Summary
Multiple security issues were discovered in Firefox. If a user were
tricked into opening a specially crafted website, an attacker could
potentially exploit these to cause a denial of service, obtain sensitive
information across domains, or execute arbitrary code. (CVE-2023-6206,
CVE-2023-6210, CVE-2023-6211, CVE-2023-6212, CVE-2023-6213)
It was discovered that Firefox did not properly manage memory when
images were created on the canvas element. An attacker could potentially
exploit this issue to obtain sensitive information. (CVE-2023-6204)
It discovered that Firefox incorrectly handled certain memory when using a
MessagePort. An attacker could potentially exploit this issue to cause a
denial of service. (CVE-2023-6205)
It discovered that Firefox incorrectly did not properly manage ownership
in ReadableByteStreams. An attacker could potentially exploit this issue
to cause a denial of service. (CVE-2023-6207)
It discovered that Firefox incorrectly did not properly manage copy
operations when using Selection API in X11. An attacker could potentially
exploit this issue to obtain sensitive information. (CVE-2023-6208)
Rachmat Abdul Rokhim discovered that Firefox incorrectly handled parsing
of relative URLS starting with "///". An attacker could potentially
exploit this issue to cause a denial of service. (CVE-2023-6209)
Fixed packages 1
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · 20.04 LTS 20.04:LTS | firefox | 120.0+build2-0ubuntu0.20.04.1 |
Vulnerabilities 10
-
Unscored —
On some systems—depending on the graphics settings and drivers—it was possible to force an out-of-bounds read and leak …
-
Unscored —
It was possible to cause the use of a MessagePort after it had already been freed, which could potentially have led to …
-
Unscored —
The black fade animation when exiting fullscreen is roughly the length of the anti-clickjacking delay on permission pro…
-
Unscored —
Ownership mismanagement led to a use-after-free in ReadableByteStreams This vulnerability affects Firefox < 120, Firefo…
-
Unscored —
When using X11, text selected by the page using the Selection API was erroneously copied into the primary selection, a …
-
Unscored —
Relative URLs starting with three slashes were incorrectly parsed, and a path-traversal "/../" part in the path could b…
-
Unscored —
When an https: web page created a pop-up from a "javascript:" URL, that pop-up was incorrectly allowed to load blockabl…
-
Unscored —
If an attacker needed a user to load an insecure http: page and knew that user had enabled HTTPS-only mode, the attacke…
-
Unscored —
Memory safety bugs present in Firefox 119, Firefox ESR 115.4, and Thunderbird 115.4. Some of these bugs showed evidence…
-
Unscored —
Memory safety bugs present in Firefox 119. Some of these bugs showed evidence of memory corruption and we presume that …
References
-
report
https://ubuntu.com/security/CVE-2023-6204
-
report
https://ubuntu.com/security/CVE-2023-6205
-
report
https://ubuntu.com/security/CVE-2023-6206
-
report
https://ubuntu.com/security/CVE-2023-6207
-
report
https://ubuntu.com/security/CVE-2023-6208
-
report
https://ubuntu.com/security/CVE-2023-6209
-
report
https://ubuntu.com/security/CVE-2023-6210
-
report
https://ubuntu.com/security/CVE-2023-6211
-
report
https://ubuntu.com/security/CVE-2023-6212
-
report
https://ubuntu.com/security/CVE-2023-6213