USN-2329-1: Firefox vulnerabilities
2 September 2014
Firefox could be made to crash or run programs as your login if it opened a malicious website.
Releases
Packages
- firefox - Mozilla Open Source web browser
Details
Jan de Mooij, Christian Holler, Karl Tomlinson, Randell Jesup, Gary Kwong,
Jesse Ruderman, JW Wang and David Weir discovered multiple memory safety
issues in Firefox. If a user were tricked in to opening a specially
crafted website, an attacker could potentially exploit these to cause a
denial of service via application crash, or execute arbitrary code with
the privileges of the user invoking Firefox. (CVE-2014-1553,
CVE-2014-1554, CVE-2014-1562)
Abhishek Arya discovered a use-after-free during DOM interactions with
SVG. If a user were tricked in to opening a specially crafted page, an
attacker could potentially exploit this to cause a denial of service via
application crash or execute arbitrary code with the privileges of the
user invoking Firefox. (CVE-2014-1563)
Michal Zalewski discovered that memory is not initialized properly during
GIF rendering in some circumstances. If a user were tricked in to opening
a specially crafted page, an attacker could potentially exploit this to
steal confidential information. (CVE-2014-1564)
Holger Fuhrmannek discovered an out-of-bounds read in Web Audio. If a
user were tricked in to opening a specially crafted website, an attacker
could potentially exploit this to cause a denial of service via
application crash or steal confidential information. (CVE-2014-1565)
A use-after-free was discovered during text layout in some circumstances.
If a user were tricked in to opening a specially crafted website, an
attacker could potentially exploit this to cause a denial of service via
application crash or execute arbitrary code with the privileges of the
user invoking Firefox. (CVE-2014-1567)
Update instructions
The problem can be corrected by updating your system to the following package versions:
Ubuntu 14.04
Ubuntu 12.04
After a standard system update you need to restart Firefox to make
all the necessary changes.
Related notices
- USN-2330-1: thunderbird-locale-fy, thunderbird-locale-zh-tw, xul-ext-gdata-provider, thunderbird-locale-en-gb, thunderbird-locale-ta, thunderbird-locale-ja, thunderbird-locale-pa-in, thunderbird-locale-pt, thunderbird-locale-ro, thunderbird-locale-ga, thunderbird-locale-ru, thunderbird-locale-zh-hans, thunderbird-locale-ast, thunderbird-locale-he, thunderbird-locale-da, thunderbird-locale-id, thunderbird-locale-af, thunderbird-locale-fr, thunderbird-globalmenu, thunderbird-locale-gl, thunderbird-locale-pt-pt, thunderbird-locale-el, thunderbird-locale-ca, thunderbird-gnome-support, thunderbird-locale-uk, thunderbird-mozsymbols, thunderbird-locale-lt, thunderbird-locale-hr, thunderbird-locale-eu, thunderbird-locale-zh-cn, thunderbird-locale-zh-hant, thunderbird-locale-sl, thunderbird-locale-gd, thunderbird-locale-tr, thunderbird-locale-vi, xul-ext-calendar-timezones, thunderbird-locale-es-es, thunderbird-dev, xul-ext-lightning, thunderbird-locale-bn-bd, thunderbird-locale-nb-no, thunderbird-locale-sq, thunderbird-locale-sk, thunderbird-locale-sr, thunderbird-locale-bg, thunderbird-locale-be, thunderbird-locale-es-ar, thunderbird-locale-nl, thunderbird-locale-nn-no, thunderbird-locale-it, thunderbird-locale-hu, thunderbird-locale-nb, thunderbird-locale-bn, thunderbird-locale-et, thunderbird-locale-ta-lk, thunderbird, thunderbird-locale-fi, thunderbird-locale-cs, thunderbird-locale-fy-nl, thunderbird-locale-ko, thunderbird-locale-si, thunderbird-locale-en-us, thunderbird-locale-pl, thunderbird-locale-ga-ie, thunderbird-locale-sv-se, thunderbird-locale-mk, thunderbird-locale-nn, thunderbird-locale-is, thunderbird-locale-ka, thunderbird-locale-pt-br, thunderbird-locale-pa, thunderbird-locale-en, thunderbird-locale-br, thunderbird-locale-ar, thunderbird-locale-de, thunderbird-testsuite, thunderbird-locale-sv, thunderbird-locale-hy, thunderbird-locale-rm, thunderbird-locale-es