SUSE Linux: 2013:1153-1 Important: Mozilla Firefox Critical Memory Safety
suse
July 5, 2013
An update that fixes 9 vulnerabilities is now available
Summary
Mozilla Firefox has been updated to the 17.0.7 ESR version, which fixes bugs and security issues. * MFSA 2013-49: Mozilla developers identified and fixed several memory safety bugs in the browser engine used in Firefox and other Mozilla-based products. Some of these bugs showed evidence of memory corruption under certain circumstances, and we presume that with enough effort at least some of these could be exploited to run arbitrary code. Gary Kwong, Jesse Ruderman, and Andrew McCreight reported memory safety problems and crashes that affect Firefox ESR 17, and Firefox 21. (CVE-2013-1682) * MFSA 2013-50: Security researcher Abhishek Arya (Inferno) of the Google Chrome Security Team used the Address Sanitizer tool to discover a series of use-after-free problems rated critical as security issues
References
#825935
Cross- CVE-2013-1682 CVE-2013-1684 CVE-2013-1685
CVE-2013-1686 CVE-2013-1687 CVE-2013-1690
CVE-2013-1692 CVE-2013-1693 CVE-2013-1697
Affected Products:
SUSE Linux Enterprise Server 11 SP2 for VMware
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP1 for VMware LTSS
SUSE Linux Enterprise Server 11 SP1 LTSS
SUSE Linux Enterprise Server 10 SP4
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 10 SP4
SLE SDK 10 SP4
https://www.suse.com/security/cve/CVE-2013-1682.html
https://www.suse.com/security/cve/CVE-2013-1684.html
https://www.suse.com/security/cve/CVE-2013-1685.html
https://www.suse.com/security/cve/CVE-2013-1686.html
https://www.suse.com/security/cve/CVE-2013-1687.html
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2013:1153-1
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!