Notification

Icon
Error

Mozilla Firefox Remote Execution Vulnerability

Posted: Friday, October 5, 2018 12:33:36 PM(UTC)
Esben.D

Esben.D

Member Administration Original PosterPosts: 1,982
7
Like

Summary

Mozilla Firefox has recently released a new version to fix two critical vulnerabilities:

One of these vulnerabilities could allow for remote code execution when exploited, therefore, we have created a color-coded report which gives you a simple overview which assets in your network do not have the latest Firefox versions.

In addition to the overview report, we have also created a deployment package so you can update your outdated Firefox installations. You can use this deployment package in combination with this report to find all outdated Firefox installations.

Color-Coded Overview Report

Instructions to add the following color-coded overview report to your Lansweeper installation can be found here: https://www.lansweeper.c...ow-to-run-a-report.aspx

Code:
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tsysOS.OSname As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblSoftwareUni.softwareName As Software,
  tblSoftware.softwareVersion As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  tblSoftware.Lastchanged,
  Case tblSoftware.softwareVersion
    When '62.0.3' Then '#d4f4be'
    When '60.2.2' Then '#d4f4be'
    Else '#ffadad'
  End as backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblSoftware On tblAssets.AssetID = tblSoftware.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblSoftware.softID
  Left Join tsysOS On tsysOS.OScode = tblAssets.OScode
Where tblSoftwareUni.softwareName Like '%Mozilla Firefox%' And
  tblState.Statename = 'Active'
Union
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblMacOSInfo.SystemVersion As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblSoftwareUni.softwareName As Software,
  tblMacApplications.Version As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  tblMacApplications.LastChanged,
  Case tblMacApplications.Version
    When '62.0.3' Then '#d4f4be'
    When '60.2.2' Then '#d4f4be'
    Else '#ffadad'
  End as backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblMacApplications On
    tblAssets.AssetID = tblMacApplications.AssetID
  Inner Join tblSoftwareUni On tblSoftwareUni.SoftID = tblMacApplications.softid
  Inner Join tblMacOSInfo On tblMacOSInfo.AssetID = tblAssets.AssetID
Where tblSoftwareUni.softwareName Like '%Mozilla Firefox%' And
  tblState.Statename = 'Active'
Union
Select Top 1000000 tblAssets.AssetID,
  tblAssets.AssetName,
  tblAssets.Domain,
  tsysAssetTypes.AssetTypename As AssetType,
  tblAssets.Username,
  tblAssets.Userdomain,
  tsysAssetTypes.AssetTypeIcon10 As icon,
  tblAssets.IPAddress,
  tsysIPLocations.IPLocation,
  tblAssetCustom.Manufacturer,
  tblAssetCustom.Model,
  tblLinuxSystem.OSRelease As OS,
  tblAssets.SP,
  tblAssets.Lastseen,
  tblAssets.Lasttried,
  tblSoftwareUni.softwareName As Software,
  tblLinuxSoftware.Version As Version,
  tblSoftwareUni.SoftwarePublisher As Publisher,
  tblLinuxSoftware.LastChanged,
  Case tblLinuxSoftware.Version
    When '62.0.3' Then '#d4f4be'
    When '60.2.2' Then '#d4f4be'
    Else '#ffadad'
  End as backgroundcolor
From tblAssets
  Inner Join tblAssetCustom On tblAssets.AssetID = tblAssetCustom.AssetID
  Inner Join tsysAssetTypes On tsysAssetTypes.AssetType = tblAssets.Assettype
  Inner Join tsysIPLocations On tsysIPLocations.LocationID =
    tblAssets.LocationID
  Inner Join tblState On tblState.State = tblAssetCustom.State
  Inner Join tblLinuxSoftware On tblAssets.AssetID = tblLinuxSoftware.AssetID
  Inner Join tblSoftwareUni On
    tblSoftwareUni.SoftID = tblLinuxSoftware.SoftwareUniID
  Inner Join tblLinuxSystem On tblAssets.AssetID = tblLinuxSystem.AssetID
Where tblSoftwareUni.softwareName Like '%Mozilla Firefox%' And
  tblState.Statename = 'Active'
Order By Domain,
  AssetName,
  Software

Active Discussions

Lansweeper Uninstall All versions of a software
by  Michael White   Go to last post Go to first unread
Last post: Yesterday at 7:31:07 PM(UTC)
Lansweeper Lansweeper Server Services - Running as what User acount ??
by  miharix  
Go to last post Go to first unread
Last post: Yesterday at 5:28:23 PM(UTC)
Lansweeper Antivirus: No antivirus installed
by  MB@CC-IT   Go to last post Go to first unread
Last post: Yesterday at 3:20:56 PM(UTC)
Lansweeper Report GPO's
by  Stian  
Go to last post Go to first unread
Last post: Yesterday at 9:59:20 AM(UTC)
Lansweeper Customize asset fields
by  Giuliano   Go to last post Go to first unread
Last post: Yesterday at 9:11:49 AM(UTC)
Lansweeper Asset Radar to cover all subnets
by  FrankSc  
Go to last post Go to first unread
Last post: 1/21/2021 7:51:36 PM(UTC)
Lansweeper Bluetooth Info
by  Alexey   Go to last post Go to first unread
Last post: 1/21/2021 10:37:44 AM(UTC)
Lansweeper Use current user for scanning credentials?
by  miharix  
Go to last post Go to first unread
Last post: 1/21/2021 8:31:56 AM(UTC)