Vulnerabilities > CVE-2018-5144 - Integer Overflow or Wraparound vulnerability in multiple products
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
LOW Integrity impact
LOW Availability impact
LOW Summary
An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
Common Attack Pattern Enumeration and Classification (CAPEC)
- Forced Integer Overflow This attack forces an integer variable to go out of range. The integer variable is often used as an offset such as size of memory allocation or similarly. The attacker would typically control the value of such variable and try to get it out of range. For instance the integer in question is incremented past the maximum possible value, it may wrap to become a very small, or negative number, therefore providing a very incorrect value which can lead to unexpected behavior. At worst the attacker can execute arbitrary code.
Nessus
NASL family Scientific Linux Local Security Checks NASL id SL_20180315_FIREFOX_ON_SL7_X.NASL description This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) last seen 2020-05-31 modified 2018-03-16 plugin id 108399 published 2018-03-16 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108399 title Scientific Linux Security Update : firefox on SL7.x x86_64 (20180315) code # # (C) Tenable Network Security, Inc. # # The descriptive text is (C) Scientific Linux. # include("compat.inc"); if (description) { script_id(108399); script_version("1.6"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145"); script_name(english:"Scientific Linux Security Update : firefox on SL7.x x86_64 (20180315)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value: "The remote Scientific Linux host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145)" ); # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1803&L=scientific-linux-errata&F=&S=&P=9570 script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?9d7ec040" ); script_set_attribute( attribute:"solution", value:"Update the affected firefox and / or firefox-debuginfo packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:firefox"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:firefox-debuginfo"); script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Scientific Linux Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) || "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux"); os_ver = pregmatch(pattern: "Scientific Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Scientific Linux"); os_ver = os_ver[1]; if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Scientific Linux 7.x", "Scientific Linux " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu); if ("x86_64" >!< cpu) audit(AUDIT_ARCH_NOT, "x86_64", cpu); flag = 0; if (rpm_check(release:"SL7", cpu:"x86_64", reference:"firefox-52.7.0-1.el7_4", allowmaj:TRUE)) flag++; if (rpm_check(release:"SL7", cpu:"x86_64", reference:"firefox-debuginfo-52.7.0-1.el7_4", allowmaj:TRUE)) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox / firefox-debuginfo"); }NASL family Oracle Linux Local Security Checks NASL id ORACLELINUX_ELSA-2018-0526.NASL description From Red Hat Security Advisory 2018:0526 : An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. last seen 2020-05-31 modified 2018-03-16 plugin id 108393 published 2018-03-16 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108393 title Oracle Linux 6 : firefox (ELSA-2018-0526) code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2018:0526 and # Oracle Linux Security Advisory ELSA-2018-0526 respectively. # include("compat.inc"); if (description) { script_id(108393); script_version("1.5"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145"); script_xref(name:"RHSA", value:"2018:0526"); script_name(english:"Oracle Linux 6 : firefox (ELSA-2018-0526)"); script_summary(english:"Checks rpm output for the updated package"); script_set_attribute( attribute:"synopsis", value:"The remote Oracle Linux host is missing a security update." ); script_set_attribute( attribute:"description", value: "From Red Hat Security Advisory 2018:0526 : An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section." ); script_set_attribute( attribute:"see_also", value:"https://oss.oracle.com/pipermail/el-errata/2018-March/007587.html" ); script_set_attribute( attribute:"solution", value:"Update the affected firefox package." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:firefox"); script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:6"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Oracle Linux Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/OracleLinux")) audit(AUDIT_OS_NOT, "Oracle Linux"); release = get_kb_item("Host/RedHat/release"); if (isnull(release) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:release)) audit(AUDIT_OS_NOT, "Oracle Linux"); os_ver = pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Oracle Linux"); os_ver = os_ver[1]; if (! preg(pattern:"^6([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Oracle Linux 6", "Oracle Linux " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Oracle Linux", cpu); flag = 0; if (rpm_check(release:"EL6", reference:"firefox-52.7.0-1.0.1.el6_9", allowmaj:TRUE)) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get()); else security_hole(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox"); }NASL family Windows NASL id MOZILLA_FIREFOX_52_7_ESR.NASL description The version of Mozilla Firefox ESR installed on the remote Windows host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes. last seen 2020-06-01 modified 2020-06-02 plugin id 108376 published 2018-03-15 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108376 title Mozilla Firefox ESR < 52.7 Multiple Vulnerabilities code # # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(108376); script_version("1.4"); script_cvs_date("Date: 2019/11/08"); script_cve_id( "CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145" ); script_xref(name:"MFSA", value:"2018-07"); script_name(english:"Mozilla Firefox ESR < 52.7 Multiple Vulnerabilities"); script_summary(english:"Checks the version of Firefox."); script_set_attribute(attribute:"synopsis", value: "A web browser installed on the remote Windows host is affected by multiple vulnerabilities."); script_set_attribute(attribute:"description", value: "The version of Mozilla Firefox ESR installed on the remote Windows host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes."); script_set_attribute(attribute:"see_also", value:"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/"); script_set_attribute(attribute:"solution", value: "Upgrade to Mozilla Firefox ESR version 52.7 or later."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss_temporal_vector("CVSS2#E:U/RL:OF/RC:C"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_cvss3_temporal_vector("CVSS:3.0/E:U/RL:O/RC:C"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-5145"); script_set_attribute(attribute:"exploitability_ease", value:"No known exploits are available"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/03/13"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/13"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/15"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"cpe:/a:mozilla:firefox_esr"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"Windows"); script_copyright(english:"This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("mozilla_org_installed.nasl"); script_require_keys("Mozilla/Firefox/Version"); exit(0); } include("mozilla_version.inc"); port = get_kb_item("SMB/transport"); if (!port) port = 445; installs = get_kb_list("SMB/Mozilla/Firefox/*"); if (isnull(installs)) audit(AUDIT_NOT_INST, "Firefox"); mozilla_check_version(installs:installs, product:'firefox', esr:TRUE, fix:'52.7', min:'52', severity:SECURITY_HOLE);NASL family CentOS Local Security Checks NASL id CENTOS_RHSA-2018-0648.NASL description An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro last seen 2020-05-31 modified 2018-04-10 plugin id 108899 published 2018-04-10 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108899 title CentOS 7 : thunderbird (CESA-2018:0648) code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2018:0648 and # CentOS Errata and Security Advisory 2018:0648 respectively. # include("compat.inc"); if (description) { script_id(108899); script_version("1.9"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146"); script_xref(name:"RHSA", value:"2018:0648"); script_name(english:"CentOS 7 : thunderbird (CESA-2018:0648)"); script_summary(english:"Checks rpm output for the updated package"); script_set_attribute( attribute:"synopsis", value:"The remote CentOS host is missing a security update." ); script_set_attribute( attribute:"description", value: "An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro's Zero Day Initiative, Nils, James Grant, and Root Object as the original reporters." ); # https://lists.centos.org/pipermail/centos-announce/2018-April/022815.html script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?cca56faf" ); script_set_attribute( attribute:"solution", value:"Update the affected thunderbird package." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-5144"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:thunderbird"); script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:7"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11"); script_set_attribute(attribute:"patch_publication_date", value:"2018/04/09"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/04/10"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"CentOS Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/CentOS/release", "Host/CentOS/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/CentOS/release"); if (isnull(release) || "CentOS" >!< release) audit(AUDIT_OS_NOT, "CentOS"); os_ver = pregmatch(pattern: "CentOS(?: Linux)? release ([0-9]+)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "CentOS"); os_ver = os_ver[1]; if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "CentOS 7.x", "CentOS " + os_ver); if (!get_kb_item("Host/CentOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "CentOS", cpu); flag = 0; if (rpm_check(release:"CentOS-7", cpu:"x86_64", reference:"thunderbird-52.7.0-1.el7.centos", allowmaj:TRUE)) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "thunderbird"); }NASL family SuSE Local Security Checks NASL id OPENSUSE-2018-313.NASL description This update for Mozilla Thunderbird to version 52.7 fixes multiple issues. The following bugs were fixed : - Searching message bodies of messages in local folders, including filter and quick filter operations, did not find content in message attachments - Better error handling for Yahoo accounts The following security fixes are included as part of the mozilla platform. In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671) : - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5146: Out of bounds memory write in libvorbis - CVE-2018-5125: Memory safety bugs fixed in Thunderbird 52.7 - CVE-2018-5145: Memory safety bugs fixed in Thunderbird 52.7 last seen 2020-06-05 modified 2018-03-27 plugin id 108636 published 2018-03-27 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108636 title openSUSE Security Update : Mozilla Thunderbird (openSUSE-2018-313) code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from openSUSE Security Update openSUSE-2018-313. # # The text description of this plugin is (C) SUSE LLC. # include("compat.inc"); if (description) { script_id(108636); script_version("1.6"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/06/04"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146"); script_name(english:"openSUSE Security Update : Mozilla Thunderbird (openSUSE-2018-313)"); script_summary(english:"Check for the openSUSE-2018-313 patch"); script_set_attribute( attribute:"synopsis", value:"The remote openSUSE host is missing a security update." ); script_set_attribute( attribute:"description", value: "This update for Mozilla Thunderbird to version 52.7 fixes multiple issues. The following bugs were fixed : - Searching message bodies of messages in local folders, including filter and quick filter operations, did not find content in message attachments - Better error handling for Yahoo accounts The following security fixes are included as part of the mozilla platform. In general, these flaws cannot be exploited through email in Thunderbird because scripting is disabled when reading mail, but are potentially risks in browser or browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671) : - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5146: Out of bounds memory write in libvorbis - CVE-2018-5125: Memory safety bugs fixed in Thunderbird 52.7 - CVE-2018-5145: Memory safety bugs fixed in Thunderbird 52.7" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1085130" ); script_set_attribute( attribute:"see_also", value:"https://bugzilla.opensuse.org/show_bug.cgi?id=1085671" ); script_set_attribute( attribute:"solution", value:"Update the affected Mozilla Thunderbird packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-buildsymbols"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-debuginfo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-debugsource"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-devel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-translations-common"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:novell:opensuse:MozillaThunderbird-translations-other"); script_set_attribute(attribute:"cpe", value:"cpe:/o:novell:opensuse:42.3"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/26"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/27"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"SuSE Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/SuSE/release", "Host/SuSE/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/SuSE/release"); if (isnull(release) || release =~ "^(SLED|SLES)") audit(AUDIT_OS_NOT, "openSUSE"); if (release !~ "^(SUSE42\.3)$") audit(AUDIT_OS_RELEASE_NOT, "openSUSE", "42.3", release); if (!get_kb_item("Host/SuSE/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); ourarch = get_kb_item("Host/cpu"); if (!ourarch) audit(AUDIT_UNKNOWN_ARCH); if (ourarch !~ "^(i586|i686|x86_64)$") audit(AUDIT_ARCH_NOT, "i586 / i686 / x86_64", ourarch); flag = 0; if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-52.7-60.1") ) flag++; if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-buildsymbols-52.7-60.1") ) flag++; if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-debuginfo-52.7-60.1") ) flag++; if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-debugsource-52.7-60.1") ) flag++; if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-devel-52.7-60.1") ) flag++; if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-translations-common-52.7-60.1") ) flag++; if ( rpm_check(release:"SUSE42.3", reference:"MozillaThunderbird-translations-other-52.7-60.1") ) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get()); else security_hole(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "MozillaThunderbird / MozillaThunderbird-buildsymbols / etc"); }NASL family Debian Local Security Checks NASL id DEBIAN_DLA-1308.NASL description Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code or denial of service. For Debian 7 last seen 2020-03-17 modified 2018-03-16 plugin id 108385 published 2018-03-16 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108385 title Debian DLA-1308-1 : firefox-esr security update code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Debian Security Advisory DLA-1308-1. The text # itself is copyright (C) Software in the Public Interest, Inc. # include("compat.inc"); if (description) { script_id(108385); script_version("1.4"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/12"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145"); script_name(english:"Debian DLA-1308-1 : firefox-esr security update"); script_summary(english:"Checks dpkg output for the updated packages."); script_set_attribute( attribute:"synopsis", value:"The remote Debian host is missing a security update." ); script_set_attribute( attribute:"description", value: "Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code or denial of service. For Debian 7 'Wheezy', these problems have been fixed in version 52.7.1esr-1~deb7u1. We recommend that you upgrade your firefox-esr packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/wheezy/firefox-esr" ); script_set_attribute(attribute:"solution", value:"Upgrade the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-dbg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-dev"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ach"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-af"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-all"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-an"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-as"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ast"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-az"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-be"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-bg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-bn-bd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-bn-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-bs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ca"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-cs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-cy"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-da"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-de"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-dsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-el"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-en-gb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-en-za"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-eo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-es-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-es-cl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-es-es"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-es-mx"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-et"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-eu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-fa"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ff"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-fi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-fr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-fy-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ga-ie"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-gd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-gl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-gn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-gu-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-he"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hi-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-hy-am"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-id"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-is"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-it"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ja"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-kk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-km"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-kn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ko"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-lij"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-lt