Alerts This Week
Warning Icon 1 485
Alerts This Week
Warning Icon 1 485

Debian 7: DLA-1321-2 Urgent: Firefox-ESR Memory Corruption Vulnerability

debian lts
Calendar Grey March 28, 2018
Dist Debian Esm H88
The 52.7.3esr-1~deb7u1 version of Firefox-esr addressed a critical use-after-free vulnerability which could result in crashes or arbitrary code execution.
Jesse Schwartzentruber discovered a use-after-free vulnerability in Firefox, which could be exploited to trigger an application crash or arbitrary code execution
Topics%20covered

Topics Covered

security advisory critical code execution debian application crash use-after-free firefox-esr

Summary

We recommend that you upgrade your firefox-esr packages.

Further information about Debian LTS security advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://wiki.debian.org/LTS


Severity
critical
Lowest
Low
Medium
High
Critical

Package: firefox-esr
Version: 52.7.3esr-1~deb7u1
CVE ID: CVE-2018-5148

Topics%20covered

Topics Covered

security advisory critical code execution debian application crash use-after-free firefox-esr

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here