Summary
Multiple security issues were discovered in Firefox. If a user were
tricked in to opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, bypass same-origin
restritions, or execute arbitrary code. (CVE-2018-12405, CVE-2018-12406,
CVE-2018-12407, CVE-2018-17466, CVE-2018-18492, CVE-2018-18493,
CVE-2018-18494, CVE-2018-18498)
Multiple security issues were discovered in WebExtensions. If a user were
tricked in to installing a specially crafted extension, an attacker could
potentially exploit these to open privileged pages, or bypass other
security restrictions. (CVE-2018-18495, CVE-2018-18497)
Fixed packages 3
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 14.04 LTS 14.04:LTS | firefox | 64.0+build3-0ubuntu0.14.04.1 |
| Ubuntu · 16.04 LTS 16.04:LTS | firefox | 64.0+build3-0ubuntu0.16.04.1 |
| Ubuntu · 18.04 LTS 18.04:LTS | firefox | 64.0+build3-0ubuntu0.18.04.1 |
Vulnerabilities 10
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 63 and Firefox ESR 60.3. Some o…
-
Unscored —
Mozilla developers and community members reported memory safety bugs present in Firefox 63. Some of these bugs showed e…
-
Unscored —
A buffer overflow occurs when drawing and validating elements with the ANGLE graphics library, used for WebGL content, …
-
Unscored —
Incorrect texture handling in Angle in Google Chrome prior to 70.0.3538.67 allowed a remote attacker to perform an out …
-
Unscored —
A use-after-free vulnerability can occur after deleting a selection element due to a weak reference to the select eleme…
-
Unscored —
A buffer overflow can occur in the Skia library during buffer offset calculations with hardware accelerated canvas 2D a…
-
Unscored —
A same-origin policy violation allowing the theft of cross-origin URL entries when using the Javascript location proper…
-
Unscored —
WebExtension content scripts can be loaded into about: pages in some circumstances, in violation of the permissions gra…
-
Unscored —
Limitations on the URIs allowed to WebExtensions by the browser.windows.create API can be bypassed when a pipe in the U…
-
Unscored —
A potential vulnerability leading to an integer overflow can occur during buffer size calculations for images when a ra…
References
-
report
https://ubuntu.com/security/CVE-2018-12405
-
report
https://ubuntu.com/security/CVE-2018-12406
-
report
https://ubuntu.com/security/CVE-2018-12407
-
report
https://ubuntu.com/security/CVE-2018-17466
-
report
https://ubuntu.com/security/CVE-2018-18492
-
report
https://ubuntu.com/security/CVE-2018-18493
-
report
https://ubuntu.com/security/CVE-2018-18494
-
report
https://ubuntu.com/security/CVE-2018-18495
-
report
https://ubuntu.com/security/CVE-2018-18497
-
report
https://ubuntu.com/security/CVE-2018-18498