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-lv"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-mai"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-mk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ml"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-mr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ms"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-nb-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-nn-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-or"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-pa-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-pt-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-pt-pt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-rm"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ro"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ru"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-si"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-son"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sq"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-sv-se"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-ta"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-te"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-th"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-tr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-uk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-uz"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-vi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-xh"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-zh-cn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr-l10n-zh-tw"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-dbg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-dev"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ach"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-af"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-all"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-an"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-as"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ast"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-az"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-be"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-bg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-bn-bd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-bn-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-bs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ca"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-cs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-cy"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-da"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-de"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-dsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-el"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-en-gb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-en-za"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-eo"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-es-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-es-cl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-es-es"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-es-mx"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-et"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-eu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-fa"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ff"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-fi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-fr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-fy-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ga-ie"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-gd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-gl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-gn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-gu-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-he"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hi-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-hy-am"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-id"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-is"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-it"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ja"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-kk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-km"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-kn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ko"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-lij"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-lt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-lv"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-mai"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-mk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ml"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-mr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ms"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-nb-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-nn-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-or"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-pa-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-pt-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-pt-pt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-rm"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ro"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ru"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-si"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-son"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sq"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-sv-se"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-ta"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-te"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-th"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-tr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-uk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-uz"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-vi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-xh"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-zh-cn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceweasel-l10n-zh-tw"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:7.0"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Debian Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("debian_package.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian"); if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (deb_check(release:"7.0", prefix:"firefox-esr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-dbg", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-dev", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ach", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-af", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-all", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-an", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ar", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-as", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ast", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-az", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-be", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-bg", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-bn-bd", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-bn-in", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-br", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-bs", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ca", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-cs", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-cy", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-da", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-de", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-dsb", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-el", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-en-gb", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-en-za", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-eo", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-es-ar", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-es-cl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-es-es", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-es-mx", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-et", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-eu", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-fa", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ff", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-fi", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-fr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-fy-nl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ga-ie", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-gd", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-gl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-gn", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-gu-in", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-he", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hi-in", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hsb", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hu", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-hy-am", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-id", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-is", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-it", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ja", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-kk", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-km", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-kn", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ko", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-lij", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-lt", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-lv", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-mai", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-mk", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ml", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-mr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ms", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-nb-no", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-nl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-nn-no", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-or", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-pa-in", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-pl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-pt-br", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-pt-pt", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-rm", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ro", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ru", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-si", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sk", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-son", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sq", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-sv-se", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-ta", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-te", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-th", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-tr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-uk", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-uz", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-vi", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-xh", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-zh-cn", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"firefox-esr-l10n-zh-tw", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-dbg", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-dev", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ach", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-af", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-all", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-an", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ar", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-as", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ast", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-az", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-be", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-bg", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-bn-bd", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-bn-in", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-br", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-bs", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ca", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-cs", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-cy", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-da", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-de", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-dsb", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-el", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-en-gb", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-en-za", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-eo", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-es-ar", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-es-cl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-es-es", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-es-mx", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-et", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-eu", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-fa", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ff", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-fi", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-fr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-fy-nl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ga-ie", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-gd", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-gl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-gn", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-gu-in", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-he", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hi-in", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hsb", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hu", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-hy-am", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-id", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-is", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-it", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ja", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-kk", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-km", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-kn", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ko", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-lij", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-lt", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-lv", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-mai", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-mk", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ml", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-mr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ms", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-nb-no", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-nl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-nn-no", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-or", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-pa-in", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-pl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-pt-br", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-pt-pt", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-rm", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ro", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ru", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-si", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sk", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sl", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-son", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sq", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-sv-se", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-ta", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-te", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-th", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-tr", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-uk", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-uz", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-vi", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-xh", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-zh-cn", reference:"52.7.1esr-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceweasel-l10n-zh-tw", reference:"52.7.1esr-1~deb7u1")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family Scientific Linux Local Security Checks NASL id SL_20180405_THUNDERBIRD_ON_SL7_X.NASL description This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) - Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) last seen 2020-05-31 modified 2018-04-10 plugin id 108944 published 2018-04-10 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108944 title Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20180405) code # # (C) Tenable Network Security, Inc. # # The descriptive text is (C) Scientific Linux. # include("compat.inc"); if (description) { script_id(108944); script_version("1.8"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146"); script_name(english:"Scientific Linux Security Update : thunderbird on SL7.x x86_64 (20180405)"); script_summary(english:"Checks rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value: "The remote Scientific Linux host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) - Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144)" ); # https://listserv.fnal.gov/scripts/wa.exe?A2=ind1804&L=scientific-linux-errata&F=&S=&P=832 script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?5e98934c" ); script_set_attribute( attribute:"solution", value: "Update the affected thunderbird and / or thunderbird-debuginfo packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:thunderbird"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:fermilab:scientific_linux:thunderbird-debuginfo"); script_set_attribute(attribute:"cpe", value:"x-cpe:/o:fermilab:scientific_linux"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11"); script_set_attribute(attribute:"patch_publication_date", value:"2018/04/05"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/04/10"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Scientific Linux Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/cpu", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) || "Scientific Linux " >!< release) audit(AUDIT_HOST_NOT, "running Scientific Linux"); os_ver = pregmatch(pattern: "Scientific Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Scientific Linux"); os_ver = os_ver[1]; if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Scientific Linux 7.x", "Scientific Linux " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if (cpu >!