Alerts This Week
Warning Icon 1 562
Alerts This Week
Warning Icon 1 562

SUSE 11 SP2: 2012:0424-1 Critical: Firefox Memory Issues

suse
Calendar Grey March 28, 2012
Dist Suse Esm H88
The patch implemented for Mozilla Firefox by SUSE addresses notable concerns related to high-impact security flaws.
An update that fixes 12 vulnerabilities is now available

Summary

Mozilla Firefox was updated to 10.0.3 ESR to fix various bugs and security issues. The following security issues have been fixed: * MFSA 2012-19: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products.

References

#745017 #750044

Cross- CVE-2012-0451 CVE-2012-0454 CVE-2012-0455

CVE-2012-0456 CVE-2012-0457 CVE-2012-0458

CVE-2012-0459 CVE-2012-0460 CVE-2012-0461

CVE-2012-0462 CVE-2012-0463 CVE-2012-0464

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP2

SUSE Linux Enterprise Software Development Kit 11 SP1

SUSE Linux Enterprise Server 11 SP2

SUSE Linux Enterprise Server 11 SP1 for VMware

SUSE Linux Enterprise Server 11 SP1

SUSE Linux Enterprise Desktop 11 SP2

SUSE Linux Enterprise Desktop 11 SP1

Bob Clary reported two bugs that causes crashes that

affected Firefox 3.6, Firefox ESR, and Firefox 10.

CVE-2012-0461

Christian Holler, Jesse Ruderman, Nils, Michael

Bebenita, Dindog, and David Anderson reported memory safety

problems and crashes that ...

Read the Full Advisory

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2012:0424-1
Rating: critical

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here