RHSA-2017:1440 — Red Hat Security Advisory: firefox security update

Fixed packages 14

Release	Package	Fixed in
Red Hat · RHEL 6 enterprise_linux:6::client	firefox	0:52.2.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::client	firefox-debuginfo	0:52.2.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::computenode	firefox	0:52.2.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::computenode	firefox-debuginfo	0:52.2.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server	firefox	0:52.2.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::server	firefox-debuginfo	0:52.2.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation	firefox	0:52.2.0-1.el6_9
Red Hat · RHEL 6 enterprise_linux:6::workstation	firefox-debuginfo	0:52.2.0-1.el6_9
Red Hat · RHEL 7 enterprise_linux:7::client	firefox	0:52.2.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::client	firefox-debuginfo	0:52.2.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server	firefox	0:52.2.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::server	firefox-debuginfo	0:52.2.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::workstation	firefox	0:52.2.0-1.el7_3
Red Hat · RHEL 7 enterprise_linux:7::workstation	firefox-debuginfo	0:52.2.0-1.el7_3

Vulnerabilities 19

Unscored —

CVE-2017-5470

Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corru…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-5472

A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attem…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7749

A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potent…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7750

A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older w…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7751

A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vuln…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7752

A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages d…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7754

An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerabilit…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7756

A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This c…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7757

A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is stil…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7758

An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while …

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7764

Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the ad…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018
Unscored —

CVE-2017-7771

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.

Mozilla Firefox thunderbird firefox Browsers Debian Ubuntu

Apr 12, 2019
Unscored —

CVE-2017-7772

Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.

Mozilla Firefox thunderbird firefox Browsers Debian Ubuntu

Apr 12, 2019
Unscored —

CVE-2017-7773

Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.

Mozilla Firefox thunderbird firefox Browsers Debian Ubuntu

Apr 12, 2019
Unscored —

CVE-2017-7774

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.

Mozilla Firefox thunderbird firefox Browsers Debian Ubuntu

Apr 12, 2019
Unscored —

CVE-2017-7775 Rejected

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

thunderbird firefox graphite2 Ubuntu

Apr 12, 2019
Unscored —

CVE-2017-7776

Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.

Mozilla Firefox thunderbird firefox Browsers Debian Ubuntu

Apr 12, 2019
Unscored —

CVE-2017-7777

Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph func…

Mozilla Firefox thunderbird firefox Browsers Debian Ubuntu

Apr 12, 2019
Unscored —

CVE-2017-7778

A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and…

Mozilla Firefox Thunderbird Firefox ESR Browsers Debian Ubuntu

Jun 11, 2018

References

article
https://access.redhat.com/security/updates/classification/#critical
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461252
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461253
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461254
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461255
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461256
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461257
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461258
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461259
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461260
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461261
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461262
report
https://bugzilla.redhat.com/show_bug.cgi?id=1461264
advisory
https://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_1440.json
report
https://access.redhat.com/security/cve/CVE-2017-5470
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5470
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5470
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-5470
report
https://access.redhat.com/security/cve/CVE-2017-5472
advisory
https://www.cve.org/CVERecord?id=CVE-2017-5472
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-5472
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-5472
report
https://access.redhat.com/security/cve/CVE-2017-7749
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7749
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7749
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7749
report
https://access.redhat.com/security/cve/CVE-2017-7750
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7750
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7750
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7750
report
https://access.redhat.com/security/cve/CVE-2017-7751
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7751
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7751
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7751
report
https://access.redhat.com/security/cve/CVE-2017-7752
advisory
https://www.cve.org/CVERecord?id=CVE-2017-7752
advisory
https://nvd.nist.gov/vuln/detail/CVE-2017-7752
article
https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/#CVE-2017-7752

Red Hat Security Advisory: firefox security update

Fixed packages 14

Vulnerabilities 19

Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corru…

A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attem…

A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potent…

A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older w…

A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vuln…

A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages d…

An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerabilit…

A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This c…

A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is stil…

An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while …

Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the ad…

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.

Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.

Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.

Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.

DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…

Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.

Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph func…

A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and…

References