< "x86_64" && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Scientific Linux", cpu); if ("x86_64" >!< cpu) audit(AUDIT_ARCH_NOT, "x86_64", cpu); flag = 0; if (rpm_check(release:"SL7", cpu:"x86_64", reference:"thunderbird-52.7.0-1.el7_4", allowmaj:TRUE)) flag++; if (rpm_check(release:"SL7", cpu:"x86_64", reference:"thunderbird-debuginfo-52.7.0-1.el7_4", allowmaj:TRUE)) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "thunderbird / thunderbird-debuginfo"); }NASL family Oracle Linux Local Security Checks NASL id ORACLELINUX_ELSA-2018-0527.NASL description From Red Hat Security Advisory 2018:0527 : An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. last seen 2020-05-31 modified 2018-03-16 plugin id 108394 published 2018-03-16 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108394 title Oracle Linux 7 : firefox (ELSA-2018-0527) code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2018:0527 and # Oracle Linux Security Advisory ELSA-2018-0527 respectively. # include("compat.inc"); if (description) { script_id(108394); script_version("1.5"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145"); script_xref(name:"RHSA", value:"2018:0527"); script_name(english:"Oracle Linux 7 : firefox (ELSA-2018-0527)"); script_summary(english:"Checks rpm output for the updated package"); script_set_attribute( attribute:"synopsis", value:"The remote Oracle Linux host is missing a security update." ); script_set_attribute( attribute:"description", value: "From Red Hat Security Advisory 2018:0527 : An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section." ); script_set_attribute( attribute:"see_also", value:"https://oss.oracle.com/pipermail/el-errata/2018-March/007586.html" ); script_set_attribute( attribute:"solution", value:"Update the affected firefox package." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:oracle:linux:firefox"); script_set_attribute(attribute:"cpe", value:"cpe:/o:oracle:linux:7"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Oracle Linux Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/OracleLinux", "Host/RedHat/release", "Host/RedHat/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/OracleLinux")) audit(AUDIT_OS_NOT, "Oracle Linux"); release = get_kb_item("Host/RedHat/release"); if (isnull(release) || !pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux)", string:release)) audit(AUDIT_OS_NOT, "Oracle Linux"); os_ver = pregmatch(pattern: "Oracle (?:Linux Server|Enterprise Linux) .*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Oracle Linux"); os_ver = os_ver[1]; if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Oracle Linux 7", "Oracle Linux " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Oracle Linux", cpu); if ("x86_64" >!< cpu) audit(AUDIT_ARCH_NOT, "x86_64", cpu); flag = 0; if (rpm_check(release:"EL7", cpu:"x86_64", reference:"firefox-52.7.0-1.0.1.el7_4", allowmaj:TRUE)) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:rpm_report_get()); else security_hole(0); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox"); }NASL family Debian Local Security Checks NASL id DEBIAN_DSA-4155.NASL description Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure. last seen 2020-06-01 modified 2020-06-02 plugin id 108697 published 2018-03-29 reporter This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108697 title Debian DSA-4155-1 : thunderbird - security update code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Debian Security Advisory DSA-4155. The text # itself is copyright (C) Software in the Public Interest, Inc. # include("compat.inc"); if (description) { script_id(108697); script_version("1.7"); script_cvs_date("Date: 2018/11/13 12:30:46"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146"); script_xref(name:"DSA", value:"4155"); script_name(english:"Debian DSA-4155-1 : thunderbird - security update"); script_summary(english:"Checks dpkg output for the updated package"); script_set_attribute( attribute:"synopsis", value:"The remote Debian host is missing a security-related update." ); script_set_attribute( attribute:"description", value: "Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure." ); script_set_attribute( attribute:"see_also", value:"https://security-tracker.debian.org/tracker/source-package/thunderbird" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/jessie/thunderbird" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/stretch/thunderbird" ); script_set_attribute( attribute:"see_also", value:"https://www.debian.org/security/2018/dsa-4155" ); script_set_attribute( attribute:"solution", value: "Upgrade the thunderbird packages. For the oldstable distribution (jessie), these problems have been fixed in version 1:52.7.0-1~deb8u1. For the stable distribution (stretch), these problems have been fixed in version 1:52.7.0-1~deb9u1." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:8.0"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/28"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/29"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Debian Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("debian_package.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian"); if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (deb_check(release:"8.0", prefix:"calendar-google-provider", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-dbg", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-dev", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-all", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-ar", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-ast", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-be", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-bg", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-bn-bd", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-br", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-ca", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-cs", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-da", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-de", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-dsb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-el", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-en-gb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-es-ar", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-es-es", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-et", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-eu", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-fi", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-fr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-fy-nl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-ga-ie", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-gd", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-gl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-he", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-hr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-hsb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-hu", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-hy-am", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-id", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-is", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-it", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-ja", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-kab", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-ko", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-lt", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-nb-no", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-nl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-nn-no", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-pa-in", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-pl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-pt-br", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-pt-pt", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-rm", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-ro", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-ru", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-si", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-sk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-sl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-sq", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-sr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-sv-se", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-ta-lk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-tr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-uk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-vi", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-zh-cn", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"icedove-l10n-zh-tw", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-extension", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-ar", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-ast", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-be", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-bg", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-bn-bd", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-br", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-ca", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-cs", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-cy", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-da", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-de", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-dsb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-el", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-en-gb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-es-ar", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-es-es", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-et", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-eu", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-fi", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-fr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-fy-nl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-ga-ie", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-gd", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-gl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-he", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-hr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-hsb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-hu", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-hy-am", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-id", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-is", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-it", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-ja", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-kab", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-ko", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-lt", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-nb-no", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-nl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-nn-no", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-pa-in", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-pl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-pt-br", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-pt-pt", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-rm", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-ro", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-ru", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-si", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-sk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-sl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-sq", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-sr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-sv-se", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-ta-lk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-tr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-uk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-vi", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-zh-cn", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceowl-l10n-zh-tw", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-ar", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-ast", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-be", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-bg", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-bn-bd", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-br", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-ca", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-cs", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-cy", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-da", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-de", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-dsb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-el", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-en-gb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-es-ar", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-es-es", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-et", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-eu", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-fi", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-fr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-fy-nl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-ga-ie", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-gd", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-gl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-he", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-hr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-hsb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-hu", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-hy-am", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-id", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-is", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-it", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-ja", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-kab", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-ko", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-lt", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-nb-no", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-nl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-nn-no", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-pa-in", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-pl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-pt-br", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-pt-pt", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-rm", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-ro", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-ru", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-si", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-sk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-sl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-sq", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-sr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-sv-se", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-ta-lk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-tr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-uk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-vi", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-zh-cn", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"lightning-l10n-zh-tw", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-dbg", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-dev", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-all", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ar", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ast", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-be", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-bg", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-bn-bd", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-br", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ca", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-cs", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-da", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-de", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-dsb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-el", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-en-gb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-es-ar", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-es-es", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-et", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-eu", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-fi", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-fr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-fy-nl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ga-ie", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-gd", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-gl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-he", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-hr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-hsb", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-hu", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-hy-am", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-id", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-is", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-it", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ja", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-kab", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ko", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-lt", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-nb-no", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-nl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-nn-no", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-pa-in", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-pl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-pt-br", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-pt-pt", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-rm", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ro", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ru", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-si", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sl", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sq", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-sv-se", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-ta-lk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-tr", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-uk", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-vi", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-zh-cn", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"thunderbird-l10n-zh-tw", reference:"1:52.7.0-1~deb8u1")) flag++; if (deb_check(release:"9.0", prefix:"calendar-google-provider", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-dbg", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-dev", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-all", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-ar", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-ast", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-be", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-bg", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-bn-bd", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-br", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-ca", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-cs", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-da", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-de", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-dsb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-el", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-en-gb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-es-ar", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-es-es", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-et", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-eu", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-fi", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-fr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-fy-nl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-ga-ie", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-gd", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-gl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-he", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-hr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-hsb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-hu", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-hy-am", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-id", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-is", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-it", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-ja", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-kab", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-ko", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-lt", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-nb-no", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-nl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-nn-no", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-pa-in", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-pl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-pt-br", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-pt-pt", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-rm", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-ro", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-ru", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-si", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-sk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-sl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-sq", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-sr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-sv-se", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-ta-lk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-tr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-uk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-vi", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-zh-cn", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"icedove-l10n-zh-tw", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-extension", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-ar", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-ast", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-be", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-bg", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-bn-bd", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-br", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-ca", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-cs", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-cy", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-da", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-de", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-dsb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-el", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-en-gb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-es-ar", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-es-es", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-et", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-eu", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-fi", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-fr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-fy-nl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-ga-ie", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-gd", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-gl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-he", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-hr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-hsb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-hu", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-hy-am", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-id", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-is", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-it", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-ja", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-kab", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-ko", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-lt", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-nb-no", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-nl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-nn-no", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-pa-in", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-pl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-pt-br", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-pt-pt", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-rm", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-ro", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-ru", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-si", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-sk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-sl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-sq", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-sr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-sv-se", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-ta-lk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-tr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-uk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-vi", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-zh-cn", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceowl-l10n-zh-tw", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-ar", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-ast", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-be", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-bg", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-bn-bd", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-br", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-ca", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-cs", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-cy", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-da", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-de", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-dsb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-el", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-en-gb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-es-ar", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-es-es", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-et", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-eu", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-fi", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-fr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-fy-nl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-ga-ie", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-gd", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-gl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-he", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-hr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-hsb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-hu", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-hy-am", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-id", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-is", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-it", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-ja", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-kab", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-ko", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-lt", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-nb-no", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-nl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-nn-no", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-pa-in", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-pl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-pt-br", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-pt-pt", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-rm", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-ro", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-ru", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-si", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-sk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-sl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-sq", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-sr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-sv-se", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-ta-lk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-tr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-uk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-vi", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-zh-cn", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"lightning-l10n-zh-tw", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-dbg", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-dev", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-all", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ar", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ast", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-be", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-bg", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-bn-bd", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-br", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ca", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-cs", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-da", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-de", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-dsb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-el", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-en-gb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-es-ar", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-es-es", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-et", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-eu", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-fi", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-fr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-fy-nl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ga-ie", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-gd", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-gl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-he", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-hr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-hsb", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-hu", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-hy-am", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-id", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-is", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-it", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ja", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-kab", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ko", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-lt", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-nb-no", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-nl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-nn-no", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-pa-in", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-pl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-pt-br", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-pt-pt", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-rm", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ro", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ru", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-si", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sl", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sq", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-sv-se", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-ta-lk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-tr", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-uk", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-vi", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-zh-cn", reference:"1:52.7.0-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"thunderbird-l10n-zh-tw", reference:"1:52.7.0-1~deb9u1")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2018-0527.NASL description An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. last seen 2020-05-31 modified 2018-03-16 plugin id 108397 published 2018-03-16 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108397 title RHEL 7 : firefox (RHSA-2018:0527) code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2018:0527. The text # itself is copyright (C) Red Hat, Inc. # include("compat.inc"); if (description) { script_id(108397); script_version("1.10"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/05/29"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145"); script_xref(name:"RHSA", value:"2018:0527"); script_name(english:"RHEL 7 : firefox (RHSA-2018:0527)"); script_summary(english:"Checks the rpm output for the updated packages"); script_set_attribute( attribute:"synopsis", value:"The remote Red Hat host is missing one or more security updates." ); script_set_attribute( attribute:"description", value: "An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section." ); script_set_attribute( attribute:"see_also", value:"https://www.mozilla.org/en-US/security/advisories/mfsa2018-07/" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/errata/RHSA-2018:0527" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2018-5125" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2018-5127" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2018-5129" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2018-5130" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2018-5131" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2018-5144" ); script_set_attribute( attribute:"see_also", value:"https://access.redhat.com/security/cve/cve-2018-5145" ); script_set_attribute( attribute:"solution", value:"Update the affected firefox and / or firefox-debuginfo packages." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:firefox"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:redhat:enterprise_linux:firefox-debuginfo"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7.4"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7.5"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7.6"); script_set_attribute(attribute:"cpe", value:"cpe:/o:redhat:enterprise_linux:7.7"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Red Hat Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/RedHat/release", "Host/RedHat/rpm-list", "Host/cpu"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("misc_func.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/RedHat/release"); if (isnull(release) || "Red Hat" >!< release) audit(AUDIT_OS_NOT, "Red Hat"); os_ver = pregmatch(pattern: "Red Hat Enterprise Linux.*release ([0-9]+(\.[0-9]+)?)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "Red Hat"); os_ver = os_ver[1]; if (! preg(pattern:"^7([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "Red Hat 7.x", "Red Hat " + os_ver); if (!get_kb_item("Host/RedHat/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "s390" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "Red Hat", cpu); yum_updateinfo = get_kb_item("Host/RedHat/yum-updateinfo"); if (!empty_or_null(yum_updateinfo)) { rhsa = "RHSA-2018:0527"; yum_report = redhat_generate_yum_updateinfo_report(rhsa:rhsa); if (!empty_or_null(yum_report)) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : yum_report ); exit(0); } else { audit_message = "affected by Red Hat security advisory " + rhsa; audit(AUDIT_OS_NOT, audit_message); } } else { flag = 0; if (rpm_check(release:"RHEL7", reference:"firefox-52.7.0-1.el7_4", allowmaj:TRUE)) flag++; if (rpm_check(release:"RHEL7", reference:"firefox-debuginfo-52.7.0-1.el7_4", allowmaj:TRUE)) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() + redhat_report_package_caveat() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox / firefox-debuginfo"); } }NASL family Debian Local Security Checks NASL id DEBIAN_DLA-1327.NASL description Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure. For Debian 7 last seen 2020-03-17 modified 2018-03-30 plugin id 108727 published 2018-03-30 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108727 title Debian DLA-1327-1 : thunderbird security update code #%NASL_MIN_LEVEL 80502 # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Debian Security Advisory DLA-1327-1. The text # itself is copyright (C) Software in the Public Interest, Inc. # include("compat.inc"); if (description) { script_id(108727); script_version("1.6"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/03/12"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146"); script_name(english:"Debian DLA-1327-1 : thunderbird security update"); script_summary(english:"Checks dpkg output for the updated packages."); script_set_attribute( attribute:"synopsis", value:"The remote Debian host is missing a security update." ); script_set_attribute( attribute:"description", value: "Multiple security issues have been found in Thunderbird, which may lead to the execution of arbitrary code, denial of service or information disclosure. For Debian 7 'Wheezy', these problems have been fixed in version 1:52.7.0-1~deb7u1. We recommend that you upgrade your thunderbird packages. NOTE: Tenable Network Security has extracted the preceding description block directly from the DLA security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues." ); script_set_attribute( attribute:"see_also", value:"https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/wheezy/thunderbird" ); script_set_attribute(attribute:"solution", value:"Upgrade the affected packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:calendar-google-provider"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-dbg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-dev"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-all"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ast"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-be"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-bg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-bn-bd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ca"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-cs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-da"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-de"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-dsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-el"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-en-gb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-es-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-es-es"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-et"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-eu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-fi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-fr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-fy-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ga-ie"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-gd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-gl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-he"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-hr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-hsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-hu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-hy-am"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-id"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-is"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-it"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ja"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-kab"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ko"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-lt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-nb-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-nn-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-pa-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-pt-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-pt-pt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-rm"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ro"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ru"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-si"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sq"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-sv-se"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-ta-lk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-tr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-uk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-vi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-zh-cn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:icedove-l10n-zh-tw"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-extension"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ast"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-be"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-bg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-bn-bd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ca"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-cs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-cy"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-da"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-de"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-dsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-el"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-en-gb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-es-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-es-es"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-et"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-eu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-fi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-fr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-fy-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ga-ie"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-gd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-gl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-he"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-hr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-hsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-hu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-hy-am"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-id"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-is"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-it"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ja"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-kab"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ko"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-lt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-nb-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-nn-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-pa-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-pt-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-pt-pt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-rm"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ro"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ru"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-si"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sq"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-sv-se"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-ta-lk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-tr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-uk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-vi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-zh-cn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:iceowl-l10n-zh-tw"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ast"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-be"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-bg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-bn-bd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ca"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-cs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-cy"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-da"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-de"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-dsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-el"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-en-gb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-es-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-es-es"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-et"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-eu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-fi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-fr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-fy-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ga-ie"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-gd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-gl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-he"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-hr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-hsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-hu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-hy-am"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-id"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-is"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-it"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ja"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-kab"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ko"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-lt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-nb-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-nn-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-pa-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-pt-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-pt-pt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-rm"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ro"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ru"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-si"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sq"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-sv-se"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-ta-lk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-tr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-uk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-vi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-zh-cn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:lightning-l10n-zh-tw"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-dbg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-dev"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-all"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ast"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-be"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-bg"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-bn-bd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ca"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-cs"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-da"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-de"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-dsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-el"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-en-gb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-ar"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-es-es"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-et"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-eu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-fy-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ga-ie"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-gd"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-gl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-he"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hsb"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hu"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-hy-am"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-id"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-is"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-it"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ja"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-kab"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ko"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-lt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nb-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-nn-no"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pa-in"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-br"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-pt-pt"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-rm"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ro"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ru"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-si"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sl"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sq"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-sv-se"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-ta-lk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-tr"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-uk"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-vi"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-cn"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:thunderbird-l10n-zh-tw"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:7.0"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/29"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/30"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Debian Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("debian_package.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian"); if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (deb_check(release:"7.0", prefix:"calendar-google-provider", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-dbg", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-dev", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-all", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-ar", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-ast", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-be", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-bg", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-bn-bd", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-br", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-ca", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-cs", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-da", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-de", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-dsb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-el", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-en-gb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-es-ar", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-es-es", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-et", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-eu", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-fi", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-fr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-fy-nl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-ga-ie", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-gd", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-gl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-he", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-hr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-hsb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-hu", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-hy-am", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-id", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-is", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-it", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-ja", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-kab", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-ko", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-lt", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-nb-no", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-nl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-nn-no", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-pa-in", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-pl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-pt-br", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-pt-pt", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-rm", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-ro", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-ru", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-si", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-sk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-sl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-sq", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-sr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-sv-se", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-ta-lk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-tr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-uk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-vi", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-zh-cn", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"icedove-l10n-zh-tw", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-extension", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-ar", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-ast", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-be", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-bg", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-bn-bd", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-br", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-ca", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-cs", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-cy", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-da", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-de", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-dsb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-el", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-en-gb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-es-ar", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-es-es", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-et", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-eu", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-fi", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-fr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-fy-nl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-ga-ie", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-gd", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-gl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-he", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-hr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-hsb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-hu", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-hy-am", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-id", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-is", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-it", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-ja", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-kab", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-ko", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-lt", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-nb-no", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-nl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-nn-no", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-pa-in", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-pl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-pt-br", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-pt-pt", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-rm", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-ro", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-ru", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-si", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-sk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-sl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-sq", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-sr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-sv-se", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-ta-lk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-tr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-uk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-vi", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-zh-cn", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"iceowl-l10n-zh-tw", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-ar", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-ast", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-be", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-bg", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-bn-bd", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-br", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-ca", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-cs", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-cy", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-da", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-de", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-dsb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-el", