Summary
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, read uninitialized
memory, bypass same-origin restrictions, bypass CORS restrictions,
bypass CSRF protections, obtain sensitive information, or execute
arbitrary code. (CVE-2018-5156, CVE-2018-5186, CVE-2018-5187,
CVE-2018-5188, CVE-2018-12358, CVE-2018-12359, CVE-2018-12360,
CVE-2018-12361, CVE-2018-12362, CVE-2018-12363, CVE-2018-12364,
CVE-2018-12365, CVE-2018-12366, CVE-2018-12367, CVE-2018-12370,
CVE-2018-12371)
A security issue was discovered with WebExtensions. If a user were
tricked in to installing a specially crafted extension, an attacker
could potentially exploit this to obtain full browser permissions.
(CVE-2018-12369)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | firefox | 61.0+build3-0ubuntu0.14.04.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 61.0+build3-0ubuntu0.16.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | firefox | 61.0+build3-0ubuntu0.18.04.1 |
Vulnerabilities 17
-
Unscored —
Service workers can use redirection to avoid the tainting of cross-origin resources in some instances, allowing a malic…
-
Unscored —
A buffer overflow can occur when rendering canvas content while adjusting the height and width of the canvas element dy…
-
Unscored —
A use-after-free vulnerability can occur when deleting an input element during a mutation event handler triggered by fo…
-
Unscored —
An integer overflow can occur in the SwizzleData code while calculating buffer sizes. The overflowed value is used for …
-
Unscored —
An integer overflow can occur during graphics operations done by the Supplemental Streaming SIMD Extensions 3 (SSSE3) s…
-
Unscored —
A use-after-free vulnerability can occur when script uses mutation events to move DOM nodes between documents, resultin…
-
Unscored —
NPAPI plugins, such as Adobe Flash, can send non-simple cross-origin requests, bypassing CORS by making a same-origin P…
-
Unscored —
A compromised IPC child process can escape the content sandbox and list the names of arbitrary files on the file system…
-
Unscored —
An invalid grid size during QCMS (color profile) transformations can result in the out-of-bounds read interpreted as a …
-
Unscored —
In the previous mitigations for Spectre, the resolution or precision of various methods was reduced to counteract the a…
-
Unscored —
WebExtensions bundled with embedded experiments were not correctly checked for proper authorization. This allowed a mal…
-
Unscored —
In Reader View SameSite cookie protections are not checked on exiting. This allows for a payload to be triggered when R…
-
Unscored —
An integer overflow vulnerability in the Skia library when allocating memory for edge builders on some systems with at …
-
Unscored —
A vulnerability can occur when capturing a media stream when the media source type is changed as the capture is occurri…
-
Unscored —
Memory safety bugs present in Firefox 60. Some of these bugs showed evidence of memory corruption and we presume that w…
-
Unscored —
Memory safety bugs present in Firefox 60 and Firefox ESR 60. Some of these bugs showed evidence of memory corruption an…
-
Unscored —
Memory safety bugs present in Firefox 60, Firefox ESR 60, and Firefox ESR 52.8. Some of these bugs showed evidence of m…
References
-
report
https://ubuntu.com/security/CVE-2018-5156
-
report
https://ubuntu.com/security/CVE-2018-5186
-
report
https://ubuntu.com/security/CVE-2018-5187
-
report
https://ubuntu.com/security/CVE-2018-5188
-
report
https://ubuntu.com/security/CVE-2018-12358
-
report
https://ubuntu.com/security/CVE-2018-12359
-
report
https://ubuntu.com/security/CVE-2018-12360
-
report
https://ubuntu.com/security/CVE-2018-12361
-
report
https://ubuntu.com/security/CVE-2018-12362
-
report
https://ubuntu.com/security/CVE-2018-12363
-
report
https://ubuntu.com/security/CVE-2018-12364
-
report
https://ubuntu.com/security/CVE-2018-12365
-
report
https://ubuntu.com/security/CVE-2018-12366
-
report
https://ubuntu.com/security/CVE-2018-12367
-
report
https://ubuntu.com/security/CVE-2018-12369
-
report
https://ubuntu.com/security/CVE-2018-12370
-
report
https://ubuntu.com/security/CVE-2018-12371