Summary
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, bypass CSP
restrictions, spoof the protocol registration notification bar, leak
SameSite cookies, bypass mixed content warnings, or execute arbitrary
code. (CVE-2018-12388, CVE-2018-12390, CVE-2018-12392, CVE-2018-12393,
CVE-2018-12398, CVE-2018-12399, CVE-2018-12401, CVE-2018-12402,
CVE-2018-12403)
Multiple security issues were discovered with WebExtensions in Firefox.
If a user were tricked in to installing a specially crafted extension, an
attacker could potentially exploit these to bypass domain restrictions,
gain additional privileges, or run content scripts in local pages without
permission. (CVE-2018-12395, CVE-2018-12396, CVE-2018-12397)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | firefox | 63.0+build2-0ubuntu0.14.04.2 |
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 63.0+build2-0ubuntu0.16.04.2 |
| Ubuntu · 18.04 LTS 18.04:LTS | firefox | 63.0+build2-0ubuntu0.18.04.2 |
Vulnerabilities 12
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 62. Some of these bugs showed e…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 62 and Firefox ESR 60.2. Some o…
-
Unscored —
When manipulating user events in nested loops while opening a document through script, it is possible to trigger a pote…
-
Unscored —
A potential vulnerability was found in 32-bit builds where an integer overflow during the conversion of scripts to an i…
-
Unscored —
By rewriting the Host: request headers using the webRequest API, a WebExtension can bypass domain restrictions through …
-
Unscored —
A vulnerability where a WebExtension can run content scripts in disallowed contexts following navigation or other event…
-
Unscored —
A WebExtension can request access to local files without the warning prompt stating that the extension will "Access you…
-
Unscored —
By using the reflected URL in some special resource URIs, such as chrome:, it is possible to inject stylesheets and byp…
-
Unscored —
When a new protocol handler is registered, the API accepts a title argument which can be used to mislead users about wh…
-
Unscored —
Some special resource URIs will cause a non-exploitable crash if loaded with optional parameters following a '?' in the…
-
Unscored —
The internal WebBrowserPersist code does not use correct origin context for a resource being saved. This manifests when…
-
Unscored —
If a site is loaded over a HTTPS connection but loads a favicon resource over HTTP, the mixed content warning is not di…
References
-
report
https://ubuntu.com/security/CVE-2018-12388
-
report
https://ubuntu.com/security/CVE-2018-12390
-
report
https://ubuntu.com/security/CVE-2018-12392
-
report
https://ubuntu.com/security/CVE-2018-12393
-
report
https://ubuntu.com/security/CVE-2018-12395
-
report
https://ubuntu.com/security/CVE-2018-12396
-
report
https://ubuntu.com/security/CVE-2018-12397
-
report
https://ubuntu.com/security/CVE-2018-12398
-
report
https://ubuntu.com/security/CVE-2018-12399
-
report
https://ubuntu.com/security/CVE-2018-12401
-
report
https://ubuntu.com/security/CVE-2018-12402
-
report
https://ubuntu.com/security/CVE-2018-12403