Firefox Installed (Mac OS X)

#TRUSTED 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
#TRUST-RSA-SHA256 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
#
# (C) Tenable Network Security, Inc.
#

include("compat.inc");

if (description)
{
  script_id(55417);
  script_version("1.43");
  script_set_attribute(attribute:"plugin_modification_date", value:"2026/03/03");

  script_xref(name:"IAVT", value:"0001-T-0510");

  script_name(english:"Firefox Installed (Mac OS X)");
  script_summary(english:"Gets the Firefox version from Info.plist.");

  script_set_attribute(attribute:"synopsis", value:
"The remote Mac OS X host contains a web browser.");
  script_set_attribute(attribute:"description", value:
"Mozilla Firefox is installed on the remote Mac OS X host.");
  script_set_attribute(attribute:"see_also", value:"https://www.mozilla.org/en-US/firefox/new/");
  script_set_attribute(attribute:"solution", value:"n/a");
  script_set_attribute(attribute:"risk_factor", value:"None");

  script_set_attribute(attribute:"plugin_publication_date", value:"2011/06/24");

  script_set_attribute(attribute:"plugin_type", value:"local");
  script_set_attribute(attribute:"cpe", value:"cpe:/a:mozilla:firefox");
  script_set_attribute(attribute:"asset_inventory", value:"True");
  script_set_attribute(attribute:"asset_inventory_category", value:"software_enumeration");
  script_end_attributes();

  script_category(ACT_GATHER_INFO);
  script_family(english:"MacOS X Local Security Checks");

  script_copyright(english:"This script is Copyright (C) 2011-2026 and is owned by Tenable, Inc. or an Affiliate thereof.");

  script_dependencies("ssh_get_info.nasl");
  script_require_keys("Host/local_checks_enabled", "Host/MacOSX/Version");

  exit(0);
}

include("ssh_func.inc");
include("macosx_func.inc");
include("install_func.inc");

enable_ssh_wrappers();

if (!get_kb_item("Host/local_checks_enabled")) audit(AUDIT_LOCAL_CHECKS_NOT_ENABLED);
if (!get_kb_item("Host/MacOSX/Version")) audit(AUDIT_OS_NOT, "macOS / Mac OS X");

var app = "Mozilla Firefox";
var kb_base = "MacOSX/Mozilla Firefox";
var esr_ui = '';
var is_esr = 0;
var key_path, esr_cmd, sw_edition;

var path = '/Applications/Firefox.app';
var plist = path + '/Contents/Info.plist';
var cmd =  'plutil -convert xml1 -o - \'' + plist + '\' | ' +
  'grep -A 1 CFBundleShortVersionString | ' +
  'tail -n 1 | ' +
  'sed \'s/.*string>\\(.*\\)<\\/string>.*/\\1/g\'';

## grab version
var fox_ver = exec_cmd(cmd:cmd);
if (empty_or_null(fox_ver) || !int(fox_ver)) audit(AUDIT_NOT_INST, app);

var version = pregmatch(pattern:"([0-9.]+)", string:fox_ver);
if (empty_or_null(version[1]))
  audit(AUDIT_VER_FAIL, app);
else
  version = version[1];

## Check for ESR
# is_esr will be any of :
# 0 - not ESR, no matching lines
# > 0 - ESR, more than zero matching lines
# not an integer - ERROR of some sort
var esr_cmd_array = {
  '/Contents/Resources/application.ini ':'grep -caie "^SourceRepository=.*-esr" ',
  '/Contents/MacOS/XUL ':'grep -caie "esr.releasechannel\\|/builds/slave/\\(rel-\\)\\?m-esr[0-9]\\+-" ',
  '/Contents/Resources/update-settings.ini ':'grep -caie "ACCEPTED_MAR_CHANNEL_IDS=firefox-mozilla-esr" '
};

var esr_major_versions_pattern = "^(10\.|17\.|24\.|31\.|38\.|45\.|52\.|60\.|68\.|78\.|91\.|102\.|115\.|128\.|140\.)";
var cpe = "cpe:/a:mozilla:firefox";
if (version =~ esr_major_versions_pattern)
{
  foreach key_path (keys(esr_cmd_array))
  {
    esr_cmd = esr_cmd_array[key_path] + path + key_path;

    is_esr = exec_cmd(cmd:esr_cmd);

    if (!isnull(is_esr) && int(is_esr) && is_esr > 0)
    {
      set_kb_item(name:kb_base+"/is_esr", value:TRUE);
      esr_ui = ' ESR';
      sw_edition = 'ESR';
      cpe += '_esr';
    }
  }
}

set_kb_item(name:kb_base+"/Installed", value:TRUE);
set_kb_item(name:kb_base+"/Version", value:version);
set_kb_item(name:kb_base+"/Path", value:path);

register_install(
  app_name:app + esr_ui,
  vendor : 'Mozilla',
  product : 'Firefox',
  sw_edition : sw_edition,
  path:path,
  display_version:version + esr_ui,
  version:version,
  cpe:cpe);

report_installs(app_name:app + esr_ui);