Ubuntu 10.10: USN-1210-2 Severe: Vulnerabilities in Firefox and Xulrunner

ubuntu

September 28, 2011

Multiple vulnerabilities have been fixed in Firefox and Xulrunner.

Summary

Multiple vulnerabilities have been fixed in Firefox and Xulrunner.

Software Description:

- firefox: Mozilla Open Source web browser

- xulrunner-1.9.2: Mozilla Gecko runtime environment

Details:

Benjamin Smedberg, Bob Clary, Jesse Ruderman, and Josh Aas discovered

multiple memory vulnerabilities in the browser rendering engine. An

attacker could use these to possibly execute arbitrary code with the

privileges of the user invoking Firefox. (CVE-2011-2995, CVE-2011-2996)

Boris Zbarsky discovered that a frame named "location" could shadow the

window.location object unless a script in a page grabbed a reference to the

true object before the frame was created. This is in violation of the Same

Origin Policy. A malicious website could possibly use this to access

another website or the local file system. (CVE-2011-2999)

Mark Kaplan discovered an integer underflow in the SpiderMonkey JavaScript

engine. An attacker could potentially use this to crash Firefox.

Ian ...

Read the Full Advisory

Topics Covered

security advisory Ubuntu Firefox CRLF injection memory issues Xulrunner

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 10.10:
  firefox                         3.6.23+build1+nobinonly-0ubuntu0.10.10.1
  xulrunner-1.9.2                 1.9.2.23+build1+nobinonly-0ubuntu0.10.10.1

Ubuntu 10.04 LTS:
  firefox                         3.6.23+build1+nobinonly-0ubuntu0.10.04.1
  xulrunner-1.9.2                 1.9.2.23+build1+nobinonly-0ubuntu0.10.04.1

After a standard system upgrade you need to restart Firefox and any
applications that use Xulrunner to effect the necessary changes.