Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 465
Alerts This Week
Warning Icon 1 465

SUSE 2013:1497-1 Critical: Mozilla Firefox Security Issues Resolved

suse
Calendar Grey September 27, 2013
Scroller Suse
SUSE Security Notice: Update for Google Chrome addressing several security flaws with detailed installation instructions included.
An update that fixes 10 vulnerabilities is now available

Summary

This update to Firefox 17.0.9esr (bnc#840485) addresses: * MFSA 2013-91 User-defined properties on DOM proxies get the wrong "this" object o (CVE-2013-1737) * MFSA 2013-90 Memory corruption involving scrolling o use-after-free in mozilla::layout::ScrollbarActivity (CVE-2013-1735) o Memory corruption in nsGfxScrollFrameInner::IsLTR() (CVE-2013-1736) * MFSA 2013-89 Buffer overflow with multi-column, lists, and floats o buffer overflow at nsFloatManager::GetFlowArea() with multicol, list, floats (CVE-2013-1732) * MFSA 2013-88 compartment mismatch re-attaching XBL-backed nodes o compartment mismatch in nsXBLBinding::DoInitJSClass (CVE-2013-1730) * MFSA 2013-83 Mozilla Updater does not lock MAR file after signature verification o MAR signature bypass in

Topics%20covered

Topics Covered

security advisory buffer overflow important SUSE memory safety Mozilla Firefox patch instructions

References

#840485

Cross- CVE-2013-1705 CVE-2013-1718 CVE-2013-1722

CVE-2013-1725 CVE-2013-1726 CVE-2013-1730

CVE-2013-1732 CVE-2013-1735 CVE-2013-1736

CVE-2013-1737

Affected Products:

SUSE Linux Enterprise Software Development Kit 11 SP3

SUSE Linux Enterprise Server 11 SP3 for VMware

SUSE Linux Enterprise Server 11 SP3

SUSE Linux Enterprise Server 11 SP2 for VMware

SUSE Linux Enterprise Server 11 SP2

SUSE Linux Enterprise Desktop 11 SP3

SUSE Linux Enterprise Desktop 11 SP2

https://www.suse.com/security/cve/CVE-2013-1705.html

https://www.suse.com/security/cve/CVE-2013-1718.html

https://www.suse.com/security/cve/CVE-2013-1722.html

https://www.suse.com/security/cve/CVE-2013-1725.html

https://www.suse.com/security/cve/CVE-2013-1726.html

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2013:1497-1
Rating: important

Topics%20covered

Topics Covered

security advisory buffer overflow important SUSE memory safety Mozilla Firefox patch instructions

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.