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-en-gb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-es-ar", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-es-es", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-et", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-eu", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-fi", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-fr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-fy-nl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-ga-ie", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-gd", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-gl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-he", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-hr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-hsb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-hu", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-hy-am", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-id", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-is", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-it", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-ja", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-kab", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-ko", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-lt", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-nb-no", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-nl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-nn-no", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-pa-in", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-pl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-pt-br", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-pt-pt", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-rm", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-ro", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-ru", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-si", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-sk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-sl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-sq", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-sr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-sv-se", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-ta-lk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-tr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-uk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-vi", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-zh-cn", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"lightning-l10n-zh-tw", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-dbg", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-dev", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-all", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ar", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ast", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-be", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-bg", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-bn-bd", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-br", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ca", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-cs", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-da", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-de", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-dsb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-el", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-en-gb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-es-ar", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-es-es", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-et", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-eu", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-fi", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-fr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-fy-nl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ga-ie", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-gd", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-gl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-he", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-hr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-hsb", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-hu", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-hy-am", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-id", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-is", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-it", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ja", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-kab", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ko", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-lt", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-nb-no", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-nl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-nn-no", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-pa-in", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-pl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-pt-br", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-pt-pt", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-rm", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ro", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ru", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-si", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sl", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sq", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-sv-se", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-ta-lk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-tr", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-uk", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-vi", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-zh-cn", reference:"1:52.7.0-1~deb7u1")) flag++; if (deb_check(release:"7.0", prefix:"thunderbird-l10n-zh-tw", reference:"1:52.7.0-1~deb7u1")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family CentOS Local Security Checks NASL id CENTOS_RHSA-2018-0526.NASL description An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. last seen 2020-06-01 modified 2020-06-02 plugin id 108383 published 2018-03-16 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108383 title CentOS 6 : firefox (CESA-2018:0526) code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Red Hat Security Advisory RHSA-2018:0526 and # CentOS Errata and Security Advisory 2018:0526 respectively. # include("compat.inc"); if (description) { script_id(108383); script_version("1.7"); script_cvs_date("Date: 2020/02/18"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145"); script_xref(name:"RHSA", value:"2018:0526"); script_name(english:"CentOS 6 : firefox (CESA-2018:0526)"); script_summary(english:"Checks rpm output for the updated package"); script_set_attribute( attribute:"synopsis", value:"The remote CentOS host is missing a security update." ); script_set_attribute( attribute:"description", value: "An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section." ); # https://lists.centos.org/pipermail/centos-announce/2018-March/022803.html script_set_attribute( attribute:"see_also", value:"http://www.nessus.org/u?ba9f9518" ); script_set_attribute( attribute:"solution", value:"Update the affected firefox package." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"cvss_score_source", value:"CVE-2018-5144"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:centos:centos:firefox"); script_set_attribute(attribute:"cpe", value:"cpe:/o:centos:centos:6"); script_set_attribute(attribute:"vuln_publication_date", value:"2018/06/11"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"CentOS Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/CentOS/release", "Host/CentOS/rpm-list"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/CentOS/release"); if (isnull(release) || "CentOS" >!< release) audit(AUDIT_OS_NOT, "CentOS"); os_ver = pregmatch(pattern: "CentOS(?: Linux)? release ([0-9]+)", string:release); if (isnull(os_ver)) audit(AUDIT_UNKNOWN_APP_VER, "CentOS"); os_ver = os_ver[1]; if (! preg(pattern:"^6([^0-9]|$)", string:os_ver)) audit(AUDIT_OS_NOT, "CentOS 6.x", "CentOS " + os_ver); if (!get_kb_item("Host/CentOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "CentOS", cpu); flag = 0; if (rpm_check(release:"CentOS-6", reference:"firefox-52.7.0-1.el6.centos", allowmaj:TRUE)) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox"); }NASL family Debian Local Security Checks NASL id DEBIAN_DSA-4139.NASL description Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code, denial of service or information disclosure. last seen 2020-06-01 modified 2020-06-02 plugin id 108387 published 2018-03-16 reporter This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108387 title Debian DSA-4139-1 : firefox-esr - security update code # # (C) Tenable Network Security, Inc. # # The descriptive text and package checks in this plugin were # extracted from Debian Security Advisory DSA-4139. The text # itself is copyright (C) Software in the Public Interest, Inc. # include("compat.inc"); if (description) { script_id(108387); script_version("1.5"); script_cvs_date("Date: 2018/11/13 12:30:46"); script_cve_id("CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145"); script_xref(name:"DSA", value:"4139"); script_name(english:"Debian DSA-4139-1 : firefox-esr - security update"); script_summary(english:"Checks dpkg output for the updated package"); script_set_attribute( attribute:"synopsis", value:"The remote Debian host is missing a security-related update." ); script_set_attribute( attribute:"description", value: "Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors and other implementation errors may lead to the execution of arbitrary code, denial of service or information disclosure." ); script_set_attribute( attribute:"see_also", value:"https://security-tracker.debian.org/tracker/source-package/firefox-esr" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/jessie/firefox-esr" ); script_set_attribute( attribute:"see_also", value:"https://packages.debian.org/source/stretch/firefox-esr" ); script_set_attribute( attribute:"see_also", value:"https://www.debian.org/security/2018/dsa-4139" ); script_set_attribute( attribute:"solution", value: "Upgrade the firefox-esr packages. For the oldstable distribution (jessie), these problems have been fixed in version 52.7.1esr-1~deb8u1. For the stable distribution (stretch), these problems have been fixed in version 52.7.1esr-1~deb9u1." ); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:debian:debian_linux:firefox-esr"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:8.0"); script_set_attribute(attribute:"cpe", value:"cpe:/o:debian:debian_linux:9.0"); script_set_attribute(attribute:"patch_publication_date", value:"2018/03/15"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/03/16"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_copyright(english:"This script is Copyright (C) 2018 and is owned by Tenable, Inc. or an Affiliate thereof."); script_family(english:"Debian Local Security Checks"); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/Debian/release", "Host/Debian/dpkg-l"); exit(0); } include("audit.inc"); include("debian_package.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); if (!get_kb_item("Host/Debian/release")) audit(AUDIT_OS_NOT, "Debian"); if (!get_kb_item("Host/Debian/dpkg-l")) audit(AUDIT_PACKAGE_LIST_MISSING); flag = 0; if (deb_check(release:"8.0", prefix:"firefox-esr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-dbg", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-dev", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ach", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-af", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-all", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-an", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ar", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-as", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ast", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-az", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-be", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-bg", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-bn-bd", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-bn-in", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-br", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-bs", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ca", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-cs", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-cy", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-da", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-de", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-dsb", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-el", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-en-gb", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-en-za", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-eo", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-es-ar", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-es-cl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-es-es", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-es-mx", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-et", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-eu", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-fa", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ff", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-fi", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-fr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-fy-nl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ga-ie", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-gd", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-gl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-gn", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-gu-in", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-he", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hi-in", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hsb", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hu", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-hy-am", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-id", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-is", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-it", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ja", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-kk", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-km", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-kn", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ko", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-lij", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-lt", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-lv", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-mai", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-mk", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ml", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-mr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ms", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-nb-no", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-nl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-nn-no", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-or", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-pa-in", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-pl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-pt-br", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-pt-pt", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-rm", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ro", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ru", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-si", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sk", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-son", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sq", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-sv-se", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-ta", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-te", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-th", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-tr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-uk", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-uz", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-vi", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-xh", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-zh-cn", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"firefox-esr-l10n-zh-tw", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-dbg", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-dev", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ach", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-af", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-all", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-an", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ar", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-as", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ast", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-az", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-be", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-bg", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-bn-bd", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-bn-in", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-br", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-bs", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ca", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-cs", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-cy", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-da", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-de", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-dsb", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-el", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-en-gb", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-en-za", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-eo", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-es-ar", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-es-cl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-es-es", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-es-mx", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-et", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-eu", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-fa", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ff", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-fi", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-fr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-fy-nl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ga-ie", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-gd", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-gl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-gn", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-gu-in", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-he", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hi-in", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hsb", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