Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 464
Alerts This Week
Warning Icon 1 464

Ubuntu 11.04 USN-1222-2 Critical: Firefox Extensions Memory Issue

ubuntu
Calendar Grey October 4, 2011
Scroller Ubuntu
Major patch for Ubuntu 11.04 resolves memory concerns in Chrome add-ons, improving defense against possible vulnerabilities.
This update provides packages compatible with Firefox 7.

Summary

This update provides packages compatible with Firefox 7.

Software Description:

- mozvoikko: Finnish spell-checker extension for Firefox

- ubufox: Ubuntu Firefox specific configuration defaults and apt support

- webfav: Firefox extension for saving web favorites (bookmarks)

Details:

USN-1222-1 fixed vulnerabilities in Firefox. This update provides updated

packages for use with Firefox 7.

Original advisory details:

Benjamin Smedberg, Bob Clary, Jesse Ruderman, Bob Clary, Andrew McCreight,

Andreas Gal, Gary Kwong, Igor Bukanov, Jason Orendorff, Jesse Ruderman, and

Marcia Knous discovered multiple memory vulnerabilities in the browser

rendering engine. An attacker could use these to possibly execute arbitrary

code with the privileges of the user invoking Firefox. (CVE-2011-2995,

CVE-2011-2997)

Boris Zbarsky discovered that a frame named "location" could shadow the

window.location object unless a script in a page grabbed a reference to the

true ob...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory memory issue update package ubuntu browser exploit firefox extension webfav

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.04:
  xul-ext-mozvoikko               1.10.0-0ubuntu0.11.04.1
  xul-ext-ubufox                  0.9.2-0ubuntu0.11.04.1
  xul-ext-webfav                  1.17-0ubuntu5.2

After a standard system update you need to restart Firefox to make all the
necessary changes.

References

https://ubuntu.com/security/notices/USN-1222-1

https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/857098

Severity
critical
Lowest
Low
Medium
High
Critical

October 04, 2011

Topics%20covered

Topics Covered

security advisory memory issue update package ubuntu browser exploit firefox extension webfav

Package Information

https://launchpad.net/ubuntu/+source/mozvoikko/1.10.0-0ubuntu0.11.04.1
https://launchpad.net/ubuntu/+source/ubufox/0.9.2-0ubuntu0.11.04.1
https://launchpad.net/ubuntu/+source/webfav/1.17-0ubuntu5.2

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.