Ubuntu 1548-1: Firefox vulnerabilities

    Date29 Aug 2012
    CategoryUbuntu
    38
    Posted ByLinuxSecurity Advisories
    Multiple security issues were fixed in Firefox.
    ==========================================================================
    Ubuntu Security Notice USN-1548-1
    August 29, 2012
    
    firefox vulnerabilities
    ==========================================================================
    
    A security issue affects these releases of Ubuntu and its derivatives:
    
    - Ubuntu 12.04 LTS
    - Ubuntu 11.10
    - Ubuntu 11.04
    - Ubuntu 10.04 LTS
    
    Summary:
    
    Multiple security issues were fixed in Firefox.
    
    Software Description:
    - firefox: Mozilla Open Source web browser
    
    Details:
    
    Gary Kwong, Christian Holler, Jesse Ruderman, Steve Fink, Bob Clary, Andrew
    Sutherland, Jason Smith, John Schoenick, Vladimir Vukicevic and Daniel
    Holbert discovered memory safety issues affecting Firefox. If the user were
    tricked into opening a specially crafted page, an attacker could possibly
    exploit these to cause a denial of service via application crash, or
    potentially execute code with the privileges of the user invoking Firefox.
    (CVE-2012-1970, CVE-2012-1971)
    
    Abhishek Arya discovered multiple use-after-free vulnerabilities. If the
    user were tricked into opening a specially crafted page, an attacker could
    exploit these to cause a denial of service via application crash, or
    potentially execute code with the privileges of the user invoking Firefox.
    (CVE-2012-1972, CVE-2012-1973, CVE-2012-1974, CVE-2012-1975, CVE-2012-1976,
    CVE-2012-3956, CVE-2012-3957, CVE-2012-3958, CVE-2012-3959, CVE-2012-3960,
    CVE-2012-3961, CVE-2012-3962, CVE-2012-3963, CVE-2012-3964)
    
    Mariusz Mlynsk discovered that it is possible to shadow the location object
    using Object.defineProperty. This could potentially result in a cross-site
    scripting (XSS) attack against plugins. With cross-site scripting
    vulnerabilities, if a user were tricked into viewing a specially crafted
    page, a remote attacker could exploit this to modify the contents or steal
    confidential data within the same domain. (CVE-2012-1956)
    
    Mariusz Mlynski discovered an escalation of privilege vulnerability through
    about:newtab. This could possibly lead to potentially code execution with
    the privileges of the user invoking Firefox. (CVE-2012-3965)
    
    Frédéric Hoguin discovered that bitmap format images with a negative height
    could potentially result in memory corruption. If the user were tricked
    into opening a specially crafted image, an attacker could exploit
    this to cause a denial of service via application crash, or potentially
    execute code with the privileges of the user invoking Firefox.
    (CVE-2012-3966)
    
    It was discovered that Firefox's WebGL implementation was vulnerable to
    multiple memory safety issues. If the user were tricked into opening a
    specially crafted page, an attacker could exploit these to cause a denial
    of service via application crash, or potentially execute code with the
    privileges of the user invoking Firefox. (CVE-2012-3967, CVE-2012-3968)
    
    Arthur Gerkis discovered multiple memory safety issues in Firefox's
    Scalable Vector Graphics (SVG) implementation. If the user were tricked
    into opening a specially crafted image, an attacker could exploit these to
    cause a denial of service via application crash, or potentially execute
    code with the privileges of the user invoking Firefox. (CVE-2012-3969,
    CVE-2012-3970)
    
    Christoph Diehl discovered multiple memory safety issues in the bundled
    Graphite 2 library. If the user were tricked into opening a specially
    crafted page, an attacker could exploit these to cause a denial of service
    via application crash, or potentially execute code with the privileges of
    the user invoking Firefox. (CVE-2012-3971)
    
    Nicolas Grégoire discovered an out-of-bounds read in the format-number
    feature of XSLT. This could potentially cause inaccurate formatting of
    numbers and information leakage. (CVE-2012-3972)
    
    Mark Goodwin discovered that under certain circumstances, Firefox's
    developer tools could allow remote debugging even when disabled.
    (CVE-2012-3973)
    
