof the sender
    last seen2020-06-01
    modified2020-06-02
    plugin id127376
    published2019-08-12
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/127376
    titleNewStart CGSL MAIN 4.05 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0126)
  • NASL familyOracle Linux Local Security Checks
    NASL idORACLELINUX_ELSA-2018-0647.NASL
    descriptionFrom Red Hat Security Advisory 2018:0647 : An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro
    last seen2020-05-31
    modified2018-04-10
    plugin id108938
    published2018-04-10
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108938
    titleOracle Linux 6 : thunderbird (ELSA-2018-0647)
  • NASL familyUbuntu Local Security Checks
    NASL idUBUNTU_USN-3545-1.NASL
    descriptionMultiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, or execute arbitrary code. (CVE-2018-5125, CVE-2018-5127, CVE-2018-5129, CVE-2018-5144, CVE-2018-5145, CVE-2018-5146). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id108751
    published2018-03-30
    reporterUbuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108751
    titleUbuntu 14.04 LTS / 16.04 LTS / 17.10 : thunderbird vulnerabilities (USN-3545-1)
  • NASL familyRed Hat Local Security Checks
    NASL idREDHAT-RHSA-2018-0647.NASL
    descriptionAn update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro
    last seen2020-05-31
    modified2018-04-06
    plugin id108867
    published2018-04-06
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108867
    titleRHEL 6 : thunderbird (RHSA-2018:0647)
  • NASL familyMacOS X Local Security Checks
    NASL idMACOSX_FIREFOX_52_7_ESR.NASL
    descriptionThe version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes.
    last seen2020-06-01
    modified2020-06-02
    plugin id108374
    published2018-03-15
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108374
    titleMozilla Firefox ESR < 52.7 Multiple Vulnerabilities (macOS)
  • NASL familySuSE Local Security Checks
    NASL idOPENSUSE-2018-255.NASL
    descriptionThis update for Mozilla Firefox to version 52.7.0esr fixes multiple issues. Security issues fixed (bsc#1085130, MFSA 2018-07) : - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption - CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7 The following bug fixes are included : - bsc#1076907: provide mimehandler(text/html)
    last seen2020-06-05
    modified2018-03-15
    plugin id108356
    published2018-03-15
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108356
    titleopenSUSE Security Update : MozillaFirefox (openSUSE-2018-255)
  • NASL familyNewStart CGSL Local Security Checks
    NASL idNEWSTART_CGSL_NS-SA-2019-0011_FIREFOX.NASL
    descriptionThe remote NewStart CGSL host, running version MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5125) - A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5127) - A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5129) - When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59. (CVE-2018-5130) - Under certain circumstances the fetch() API can return transient local copies of resources that were sent with a no-store or no-cache cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessible to users if they share a common profile while browsing. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59. (CVE-2018-5131) - An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5144) - Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5145) - Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5089) - A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58. (CVE-2018-5091) - An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5095) - A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Thunderbird < 52.6. (CVE-2018-5096) - A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5097) - A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5098) - A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5099) - A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5102) - A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5103) - A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5104) - If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different site than the one loaded. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5117) - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code. (CVE-2018-5146) Note that Nessus has not tested for this issue but has instead relied only on the application
    last seen2020-06-01
    modified2020-06-02
    plugin id127160
    published2019-08-12
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/127160
    titleNewStart CGSL MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0011)
  • NASL familyCentOS Local Security Checks
    NASL idCENTOS_RHSA-2018-0527.NASL
    descriptionAn update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
    last seen2020-06-01
    modified2020-06-02
    plugin id108384
    published2018-03-16
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108384
    titleCentOS 7 : firefox (CESA-2018:0527)
  • NASL familyNewStart CGSL Local Security Checks
    NASL idNEWSTART_CGSL_NS-SA-2019-0017_THUNDERBIRD.NASL
    descriptionThe remote NewStart CGSL host, running version MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5125) - A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5127) - A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5129) - An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5144) - Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5145) - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code. (CVE-2018-5146) Note that Nessus has not tested for this issue but has instead relied only on the application
    last seen2020-06-01
    modified2020-06-02
    plugin id127172
    published2019-08-12
    reporterThis script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/127172
    titleNewStart CGSL MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0017)
  • NASL familySuSE Local Security Checks
    NASL idSUSE_SU-2018-0850-1.NASL
    descriptionThis update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130) : - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption - CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7 - CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671) - CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671) - CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.
    last seen2020-06-01
    modified2020-06-02
    plugin id108749
    published2018-03-30
    reporterThis script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108749
    titleSUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:0850-1)
  • NASL familyOracle Linux Local Security Checks
    NASL idORACLELINUX_ELSA-2018-0648.NASL
    descriptionFrom Red Hat Security Advisory 2018:0648 : An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro
    last seen2020-05-31
    modified2018-04-06
    plugin id108862
    published2018-04-06
    reporterThis script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof.
    sourcehttps://www.tenable.com/plugins/nessus/108862
    titleOracle Linux 7 : thunderbird (ELSA-2018-0648)

Redhat

advisories
  • rhsa
    idRHSA-2018:0526
  • rhsa
    idRHSA-2018:0527
  • rhsa
    idRHSA-2018:0647
  • rhsa
    idRHSA-2018:0648
rpms
  • firefox-0:52.7.0-1.el6_9
  • firefox-debuginfo-0:52.7.0-1.el6_9
  • firefox-0:52.7.0-1.el7_4
  • firefox-debuginfo-0:52.7.0-1.el7_4
  • thunderbird-0:52.7.0-1.el6_9
  • thunderbird-debuginfo-0:52.7.0-1.el6_9
  • thunderbird-0:52.7.0-1.el7_4
  • thunderbird-debuginfo-0:52.7.0-1.el7_4