RHSA-2017:1104 — Red Hat Security Advisory: firefox security update

Fixed packages 8

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	firefox	0:52.1.0-2.el6_9
Red Hat · RHEL 6 enterprise_linux:6::client	firefox-debuginfo	0:52.1.0-2.el6_9
Red Hat · RHEL 6 enterprise_linux:6::computenode	firefox	0:52.1.0-2.el6_9
Red Hat · RHEL 6 enterprise_linux:6::computenode	firefox-debuginfo	0:52.1.0-2.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server	firefox	0:52.1.0-2.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server	firefox-debuginfo	0:52.1.0-2.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation	firefox	0:52.1.0-2.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation	firefox-debuginfo	0:52.1.0-2.el6_9

Vulnerabilities 26

Unscored —

CVE-2016-10195

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via…

thunderbird firefox libevent libevent Debian Ubuntu Alpine

Mar 15, 2017
Unscored —

CVE-2016-10196

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows…

thunderbird firefox libevent libevent Debian Ubuntu Alpine

Mar 15, 2017
Unscored —

CVE-2016-10197

The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (ou…

thunderbird firefox libevent libevent Debian Ubuntu Alpine

Mar 15, 2017
Unscored —

CVE-2017-5429

Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bug…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5432

A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash.…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5433

A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are d…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5434

A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash.…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5435

A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5436

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5438

A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during ha…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5439

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a po…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5440

A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching wh…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5441

A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5442

A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially ex…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5443

An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affect…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5444

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains i…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5445

A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to cre…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5446

An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This lead…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5447 Public exploit EPSS 17%

An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitab…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5448

An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecr…

Mozilla Firefox Firefox ESR firefox Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5449

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS…

Mozilla Firefox Thunderbird Firefox ESR Browsers Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5459

A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5460

A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presse…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5464

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessi…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5465 Public exploit EPSS 18%

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for othe…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5469

Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affec…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018

References

article
https://access.redhat.com/security/updates/classification/#critical
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-08
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443298
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443299
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443301
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443303
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443304
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443308
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443310
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443311
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443312
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443313
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443314
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443315
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443317
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443322
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443323
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443324
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443325
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443326
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443327
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443328
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443329
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443330
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443332
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443333
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1104.json
report
https://access.redhat.com/security/cve/CVE-2016-10195
report
https://bugzilla.redhat.com/show_bug.cgi?id=1418608
advisory
https://www.cve.org/CVERecord?id=CVE-2016-10195
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-10195
report
https://access.redhat.com/security/cve/CVE-2016-10196
report
https://bugzilla.redhat.com/show_bug.cgi?id=1418611
advisory
https://www.cve.org/CVERecord?id=CVE-2016-10196
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-10196
report
https://access.redhat.com/security/cve/CVE-2016-10197
report
https://bugzilla.redhat.com/show_bug.cgi?id=1418612
advisory
https://www.cve.org/CVERecord?id=CVE-2016-10197
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-10197

Red Hat Security Advisory: firefox security update

Fixed packages 8

Vulnerabilities 26

The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via…

Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows…

The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (ou…

Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bug…

A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash.…

A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are d…

A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash.…

A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This…

An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a …

A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during ha…

A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a po…

A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching wh…

A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable…

A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially ex…

An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affect…

A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains i…

A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to cre…

An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This lead…

An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitab…

An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecr…

A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS…

A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability…

A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presse…

During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessi…

An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for othe…

Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affec…

References