hu", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-hy-am", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-id", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-is", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-it", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ja", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-kk", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-km", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-kn", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ko", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-lij", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-lt", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-lv", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-mai", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-mk", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ml", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-mr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ms", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-nb-no", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-nl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-nn-no", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-or", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-pa-in", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-pl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-pt-br", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-pt-pt", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-rm", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ro", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ru", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-si", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sk", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sl", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-son", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sq", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-sv-se", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-ta", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-te", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-th", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-tr", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-uk", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-uz", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-vi", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-xh", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-zh-cn", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"8.0", prefix:"iceweasel-l10n-zh-tw", reference:"52.7.1esr-1~deb8u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-dev", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ach", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-af", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-all", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-an", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ar", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-as", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ast", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-az", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-bg", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-bn-bd", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-bn-in", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-br", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-bs", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ca", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-cak", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-cs", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-cy", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-da", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-de", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-dsb", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-el", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-en-gb", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-en-za", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-eo", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-es-ar", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-es-cl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-es-es", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-es-mx", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-et", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-eu", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-fa", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ff", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-fi", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-fr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-fy-nl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ga-ie", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-gd", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-gl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-gn", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-gu-in", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-he", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hi-in", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hsb", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hu", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-hy-am", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-id", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-is", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-it", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ja", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ka", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-kab", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-kk", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-km", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-kn", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ko", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-lij", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-lt", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-lv", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-mai", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-mk", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ml", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-mr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ms", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-nb-no", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-nl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-nn-no", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-or", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-pa-in", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-pl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-pt-br", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-pt-pt", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-rm", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ro", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ru", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-si", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sk", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-son", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sq", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-sv-se", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-ta", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-te", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-th", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-tr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-uk", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-uz", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-vi", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-xh", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-zh-cn", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"firefox-esr-l10n-zh-tw", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-dev", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ach", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-af", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-all", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-an", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ar", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-as", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ast", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-az", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-bg", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-bn-bd", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-bn-in", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-br", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-bs", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ca", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-cak", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-cs", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-cy", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-da", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-de", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-dsb", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-el", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-en-gb", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-en-za", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-eo", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-es-ar", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-es-cl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-es-es", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-es-mx", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-et", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-eu", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-fa", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ff", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-fi", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-fr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-fy-nl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ga-ie", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-gd", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-gl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-gn", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-gu-in", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-he", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hi-in", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hsb", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hu", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-hy-am", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-id", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-is", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-it", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ja", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ka", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-kab", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-kk", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-km", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-kn", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ko", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-lij", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-lt", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-lv", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-mai", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-mk", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ml", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-mr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ms", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-nb-no", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-nl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-nn-no", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-or", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-pa-in", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-pl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-pt-br", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-pt-pt", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-rm", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ro", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ru", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-si", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sk", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sl", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-son", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sq", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-sv-se", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-ta", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-te", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-th", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-tr", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-uk", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-uz", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-vi", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-xh", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-zh-cn", reference:"52.7.1esr-1~deb9u1")) flag++; if (deb_check(release:"9.0", prefix:"iceweasel-l10n-zh-tw", reference:"52.7.1esr-1~deb9u1")) flag++; if (flag) { if (report_verbosity > 0) security_hole(port:0, extra:deb_report_get()); else security_hole(0); exit(0); } else audit(AUDIT_HOST_NOT, "affected");NASL family Huawei Local Security Checks NASL id EULEROS_SA-2018-1118.NASL description According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code.(CVE-2018-5146) - Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) - Use-after-free in compositor potentially allows code execution (CVE-2018-5148) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-05-08 modified 2018-05-02 plugin id 109516 published 2018-05-02 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/109516 title EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1118) code # # (C) Tenable Network Security, Inc. # include("compat.inc"); if (description) { script_id(109516); script_version("1.35"); script_set_attribute(attribute:"plugin_modification_date", value:"2020/07/14"); script_cve_id( "CVE-2018-5125", "CVE-2018-5127", "CVE-2018-5129", "CVE-2018-5130", "CVE-2018-5131", "CVE-2018-5144", "CVE-2018-5145", "CVE-2018-5146", "CVE-2018-5148" ); script_name(english:"EulerOS 2.0 SP2 : firefox (EulerOS-SA-2018-1118)"); script_summary(english:"Checks the rpm output for the updated packages."); script_set_attribute(attribute:"synopsis", value: "The remote EulerOS host is missing multiple security updates."); script_set_attribute(attribute:"description", value: "According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code.(CVE-2018-5146) - Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) - Use-after-free in compositor potentially allows code execution (CVE-2018-5148) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues."); # https://developer.huaweicloud.com/ict/en/site-euleros/euleros/security-advisories/EulerOS-SA-2018-1118 script_set_attribute(attribute:"see_also", value:"http://www.nessus.org/u?0693c9c0"); script_set_attribute(attribute:"solution", value: "Update the affected firefox packages."); script_set_cvss_base_vector("CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P"); script_set_cvss3_base_vector("CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"); script_set_attribute(attribute:"patch_publication_date", value:"2018/04/25"); script_set_attribute(attribute:"plugin_publication_date", value:"2018/05/02"); script_set_attribute(attribute:"plugin_type", value:"local"); script_set_attribute(attribute:"cpe", value:"p-cpe:/a:huawei:euleros:firefox"); script_set_attribute(attribute:"cpe", value:"cpe:/o:huawei:euleros:2.0"); script_set_attribute(attribute:"generated_plugin", value:"current"); script_end_attributes(); script_category(ACT_GATHER_INFO); script_family(english:"Huawei Local Security Checks"); script_copyright(english:"This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof."); script_dependencies("ssh_get_info.nasl"); script_require_keys("Host/local_checks_enabled", "Host/EulerOS/release", "Host/EulerOS/rpm-list", "Host/EulerOS/sp"); script_exclude_keys("Host/EulerOS/uvp_version"); exit(0); } include("audit.inc"); include("global_settings.inc"); include("rpm.inc"); if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED); release = get_kb_item("Host/EulerOS/release"); if (isnull(release) || release !~ "^EulerOS") audit(AUDIT_OS_NOT, "EulerOS"); if (release !~ "^EulerOS release 2\.0(\D|$)") audit(AUDIT_OS_NOT, "EulerOS 2.0"); sp = get_kb_item("Host/EulerOS/sp"); if (isnull(sp) || sp !~ "^(2)$") audit(AUDIT_OS_NOT, "EulerOS 2.0 SP2"); uvp = get_kb_item("Host/EulerOS/uvp_version"); if (!empty_or_null(uvp)) audit(AUDIT_OS_NOT, "EulerOS 2.0 SP2", "EulerOS UVP " + uvp); if (!get_kb_item("Host/EulerOS/rpm-list")) audit(AUDIT_PACKAGE_LIST_MISSING); cpu = get_kb_item("Host/cpu"); if (isnull(cpu)) audit(AUDIT_UNKNOWN_ARCH); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$" && "aarch64" >!< cpu) audit(AUDIT_LOCAL_CHECKS_NOT_IMPLEMENTED, "EulerOS", cpu); if ("x86_64" >!< cpu && cpu !~ "^i[3-6]86$") audit(AUDIT_ARCH_NOT, "i686 / x86_64", cpu); flag = 0; pkgs = ["firefox-52.7.3-1.h2"]; foreach (pkg in pkgs) if (rpm_check(release:"EulerOS-2.0", sp:"2", reference:pkg, allowmaj:TRUE)) flag++; if (flag) { security_report_v4( port : 0, severity : SECURITY_HOLE, extra : rpm_report_get() ); exit(0); } else { tested = pkg_tests_get(); if (tested) audit(AUDIT_PACKAGE_NOT_AFFECTED, tested); else audit(AUDIT_PACKAGE_NOT_INSTALLED, "firefox"); }NASL family Huawei Local Security Checks NASL id EULEROS_SA-2018-1117.NASL description According to the versions of the firefox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities : - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code.(CVE-2018-5146) - Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-03 modified 2018-05-02 plugin id 109515 published 2018-05-02 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/109515 title EulerOS 2.0 SP1 : firefox (EulerOS-SA-2018-1117) NASL family NewStart CGSL Local Security Checks NASL id NEWSTART_CGSL_NS-SA-2019-0124_FIREFOX.NASL description The remote NewStart CGSL host, running version MAIN 4.05, has firefox packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5125) - A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5127) - A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5129) - When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59. (CVE-2018-5130) - Under certain circumstances the fetch() API can return transient local copies of resources that were sent with a no-store or no-cache cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessible to users if they share a common profile while browsing. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59. (CVE-2018-5131) - An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5144) - Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5145) - Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5089) - A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58. (CVE-2018-5091) - An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5095) - A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Thunderbird < 52.6. (CVE-2018-5096) - A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5097) - A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5098) - A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5099) - A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5102) - A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5103) - A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5104) - If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different site than the one loaded. