Описание
Security update for MozillaFirefox, MozillaFirefox-branding-SLE
The MozillaFirefox was updated to the new ESR 52.2 release, which fixes the following issues (bsc#1043960):
- MFSA 2017-16/CVE-2017-7758 Out-of-bounds read in Opus encoder
- MFSA 2017-16/CVE-2017-7749 Use-after-free during docshell reloading
- MFSA 2017-16/CVE-2017-7751 Use-after-free with content viewer listeners
- MFSA 2017-16/CVE-2017-5472 Use-after-free using destroyed node when regenerating trees
- MFSA 2017-16/CVE-2017-5470 Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- MFSA 2017-16/CVE-2017-7752 Use-after-free with IME input
- MFSA 2017-16/CVE-2017-7750 Use-after-free with track elements
- MFSA 2017-16/CVE-2017-7768 32 byte arbitrary file read through Mozilla Maintenance Service
- MFSA 2017-16/CVE-2017-7778 Vulnerabilities in the Graphite 2 library
- MFSA 2017-16/CVE-2017-7754 Out-of-bounds read in WebGL with ImageInfo object
- MFSA 2017-16/CVE-2017-7755 Privilege escalation through Firefox Installer with same directory DLL files
- MFSA 2017-16/CVE-2017-7756 Use-after-free and use-after-scope logging XHR header errors
- MFSA 2017-16/CVE-2017-7757 Use-after-free in IndexedDB
- MFSA 2017-16/CVE-2017-7761 File deletion and privilege escalation through Mozilla Maintenance Service helper.exe application
- MFSA 2017-16/CVE-2017-7763 Mac fonts render some unicode characters as spaces
- MFSA 2017-16/CVE-2017-7765 Mark of the Web bypass when saving executable files
- MFSA 2017-16/CVE-2017-7764 (bmo#1364283, bmo#http://www.unicode.org/reports/tr31/tr31-26 .html#Aspirational_Use_Scripts) Domain spoofing with combination of Canadian Syllabics and other unicode blocks
- update to Firefox ESR 52.1 (bsc#1035082)
- MFSA 2017-12/CVE-2016-10196 Vulnerabilities in Libevent library
- MFSA 2017-12/CVE-2017-5443 Out-of-bounds write during BinHex decoding
- MFSA 2017-12/CVE-2017-5429 Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and Firefox ESR 52.1
- MFSA 2017-12/CVE-2017-5464 Memory corruption with accessibility and DOM manipulation
- MFSA 2017-12/CVE-2017-5465 Out-of-bounds read in ConvolvePixel
- MFSA 2017-12/CVE-2017-5466 Origin confusion when reloading isolated data:text/html URL
- MFSA 2017-12/CVE-2017-5467 Memory corruption when drawing Skia content
- MFSA 2017-12/CVE-2017-5460 Use-after-free in frame selection
- MFSA 2017-12/CVE-2017-5461 Out-of-bounds write in Base64 encoding in NSS
- MFSA 2017-12/CVE-2017-5448 Out-of-bounds write in ClearKeyDecryptor
- MFSA 2017-12/CVE-2017-5449 Crash during bidirectional unicode manipulation with animation
- MFSA 2017-12/CVE-2017-5446 Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
- MFSA 2017-12/CVE-2017-5447 Out-of-bounds read during glyph processing
- MFSA 2017-12/CVE-2017-5444 Buffer overflow while parsing application/http-index-format content
- MFSA 2017-12/CVE-2017-5445 Uninitialized values used while parsing application/http- index-format content
- MFSA 2017-12/CVE-2017-5442 Use-after-free during style changes
- MFSA 2017-12/CVE-2017-5469 Potential Buffer overflow in flex-generated code
- MFSA 2017-12/CVE-2017-5440 Use-after-free in txExecutionState destructor during XSLT processing
- MFSA 2017-12/CVE-2017-5441 Use-after-free with selection during scroll events
- MFSA 2017-12/CVE-2017-5439 Use-after-free in nsTArray Length() during XSLT processing
- MFSA 2017-12/CVE-2017-5438 Use-after-free in nsAutoPtr during XSLT processing
- MFSA 2017-12/CVE-2017-5436 Out-of-bounds write with malicious font in Graphite 2
- MFSA 2017-12/CVE-2017-5435 Use-after-free during transaction processing in the editor
- MFSA 2017-12/CVE-2017-5434 Use-after-free during focus handling
- MFSA 2017-12/CVE-2017-5433 Use-after-free in SMIL animation functions
- MFSA 2017-12/CVE-2017-5432 Use-after-free in text input selection
- MFSA 2017-12/CVE-2017-5430 Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
- MFSA 2017-12/CVE-2017-5459 Buffer overflow in WebGL
- MFSA 2017-12/CVE-2017-5462 DRBG flaw in NSS
- MFSA 2017-12/CVE-2017-5455 Sandbox escape through internal feed reader APIs
- MFSA 2017-12/CVE-2017-5454 Sandbox escape allowing file system read access through file picker
- MFSA 2017-12/CVE-2017-5456 Sandbox escape allowing local file system access
- MFSA 2017-12/CVE-2017-5451 Addressbar spoofing with onblur event
Список пакетов
