Ubuntu: 1360-2 Urgent: Chrome Memory Corruption Vulnerability Alert

ubuntu

February 13, 2012

A security vulnerability has been fixed in Firefox.

Summary

A security vulnerability has been fixed in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Andrew McCreight and Olli Pettay discovered a use-after-free vulnerability

in the XBL bindings. An attacker could exploit this to cause a denial of

service via application crash, or potentially execute code with the

privileges of the user invoking Firefox. (CVE-2012-0452)

Topics Covered

security advisory denial of service critical code execution firefox ubuntu

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 11.10:
  firefox                         10.0.1+build1-0ubuntu0.11.10.1

Ubuntu 11.04:
  firefox                         10.0.1+build1-0ubuntu0.11.04.1

Ubuntu 10.10:
  firefox                         10.0.1+build1-0ubuntu0.10.10.1

Ubuntu 10.04 LTS:
  firefox                         10.0.1+build1-0ubuntu0.10.04.1

After a standard system update you need to restart Firefox to make all the
necessary changes.