Summary
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, read uninitialized
memory, obtain sensitive information, spoof the addressbar contents, or
execute arbitrary code. (CVE-2017-5470, CVE-2017-5471, CVE-2017-5472,
CVE-2017-7749, CVE-2017-7750, CVE-2017-7751, CVE-2017-7752, CVE-2017-7754,
CVE-2017-7756, CVE-2017-7757, CVE-2017-7758, CVE-2017-7762, CVE-2017-7764)
Multiple security issues were discovered in the Graphite 2 library used by
Firefox. If a user were tricked in to opening a specially crafted website,
an attacker could potentially exploit these to cause a denial of service,
read uninitialized memory, or execute arbitrary code. (CVE-2017-7771,
CVE-2017-7772, CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
CVE-2017-7777, CVE-2017-7778)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | firefox | 54.0+build3-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 54.0+build3-0ubuntu0.16.04.1 |
Vulnerabilities 21
-
Unscored —
Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corru…
-
Unscored —
Memory safety bugs were reported in Firefox 53. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attem…
-
Unscored —
A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potent…
-
Unscored —
A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older w…
-
Unscored —
A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vuln…
-
Unscored —
A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages d…
-
Unscored —
An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerabilit…
-
Unscored —
A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This c…
-
Unscored —
A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is stil…
-
Unscored —
An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while …
-
Unscored —
When entered directly, Reader Mode did not strip the username and password section of URLs displayed in the addressbar.…
-
Unscored —
Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the ad…
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Pass::readPass function.
-
Unscored —
Heap-based Buffer Overflow in Graphite2 library in Firefox before 54 in lz4::decompress function.
-
Unscored —
Heap-based Buffer Overflow write in Graphite2 library in Firefox before 54 in lz4::decompress src/Decompressor.
-
Unscored —
Out-of-bounds read in Graphite2 Library in Firefox before 54 in graphite2::Silf::readGraphite function.
-
Unscored —CVE-2017-7775 Rejected
DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by its CNA. Further investigat…
-
Unscored —
Heap-based Buffer Overflow read in Graphite2 library in Firefox before 54 in graphite2::Silf::getClassGlyph.
-
Unscored —
Use of uninitialized memory in Graphite2 library in Firefox before 54 in graphite2::GlyphCache::Loader::read_glyph func…
-
Unscored —
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and…
References
-
report
https://ubuntu.com/security/CVE-2017-5470
-
report
https://ubuntu.com/security/CVE-2017-5471
-
report
https://ubuntu.com/security/CVE-2017-5472
-
report
https://ubuntu.com/security/CVE-2017-7749
-
report
https://ubuntu.com/security/CVE-2017-7750
-
report
https://ubuntu.com/security/CVE-2017-7751
-
report
https://ubuntu.com/security/CVE-2017-7752
-
report
https://ubuntu.com/security/CVE-2017-7754
-
report
https://ubuntu.com/security/CVE-2017-7756
-
report
https://ubuntu.com/security/CVE-2017-7757
-
report
https://ubuntu.com/security/CVE-2017-7758
-
report
https://ubuntu.com/security/CVE-2017-7762
-
report
https://ubuntu.com/security/CVE-2017-7764
-
report
https://ubuntu.com/security/CVE-2017-7771
-
report
https://ubuntu.com/security/CVE-2017-7772
-
report
https://ubuntu.com/security/CVE-2017-7773
-
report
https://ubuntu.com/security/CVE-2017-7774
-
report
https://ubuntu.com/security/CVE-2017-7775
-
report
https://ubuntu.com/security/CVE-2017-7776
-
report
https://ubuntu.com/security/CVE-2017-7777
-
report
https://ubuntu.com/security/CVE-2017-7778