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5117) - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code. (CVE-2018-5146) Note that Nessus has not tested for this issue but has instead relied only on the application last seen 2020-06-01 modified 2020-06-02 plugin id 127371 published 2019-08-12 reporter This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/127371 title NewStart CGSL MAIN 4.05 : firefox Multiple Vulnerabilities (NS-SA-2019-0124) NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2018-0648.NASL description An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro last seen 2020-05-31 modified 2018-04-06 plugin id 108868 published 2018-04-06 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108868 title RHEL 7 : thunderbird (RHSA-2018:0648) NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-201811-13.NASL description The remote host is affected by the vulnerability described in GLSA-201811-13 (Mozilla Thunderbird: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Mozilla Thunderbird. Please review the referenced Mozilla Foundation Security Advisories and CVE identifiers below for details. Impact : A remote attacker may be able to execute arbitrary code, cause a Denial of Service condition, obtain sensitive information, or conduct Cross-Site Request Forgery (CSRF). Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 119133 published 2018-11-26 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/119133 title GLSA-201811-13 : Mozilla Thunderbird: Multiple vulnerabilities NASL family CentOS Local Security Checks NASL id CENTOS_RHSA-2018-0647.NASL description An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro last seen 2020-05-31 modified 2018-04-10 plugin id 108898 published 2018-04-10 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108898 title CentOS 6 : thunderbird (CESA-2018:0647) NASL family Scientific Linux Local Security Checks NASL id SL_20180315_FIREFOX_ON_SL6_X.NASL description This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) - Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) last seen 2020-05-31 modified 2018-03-16 plugin id 108398 published 2018-03-16 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108398 title Scientific Linux Security Update : firefox on SL6.x i386/x86_64 (20180315) NASL family Gentoo Local Security Checks NASL id GENTOO_GLSA-201810-01.NASL description The remote host is affected by the vulnerability described in GLSA-201810-01 (Mozilla Firefox: Multiple vulnerabilities) Multiple vulnerabilities have been discovered in Mozilla Firefox. Please review the referenced CVE identifiers for details. Impact : A remote attacker could entice a user to view a specially crafted web page, possibly resulting in the execution of arbitrary code with the privileges of the process or a Denial of Service condition. Furthermore, a remote attacker may be able to perform Man-in-the-Middle attacks, obtain sensitive information, spoof the address bar, conduct clickjacking attacks, bypass security restrictions and protection mechanisms, or have other unspecified impact. Workaround : There is no known workaround at this time. last seen 2020-06-01 modified 2020-06-02 plugin id 117894 published 2018-10-03 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/117894 title GLSA-201810-01 : Mozilla Firefox: Multiple vulnerabilities NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2018-0526.NASL description An update for firefox is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. last seen 2020-05-31 modified 2018-03-16 plugin id 108396 published 2018-03-16 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108396 title RHEL 6 : firefox (RHSA-2018:0526) NASL family Scientific Linux Local Security Checks NASL id SL_20180405_THUNDERBIRD_ON_SL6_X.NASL description This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : - Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) - Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) - Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) - Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) - Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) - Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) last seen 2020-05-31 modified 2018-04-10 plugin id 108943 published 2018-04-10 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108943 title Scientific Linux Security Update : thunderbird on SL6.x i386/x86_64 (20180405) NASL family SuSE Local Security Checks NASL id SUSE_SU-2018-0907-1.NASL description This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130) : - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption - CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7 - CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671) - CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671) - CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 109000 published 2018-04-11 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/109000 title SUSE SLES11 Security Update : MozillaFirefox (SUSE-SU-2018:0907-1) NASL family NewStart CGSL Local Security Checks NASL id NEWSTART_CGSL_NS-SA-2019-0126_THUNDERBIRD.NASL description The remote NewStart CGSL host, running version MAIN 4.05, has thunderbird packages installed that are affected by multiple vulnerabilities: - It is possible to spoof the sender last seen 2020-06-01 modified 2020-06-02 plugin id 127376 published 2019-08-12 reporter This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/127376 title NewStart CGSL MAIN 4.05 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0126) NASL family Oracle Linux Local Security Checks NASL id ORACLELINUX_ELSA-2018-0647.NASL description From Red Hat Security Advisory 2018:0647 : An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro last seen 2020-05-31 modified 2018-04-10 plugin id 108938 published 2018-04-10 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108938 title Oracle Linux 6 : thunderbird (ELSA-2018-0647) NASL family Ubuntu Local Security Checks NASL id UBUNTU_USN-3545-1.NASL description Multiple security issues were discovered in Thunderbird. If a user were tricked in to opening a specially crafted website in a browsing context, an attacker could potentially exploit these to cause a denial of service, or execute arbitrary code. (CVE-2018-5125, CVE-2018-5127, CVE-2018-5129, CVE-2018-5144, CVE-2018-5145, CVE-2018-5146). Note that Tenable Network Security has extracted the preceding description block directly from the Ubuntu security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 108751 published 2018-03-30 reporter Ubuntu Security Notice (C) 2018-2019 Canonical, Inc. / NASL script (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108751 title Ubuntu 14.04 LTS / 16.04 LTS / 17.10 : thunderbird vulnerabilities (USN-3545-1) NASL family Red Hat Local Security Checks NASL id REDHAT-RHSA-2018-0647.NASL description An update for thunderbird is now available for Red Hat Enterprise Linux 6. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro last seen 2020-05-31 modified 2018-04-06 plugin id 108867 published 2018-04-06 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108867 title RHEL 6 : thunderbird (RHSA-2018:0647) NASL family MacOS X Local Security Checks NASL id MACOSX_FIREFOX_52_7_ESR.NASL description The version of Mozilla Firefox ESR installed on the remote macOS or Mac OS X host is prior to 52.7. It is, therefore, affected by multiple vulnerabilities, some of which allow code execution and potentially exploitable crashes. last seen 2020-06-01 modified 2020-06-02 plugin id 108374 published 2018-03-15 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108374 title Mozilla Firefox ESR < 52.7 Multiple Vulnerabilities (macOS) NASL family SuSE Local Security Checks NASL id OPENSUSE-2018-255.NASL description This update for Mozilla Firefox to version 52.7.0esr fixes multiple issues. Security issues fixed (bsc#1085130, MFSA 2018-07) : - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption - CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7 The following bug fixes are included : - bsc#1076907: provide mimehandler(text/html) last seen 2020-06-05 modified 2018-03-15 plugin id 108356 published 2018-03-15 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108356 title openSUSE Security Update : MozillaFirefox (openSUSE-2018-255) NASL family NewStart CGSL Local Security Checks NASL id NEWSTART_CGSL_NS-SA-2019-0011_FIREFOX.NASL description The remote NewStart CGSL host, running version MAIN 5.04, has firefox packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5125) - A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5127) - A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5129) - When packets with a mismatched RTP payload type are sent in WebRTC connections, in some circumstances a potentially exploitable crash is triggered. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59. (CVE-2018-5130) - Under certain circumstances the fetch() API can return transient local copies of resources that were sent with a no-store or no-cache cache header instead of downloading a copy from the network as it should. This can result in previously stored, locally cached data of a website being accessible to users if they share a common profile while browsing. This vulnerability affects Firefox ESR < 52.7 and Firefox < 59. (CVE-2018-5131) - An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5144) - Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5145) - Memory safety bugs were reported in Firefox 57 and Firefox ESR 52.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5089) - A use-after-free vulnerability can occur during WebRTC connections when interacting with the DTMF timers. This results in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Firefox < 58. (CVE-2018-5091) - An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at least 8 GB of RAM. This results in the use of uninitialized memory, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5095) - A use-after-free vulnerability can occur while editing events in form elements on a page, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 52.6 and Thunderbird < 52.6. (CVE-2018-5096) - A use-after-free vulnerability can occur during XSL transformations when the source document for the transformation is manipulated by script content during the transformation. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5097) - A use-after-free vulnerability can occur when form input elements, focus, and selections are manipulated by script content. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5098) - A use-after-free vulnerability can occur when the widget listener is holding strong references to browser objects that have previously been freed, resulting in a potentially exploitable crash when these references are used. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5099) - A use-after-free vulnerability can occur when manipulating HTML media elements with media streams, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5102) - A use-after-free vulnerability can occur during mouse event handling due to issues with multiprocess support. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5103) - A use-after-free vulnerability can occur during font face manipulation when a font face is freed while still in use, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5104) - If right-to-left text is used in the addressbar with left-to-right alignment, it is possible in some circumstances to scroll this text to spoof the displayed URL. This issue could result in the wrong URL being displayed as a location, which can mislead users to believe they are on a different site than the one loaded. This vulnerability affects Thunderbird < 52.6, Firefox ESR < 52.6, and Firefox < 58. (CVE-2018-5117) - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code. (CVE-2018-5146) Note that Nessus has not tested for this issue but has instead relied only on the application last seen 2020-06-01 modified 2020-06-02 plugin id 127160 published 2019-08-12 reporter This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/127160 title NewStart CGSL MAIN 5.04 : firefox Multiple Vulnerabilities (NS-SA-2019-0011) NASL family CentOS Local Security Checks NASL id CENTOS_RHSA-2018-0527.NASL description An update for firefox is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Critical. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Firefox is an open source web browser. This update upgrades Firefox to version 52.7.0 ESR. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Mismatched RTP payload type can trigger memory corruption (MFSA 2018-07) (CVE-2018-5130) * Mozilla: Fetch API improperly returns cached copies of no-store/no-cache resources (MFSA 2018-07) (CVE-2018-5131) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section. last seen 2020-06-01 modified 2020-06-02 plugin id 108384 published 2018-03-16 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108384 title CentOS 7 : firefox (CESA-2018:0527) NASL family NewStart CGSL Local Security Checks NASL id NEWSTART_CGSL_NS-SA-2019-0017_THUNDERBIRD.NASL description The remote NewStart CGSL host, running version MAIN 5.04, has thunderbird packages installed that are affected by multiple vulnerabilities: - Memory safety bugs were reported in Firefox 58 and Firefox ESR 52.6. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5125) - A buffer overflow can occur when manipulating the SVG animatedPathSegList through script. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5127) - A lack of parameter validation on IPC messages results in a potential out-of-bounds write through malformed IPC messages. This can potentially allow for sandbox escape through memory corruption in the parent process. This vulnerability affects Thunderbird < 52.7, Firefox ESR < 52.7, and Firefox < 59. (CVE-2018-5129) - An integer overflow can occur during conversion of text to some Unicode character sets due to an unchecked length parameter. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5144) - Memory safety bugs were reported in Firefox ESR 52.6. These bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox ESR < 52.7 and Thunderbird < 52.7. (CVE-2018-5145) - An out of bounds write flaw was found in the processing of vorbis audio data. A maliciously crafted file or audio stream could cause the application to crash or, potentially, execute arbitrary code. (CVE-2018-5146) Note that Nessus has not tested for this issue but has instead relied only on the application last seen 2020-06-01 modified 2020-06-02 plugin id 127172 published 2019-08-12 reporter This script is Copyright (C) 2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/127172 title NewStart CGSL MAIN 5.04 : thunderbird Multiple Vulnerabilities (NS-SA-2019-0017) NASL family SuSE Local Security Checks NASL id SUSE_SU-2018-0850-1.NASL description This update for MozillaFirefox fixes the following issues: Security issues fixed in Firefox ESR 52.7.3 (bsc#1085130) : - CVE-2018-5125: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 - CVE-2018-5127: Buffer overflow manipulating SVG animatedPathSegList - CVE-2018-5129: Out-of-bounds write with malformed IPC messages - CVE-2018-5130: Mismatched RTP payload type can trigger memory corruption - CVE-2018-5131: Fetch API improperly returns cached copies of no-store/no-cache resources - CVE-2018-5144: Integer overflow during Unicode conversion - CVE-2018-5145: Memory safety bugs fixed in Firefox ESR 52.7 - CVE-2018-5146: Out of bounds memory write in libvorbis (bsc#1085671) - CVE-2018-5147: Out of bounds memory write in libtremor (bsc#1085671) - CVE-2018-5148: Use-after-free in compositor (MFSA 2018-10) (bsc#1087059) Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues. last seen 2020-06-01 modified 2020-06-02 plugin id 108749 published 2018-03-30 reporter This script is Copyright (C) 2018-2019 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108749 title SUSE SLED12 / SLES12 Security Update : MozillaFirefox (SUSE-SU-2018:0850-1) NASL family Oracle Linux Local Security Checks NASL id ORACLELINUX_ELSA-2018-0648.NASL description From Red Hat Security Advisory 2018:0648 : An update for thunderbird is now available for Red Hat Enterprise Linux 7. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section. Mozilla Thunderbird is a standalone mail and newsgroup client. This update upgrades Thunderbird to version 52.7.0. Security Fix(es) : * Mozilla: Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5125) * Mozilla: Memory safety bugs fixed in Firefox ESR 52.7 (MFSA 2018-07) (CVE-2018-5145) * Mozilla: Vorbis audio processing out of bounds write (MFSA 2018-08) (CVE-2018-5146) * Mozilla: Buffer overflow manipulating SVG animatedPathSegList (MFSA 2018-07) (CVE-2018-5127) * Mozilla: Out-of-bounds write with malformed IPC messages (MFSA 2018-07) (CVE-2018-5129) * Mozilla: Integer overflow during Unicode conversion (MFSA 2018-07) (CVE-2018-5144) For more details about the security issue(s), including the impact, a CVSS score, and other related information, refer to the CVE page(s) listed in the References section. Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Bob Clary, Olli Pettay, Christian Holler, Nils Ohlmeier, Randell Jesup, Tyson Smith, Ralph Giles, Philipp, Jet Villegas, Richard Zhu via Trend Micro last seen 2020-05-31 modified 2018-04-06 plugin id 108862 published 2018-04-06 reporter This script is Copyright (C) 2018-2020 and is owned by Tenable, Inc. or an Affiliate thereof. source https://www.tenable.com/plugins/nessus/108862 title Oracle Linux 7 : thunderbird (ELSA-2018-0648)
Redhat
| advisories |
| ||||||||||||||||
| rpms |
|
References
- http://www.securityfocus.com/bid/103384
- http://www.securityfocus.com/bid/103384
- http://www.securitytracker.com/id/1040514
- http://www.securitytracker.com/id/1040514
- https://access.redhat.com/errata/RHSA-2018:0526
- https://access.redhat.com/errata/RHSA-2018:0526
- https://access.redhat.com/errata/RHSA-2018:0527
- https://access.redhat.com/errata/RHSA-2018:0527
- https://access.redhat.com/errata/RHSA-2018:0647
- https://access.redhat.com/errata/RHSA-2018:0647
- https://access.redhat.com/errata/RHSA-2018:0648
- https://access.redhat.com/errata/RHSA-2018:0648
- https://bugzilla.mozilla.org/show_bug.cgi?id=1440926
- https://bugzilla.mozilla.org/show_bug.cgi?id=1440926
- https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html
- https://lists.debian.org/debian-lts-announce/2018/03/msg00010.html
- https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html
- https://lists.debian.org/debian-lts-announce/2018/03/msg00029.html
- https://security.gentoo.org/glsa/201810-01
- https://security.gentoo.org/glsa/201810-01
- https://security.gentoo.org/glsa/201811-13
- https://security.gentoo.org/glsa/201811-13
- https://usn.ubuntu.com/3545-1/
- https://usn.ubuntu.com/3545-1/
- https://www.debian.org/security/2018/dsa-4139
- https://www.debian.org/security/2018/dsa-4139
- https://www.debian.org/security/2018/dsa-4155
- https://www.debian.org/security/2018/dsa-4155
- https://www.mozilla.org/security/advisories/mfsa2018-07/
- https://www.mozilla.org/security/advisories/mfsa2018-07/
- https://www.mozilla.org/security/advisories/mfsa2018-09/
- https://www.mozilla.org/security/advisories/mfsa2018-09/