    It was discovered that when the DOMParser is used to parse text/html data
    in a Firefox extension, linked resources within this HTML data will be
    loaded. If the data being parsed in the extension is untrusted, it could
    lead to information leakage and potentially be combined with other attacks
    to become exploitable. (CVE-2012-3975)
    
    Mark Poticha discovered that under certain circumstances incorrect SSL
    certificate information can be displayed on the addressbar, showing the SSL
    data for a previous site while another has been loaded. This could
    potentially be used for phishing attacks. (CVE-2012-3976)
    
    It was discovered that, in some instances, certain security checks in the
    location object could be bypassed. This could allow for the loading of
    restricted content and can potentially be combined with other issues to
    become exploitable. (CVE-2012-3978)
    
    Colby Russell discovered that eval in the web console can execute injected
    code with chrome privileges, leading to the running of malicious code in a
    privileged context. If the user were tricked into opening a specially
    crafted page, an attacker could exploit this to cause a denial of service
    via application crash, or potentially execute code with the privileges of
    the user invoking Firefox. (CVE-2012-3980)
    
    Update instructions:
    
    The problem can be corrected by updating your system to the following
    package versions:
    
    Ubuntu 12.04 LTS:
      firefox                         15.0+build1-0ubuntu0.12.04.1
    
    Ubuntu 11.10:
      firefox                         15.0+build1-0ubuntu0.11.10.1
    
    Ubuntu 11.04:
      firefox                         15.0+build1-0ubuntu0.11.04.2
    
    Ubuntu 10.04 LTS:
      firefox                         15.0+build1-0ubuntu0.10.04.1
    
    After a standard system update you need to restart Firefox to make
    all the necessary changes.
    
    References:
      http://www.ubuntu.com/usn/usn-1548-1
      CVE-2012-1956, CVE-2012-1970, CVE-2012-1971, CVE-2012-1972,
      CVE-2012-1973, CVE-2012-1974, CVE-2012-1975, CVE-2012-1976,
      CVE-2012-3956, CVE-2012-3957, CVE-2012-3958, CVE-2012-3959,
      CVE-2012-3960, CVE-2012-3961, CVE-2012-3962, CVE-2012-3963,
      CVE-2012-3964, CVE-2012-3965, CVE-2012-3966, CVE-2012-3967,
      CVE-2012-3968, CVE-2012-3969, CVE-2012-3970, CVE-2012-3971,
      CVE-2012-3972, CVE-2012-3973, CVE-2012-3975, CVE-2012-3976,
      CVE-2012-3978, CVE-2012-3980, https://launchpad.net/bugs/1041620
    
    Package Information:
      https://launchpad.net/ubuntu/+source/firefox/15.0+build1-0ubuntu0.12.04.1
      https://launchpad.net/ubuntu/+source/firefox/15.0+build1-0ubuntu0.11.10.1
      https://launchpad.net/ubuntu/+source/firefox/15.0+build1-0ubuntu0.11.04.2
      https://launchpad.net/ubuntu/+source/firefox/15.0+build1-0ubuntu0.10.04.1
    
    
    
    
    
    
    You are not authorised to post comments.

    Comments powered by CComment

    LinuxSecurity Poll

    What do you think of the articles on LinuxSecurity?

    No answer selected. Please try again.
    Please select either existing option or enter your own, however not both.
    Please select minimum 0 answer(s) and maximum 3 answer(s).
    /main-polls/24-what-do-you-think-of-the-quality-of-the-articles-on-linuxsecurity?task=poll.vote&format=json
    24
    radio
    [{"id":"87","title":"Excellent, don't change a thing!","votes":"23","type":"x","order":"1","pct":56.1,"resources":[]},{"id":"88","title":"Should be more technical","votes":"5","type":"x","order":"2","pct":12.2,"resources":[]},{"id":"89","title":"Should include more HOWTOs","votes":"13","type":"x","order":"3","pct":31.71,"resources":[]}]["#ff5b00","#4ac0f2","#b80028","#eef66c","#60bb22","#b96a9a","#62c2cc"]["rgba(255,91,0,0.7)","rgba(74,192,242,0.7)","rgba(184,0,40,0.7)","rgba(238,246,108,0.7)","rgba(96,187,34,0.7)","rgba(185,106,154,0.7)","rgba(98,194,204,0.7)"]350
    bottom200

    Advisories

    We use cookies to provide and improve our services. By using our site, you consent to our Cookie Policy.