Alerts This Week
Warning Icon 1 631
Alerts This Week
Warning Icon 1 631

SUSE: 2012:0580-1 Important: Mozilla Firefox Memory Safety Threats

suse
Calendar Grey May 2, 2012
Dist Suse Esm H88
SUSE Security Announcement: Critical Mozilla Firefox patch addressing 11 vulnerabilities, encompassing memory safety flaws and XSS weaknesses.
An update that fixes 11 vulnerabilities is now available

Summary

MozillaFirefox was updated to the 10.0.4 ESR release to fix various bugs and security issues. * MFSA 2012-20: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. In general these flaws cannot be exploited through email in the Thunderbird and SeaMonkey products because scripting is disabled, but are potentially a risk in browser or browser-like contexts in those products. Christian Holler a reported memory safety and security problem affecting Firefox 11. (CVE-2012-0468) Bob Clary, Christian Holler, Brian Hackett, Bobby

References

#758408

Cross- CVE-2011-3062 CVE-2012-0468 CVE-2012-0469

CVE-2012-0470 CVE-2012-0471 CVE-2012-0472

CVE-2012-0473 CVE-2012-0474 CVE-2012-0477

CVE-2012-0478 CVE-2012-0479

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP2

SUSE Linux Enterprise Software Development Kit 11 SP1

SUSE Linux Enterprise Server 11 SP2

SUSE Linux Enterprise Server 11 SP1 for VMware

SUSE Linux Enterprise Server 11 SP1

SUSE Linux Enterprise Desktop 11 SP2

SUSE Linux Enterprise Desktop 11 SP1

https://www.suse.com/security/cve/CVE-2011-3062.html

https://www.suse.com/security/cve/CVE-2012-0468.html

https://www.suse.com/security/cve/CVE-2012-0469.html

https://www.suse.com/security/cve/CVE-2012-0470.html

https://www.suse.com/security/cve/CVE-2012-0471.html

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2012:0580-1
Rating: important

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here