Summary
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to conduct cross-site scripting (XSS) attacks,
bypass sandbox restrictions, obtain sensitive information, spoof the
origin of modal alerts, bypass same origin restrictions, read
uninitialized memory, cause a denial of service via program crash or hang,
or execute arbitrary code. (CVE-2017-7753, CVE-2017-7779, CVE-2017-7780,
CVE-2017-7781, CVE-2017-7783, CVE-2017-7784, CVE-2017-7785, CVE-2017-7786,
CVE-2017-7787, CVE-2017-7788, CVE-2017-7789, CVE-2017-7791, CVE-2017-7792,
CVE-2017-7794, CVE-2017-7797, CVE-2017-7798, CVE-2017-7799, CVE-2017-7800,
CVE-2017-7801, CVE-2017-7802, CVE-2017-7803, CVE-2017-7806, CVE-2017-7807,
CVE-2017-7808, CVE-2017-7809)
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | firefox | 55.0.1+build2-0ubuntu0.14.04.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 55.0.1+build2-0ubuntu0.16.04.2 |
Vulnerabilities 25
-
Unscored —
An out-of-bounds read occurs when applying style rules to pseudo-elements, such as ::first-line, using cached style dat…
-
Unscored —
Memory safety bugs were reported in Firefox 54, Firefox ESR 52.2, and Thunderbird 52.2. Some of these bugs showed evide…
-
Unscored —
Memory safety bugs were reported in Firefox 54. Some of these bugs showed evidence of memory corruption and we presume …
-
Unscored —
An error occurs in the elliptic curve point addition algorithm that uses mixed Jacobian-affine coordinates where it can…
-
Unscored —
If a long user name is used in a username/password combination in a site URL (such as " http://UserName:Password@exampl…
-
Unscored —
A use-after-free vulnerability can occur when reading an image observer during frame reconstruction after the observer …
-
Unscored —
A buffer overflow can occur when manipulating Accessible Rich Internet Applications (ARIA) attributes within the DOM. T…
-
Unscored —
A buffer overflow can occur when the image renderer attempts to paint non-displayable SVG elements. This results in a p…
-
Unscored —
Same-origin policy protections can be bypassed on pages with embedded iframes during page reloads, allowing the iframes…
-
Unscored —
When an "iframe" has a "sandbox" attribute and its content is specified using "srcdoc", that content does not inherit t…
-
Unscored —
If a server sends two Strict-Transport-Security (STS) headers for a single connection, they will be rejected as invalid…
-
Unscored —
On pages containing an iframe, the "data:" protocol can be used to create a modal alert that will render over arbitrary…
-
Unscored —
A buffer overflow will occur when viewing a certificate in the certificate manager if the certificate has an extremely …
-
Unscored —
On Linux systems, if the content process is compromised, the sandbox broker will allow files to be truncated even thoug…
-
Unscored —
Response header name interning does not have same-origin protections and these headers are stored in a global registry.…
-
Unscored —
The Developer Tools feature suffers from a XUL injection vulnerability due to improper sanitization of the web page sou…
-
Unscored —
JavaScript in the "about:webrtc" page is not sanitized properly being assigned to "innerHTML". Data on this page is sup…
-
Unscored —
A use-after-free vulnerability can occur in WebSockets when the object holding the connection is freed before the disco…
-
Unscored —
A use-after-free vulnerability can occur while re-computing layout for a "marquee" element during window resizing where…
-
Unscored —
A use-after-free vulnerability can occur when manipulating the DOM during the resize event of an image element. If thes…
-
Unscored —
When a page's content security policy (CSP) header contains a "sandbox" directive, other directives are ignored. This r…
-
Unscored —
A use-after-free vulnerability can occur when the layer manager is freed too early when rendering specific SVG content,…
-
Unscored —
A mechanism that uses AppCache to hijack a URL in a domain using fallback by serving the files from a sub-path on the d…
-
Unscored —
A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons agains…
-
Unscored —
A use-after-free vulnerability can occur when an editor DOM node is deleted prematurely during tree traversal while sti…
References
-
report
https://ubuntu.com/security/CVE-2017-7753
-
report
https://ubuntu.com/security/CVE-2017-7779
-
report
https://ubuntu.com/security/CVE-2017-7780
-
report
https://ubuntu.com/security/CVE-2017-7781
-
report
https://ubuntu.com/security/CVE-2017-7783
-
report
https://ubuntu.com/security/CVE-2017-7784
-
report
https://ubuntu.com/security/CVE-2017-7785
-
report
https://ubuntu.com/security/CVE-2017-7786
-
report
https://ubuntu.com/security/CVE-2017-7787
-
report
https://ubuntu.com/security/CVE-2017-7788
-
report
https://ubuntu.com/security/CVE-2017-7789
-
report
https://ubuntu.com/security/CVE-2017-7791
-
report
https://ubuntu.com/security/CVE-2017-7792
-
report
https://ubuntu.com/security/CVE-2017-7794
-
report
https://ubuntu.com/security/CVE-2017-7797
-
report
https://ubuntu.com/security/CVE-2017-7798
-
report
https://ubuntu.com/security/CVE-2017-7799
-
report
https://ubuntu.com/security/CVE-2017-7800
-
report
https://ubuntu.com/security/CVE-2017-7801
-
report
https://ubuntu.com/security/CVE-2017-7802
-
report
https://ubuntu.com/security/CVE-2017-7803
-
report
https://ubuntu.com/security/CVE-2017-7806
-
report
https://ubuntu.com/security/CVE-2017-7807
-
report
https://ubuntu.com/security/CVE-2017-7808
-
report
https://ubuntu.com/security/CVE-2017-7809