Ubuntu 10.10: 1149-1 High: Firefox Memory Flaws and Xulrunner Risks

ubuntu

June 22, 2011

Multiple Vulnerabilities were fixed in Firefox and Xulrunner

Summary

Multiple Vulnerabilities were fixed in Firefox and Xulrunner

Software Description:

- firefox: safe and easy web browser from Mozilla

- xulrunner-1.9.2: XUL + XPCOM application runner

Details:

Multiple memory vulnerabilities were discovered in the browser rendering

engine. An attacker could use these to possibly execute arbitrary code with

the privileges of the user invoking Firefox. (CVE-2011-2364, CVE-2011-2365,

CVE-2011-2374, CVE-2011-2376)

Martin Barbella discovered that under certain conditions, viewing a XUL

document while JavaScript was disabled caused deleted memory to be

accessed. An attacker could potentially use this to crash Firefox or

execute arbitrary code with the privileges of the user invoking Firefox.

(CVE-2011-2373)

Jordi Chancel discovered a vulnerability on multipart/x-mixed-replace

images due to memory corruption. An attacker could potentially use this to

crash Firefox or execute arbitrary code with the privileges of the user

invoki...

Read the Full Advisory

Topics Covered

security advisory high severity software update Ubuntu memory flaw Firefox Xulrunner

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.10:
  firefox                         3.6.18+build2+nobinonly-0ubuntu0.10.10.1
  xulrunner-1.9.2                 1.9.2.18+build2+nobinonly-0ubuntu0.10.10.1

Ubuntu 10.04 LTS:
  firefox                         3.6.18+build2+nobinonly-0ubuntu0.10.04.1
  xulrunner-1.9.2                 1.9.2.18+build2+nobinonly-0ubuntu0.10.04.1

After a standard system update you need to restart Firefox and any
applications which use Xulrunner to make all the necessary changes.