Overly broad permissions can turn one compromised account into a much larger security problem. Learn how to reduce unnecessary access, review privileges, and apply least privilege across modern Linux systems. Review Linux Privileges×

Alerts This Week
Warning Icon 1 542
Alerts This Week
Warning Icon 1 542

Ubuntu 12.04 LTS USN-1681-1 Critical: Firefox Memory Issues

ubuntu
Calendar Grey January 9, 2013
Scroller Ubuntu
Remedies for urgent Firefox challenges encompassing memory safety, denial of service, and safeguarding measures tailored for Ubuntu users.
Several security issues were fixed in Firefox.

Summary

Several security issues were fixed in Firefox.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Christoph Diehl, Christian Holler, Mats Palmgren, Chiaki Ishikawa, Bill

Gianopoulos, Benoit Jacob, Gary Kwong, Robert O'Callahan, Jesse Ruderman,

and Julian Seward discovered multiple memory safety issues affecting

Firefox. If the user were tricked into opening a specially crafted page, an

attacker could possibly exploit these to cause a denial of service via

application crash, or potentially execute code with the privileges of the

user invoking Firefox. (CVE-2013-0769, CVE-2013-0749, CVE-2013-0770)

Abhishek Arya discovered several user-after-free and buffer overflows in

Firefox. An attacker could exploit these to cause a denial of service via

application crash, or potentially execute code with the privileges of the

user invoking Firefox. (CVE-2013-0760, CVE-2013-0761, CVE-2013-0762,

CVE-2013-0763, CVE-2013-0766, CVE-2013-0767, CVE-2013-07...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical DoS Ubuntu security issues Firefox memory safety

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 12.10:
  firefox                         18.0+build1-0ubuntu0.12.10.3

Ubuntu 12.04 LTS:
  firefox                         18.0+build1-0ubuntu0.12.04.3

Ubuntu 11.10:
  firefox                         18.0+build1-0ubuntu0.11.10.3

Ubuntu 10.04 LTS:
  firefox                         18.0+build1-0ubuntu0.10.04.3

After a standard system update you need to restart Firefox to make all the
necessary changes.

References

https://ubuntu.com/security/notices/USN-1681-1

CVE-2012-5829, CVE-2013-0743, CVE-2013-0744, CVE-2013-0745,

CVE-2013-0746, CVE-2013-0747, CVE-2013-0748, CVE-2013-0749,

CVE-2013-0750, CVE-2013-0752, CVE-2013-0753, CVE-2013-0754,

CVE-2013-0755, CVE-2013-0756, CVE-2013-0757, CVE-2013-0758,

CVE-2013-0759, CVE-2013-0760, CVE-2013-0761, CVE-2013-0762,

CVE-2013-0763, CVE-2013-0764, CVE-2013-0766, CVE-2013-0767,

CVE-2013-0768, CVE-2013-0769, CVE-2013-0770, CVE-2013-0771,

https://bugs.launchpad.net/ubuntu/+source/firefox/+bug/1096387

Severity
critical
Lowest
Low
Medium
High
Critical

=========================================================================Ubuntu Security Notice USN-1681-1

Topics%20covered

Topics Covered

security advisory critical DoS Ubuntu security issues Firefox memory safety

Package Information

https://launchpad.net/ubuntu/+source/firefox/18.0+build1-0ubuntu0.12.10.3
https://launchpad.net/ubuntu/+source/firefox/18.0+build1-0ubuntu0.12.04.3
https://launchpad.net/ubuntu/+source/firefox/18.0+build1-0ubuntu0.11.10.3
https://launchpad.net/ubuntu/+source/firefox/18.0+build1-0ubuntu0.10.04.3

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.