Ubuntu 17.04: USN-3315-1 Moderate: Firefox Exploit Risks

ubuntu

June 15, 2017

Firefox could be made to crash or run programs as your login if it opened a malicious website.

Summary

Firefox could be made to crash or run programs as your login if it

opened a malicious website.

Software Description:

- firefox: Mozilla Open Source web browser

Details:

Multiple security issues were discovered in Firefox. If a user were

tricked in to opening a specially crafted website, an attacker could

potentially exploit these to cause a denial of service, read uninitialized

memory, obtain sensitive information, spoof the addressbar contents, or

execute arbitrary code. (CVE-2017-5470, CVE-2017-5471, CVE-2017-5472,

CVE-2017-7749, CVE-2017-7750, CVE-2017-7751, CVE-2017-7752, CVE-2017-7754,

CVE-2017-7756, CVE-2017-7757, CVE-2017-7758, CVE-2017-7762, CVE-2017-7764)

Multiple security issues were discovered in the Graphite 2 library used by

Firefox. If a user were tricked in to opening a specially crafted website,

an attacker could potentially exploit these to cause a denial of service,

read uninitialized memory, or execute arbitrary code. (CVE-2017-7771,

CVE-...

Read the Full Advisory

Topics Covered

security advisory denial of service exploit Ubuntu moderate severity Firefox

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 17.04:
  firefox                         54.0+build3-0ubuntu0.17.04.1

Ubuntu 16.10:
  firefox                         54.0+build3-0ubuntu0.16.10.1

Ubuntu 16.04 LTS:
  firefox                         54.0+build3-0ubuntu0.16.04.1

Ubuntu 14.04 LTS:
  firefox                         54.0+build3-0ubuntu0.14.04.1

After a standard system update you need to restart Firefox to make
all the necessary changes.