Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

SUSE: 2012:0221-1 Important: Mozilla Firefox Memory Safety Problems

suse
Calendar Grey February 9, 2012
Scroller Suse
SUSE releases a significant security patch for Mozilla Firefox, resolving critical vulnerabilities and tackling various security issues.
An update that contains security fixes can now be An update that contains security fixes can now be An update that contains security fixes can now be installed

Summary

Mozilla Firefox was updated to 3.6.26 fixing bugs and security issues. The following security issues have been fixed by this update: * MFSA 2012-01: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. References * CVE-2012-0442: Jesse Ruderman and Bob Clary reported memory safety problems that were fixed in both Firefox 10

Topics%20covered

Topics Covered

security advisory important SUSE Linux memory safety Mozilla Firefox

References

#744275

Affected Products:

SUSE Linux Enterprise Server 10 SP4

SUSE Linux Enterprise Desktop 10 SP4

SLE SDK 10 SP4

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2012:0221-1
Rating: important

Topics%20covered

Topics Covered

security advisory important SUSE Linux memory safety Mozilla Firefox

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.