Fixed packages 6
| Release | Package | Fixed in |
|---|---|---|
| Red Hat · RHEL 7 enterprise_linux:7::client | firefox | 0:52.1.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::client | firefox-debuginfo | 0:52.1.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | firefox | 0:52.1.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::server | firefox-debuginfo | 0:52.1.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | firefox | 0:52.1.0-2.el7_3 |
| Red Hat · RHEL 7 enterprise_linux:7::workstation | firefox-debuginfo | 0:52.1.0-2.el7_3 |
Vulnerabilities 33
-
Unscored —
The name_parse function in evdns.c in libevent before 2.1.6-beta allows remote attackers to have unspecified impact via…
-
Unscored —
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows…
-
Unscored —
The search_make_new function in evdns.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (ou…
-
Unscored —
Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bug…
-
Unscored —
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence …
-
Unscored —
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash.…
-
Unscored —
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are d…
-
Unscored —
A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash.…
-
Unscored —
A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This…
-
Unscored —
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a …
-
Unscored —
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during ha…
-
Unscored —
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a po…
-
Unscored —
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching wh…
-
Unscored —
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable…
-
Unscored —
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially ex…
-
Unscored —
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affect…
-
Unscored —
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains i…
-
Unscored —
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to cre…
-
Unscored —
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This lead…
-
Unscored —
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitab…
-
Unscored —
An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecr…
-
Unscored —
A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS…
-
Unscored —
A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event co…
-
Unscored —
A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files th…
-
Unscored —
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege…
-
Unscored —
A mechanism to bypass file system access protections in the sandbox using the file system request constructor through a…
-
Unscored —
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability…
-
Unscored —
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presse…
-
Unscored —
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessi…
-
Unscored —
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for othe…
-
Unscored —
If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, trigge…
-
Unscored —
A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clippin…
-
Unscored —
Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affec…
References
-
article
https://access.redhat.com/security/updates/classification/#critical
-
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-12
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443297
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443298
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443299
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443301
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443303
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443304
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443305
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443307
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443308
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443310
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443311
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443312
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443313
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443314
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443315
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443317
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443322
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443323
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443324
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443325
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443326
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443327
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443328
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443329
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443330
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443331
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443332
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443333
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443334
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443338
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1443340
-
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1106.json
-
report
https://access.redhat.com/security/cve/CVE-2016-10195
-
report
https://bugzilla.redhat.com/show_bug.cgi?id=1418608
-
advisory
https://www.cve.org/CVERecord?id=CVE-2016-10195
-
advisory
https://nvd.nist.gov/vuln/detail/CVE-2016-10195
-
report
https://access.redhat.com/security/cve/CVE-2016-10196