Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 461
Alerts This Week
Warning Icon 1 461

Ubuntu 11.04 USN-1192-1 Moderate: Firefox Crashes and Exploits

ubuntu
Calendar Grey August 17, 2011
Scroller Ubuntu
Several enhancements have been implemented for Ubuntu 11.04, specifically targeting Internet Explorer vulnerabilities, which rectify potential security gaps and boost overall functionality.
Multiple Firefox vulnerabilities have been fixed

Summary

Multiple Firefox vulnerabilities have been fixed

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Aral Yaman discovered a vulnerability in the WebGL engine. An attacker

could potentially use this to crash Firefox or execute arbitrary code with

the privileges of the user invoking Firefox. (CVE-2011-2989)

Vivekanand Bolajwar discovered a vulnerability in the JavaScript engine. An

attacker could potentially use this to crash Firefox or execute arbitrary

code with the privileges of the user invoking Firefox. (CVE-2011-2991)

Bert Hubert and Theo Snelleman discovered a vulnerability in the Ogg

reader. An attacker could potentially use this to crash Firefox or execute

arbitrary code with the privileges of the user invoking Firefox.

(CVE-2011-2991)

Robert Kaiser, Jesse Ruderman, Gary Kwong, Christoph Diehl, Martijn

Wargers, Travis Emmitt, Bob Clary, and Jonathan Watt discovered multiple

memory vulnerabilities in the browser rendering en...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory buffer overflow Ubuntu memory issue Firefox JavaScript WebGL

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  firefox                         6.0+build1+nobinonly-0ubuntu0.11.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.

References

CVE-2011-0084, CVE-2011-2985, CVE-2011-2987, CVE-2011-2988,

CVE-2011-2989, CVE-2011-2990, CVE-2011-2991, CVE-2011-2992,

CVE-2011-2993

Severity
important
Lowest
Low
Medium
High
Critical

August 17, 2011

Topics%20covered

Topics Covered

security advisory buffer overflow Ubuntu memory issue Firefox JavaScript WebGL

Package Information

https://launchpad.net/ubuntu/+source/firefox/6.0+build1+nobinonly-0ubuntu0.11.04.1

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.