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12
SUSE Linux Enterprise Server for SAP Applications 12 SP1
SUSE Linux Enterprise Server for SAP Applications 12 SP2
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE OpenStack Cloud 6
Ссылки
- Link for SUSE-SU-2017:1669-1
- E-Mail link for SUSE-SU-2017:1669-1
- SUSE Security Ratings
- SUSE Bug 1035082
- SUSE Bug 1043960
- SUSE CVE CVE-2016-10196 page
- SUSE CVE CVE-2017-5429 page
- SUSE CVE CVE-2017-5430 page
- SUSE CVE CVE-2017-5432 page
- SUSE CVE CVE-2017-5433 page
- SUSE CVE CVE-2017-5434 page
- SUSE CVE CVE-2017-5435 page
- SUSE CVE CVE-2017-5436 page
- SUSE CVE CVE-2017-5438 page
- SUSE CVE CVE-2017-5439 page
- SUSE CVE CVE-2017-5440 page
- SUSE CVE CVE-2017-5441 page
- SUSE CVE CVE-2017-5442 page
- SUSE CVE CVE-2017-5443 page
- SUSE CVE CVE-2017-5444 page
Описание
Stack-based buffer overflow in the evutil_parse_sockaddr_port function in evutil.c in libevent before 2.1.6-beta allows attackers to cause a denial of service (segmentation fault) via vectors involving a long string in brackets in the ip_as_string argument.
Затронутые продукты
Ссылки
- CVE-2016-10196
- SUSE Bug 1022918
- SUSE Bug 1035082
- SUSE Bug 1035209
- SUSE Bug 1075618
Описание
Memory safety bugs were reported in Firefox 52, Firefox ESR 45.8, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5429
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
Memory safety bugs were reported in Firefox 52, Firefox ESR 52, and Thunderbird 52. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5430
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A use-after-free vulnerability occurs during certain text input selection resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5432
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A use-after-free vulnerability in SMIL animation functions occurs when pointers to animation elements in an array are dropped from the animation controller while still in use. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5433
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A use-after-free vulnerability occurs when redirecting focus handling which results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5434
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A use-after-free vulnerability occurs during transaction processing in the editor during design mode interactions. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5435
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
An out-of-bounds write in the Graphite 2 library triggered with a maliciously crafted Graphite font. This results in a potentially exploitable crash. This issue was fixed in the Graphite 2 library as well as Mozilla products. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5436
- SUSE Bug 1035082
- SUSE Bug 1035204
Описание
A use-after-free vulnerability during XSLT processing due to the result handler being held by a freed handler during handling. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5438
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A use-after-free vulnerability during XSLT processing due to poor handling of template parameters. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5439
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A use-after-free vulnerability during XSLT processing due to a failure to propagate error conditions during matching while evaluating context, leading to objects being used when they no longer exist. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5440
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A use-after-free vulnerability when holding a selection during scroll events. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5441
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A use-after-free vulnerability during changes in style when manipulating DOM elements. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5442
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
An out-of-bounds write vulnerability while decoding improperly formed BinHex format archives. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5443
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A buffer overflow vulnerability while parsing "application/http-index-format" format content when the header contains improperly formatted data. This allows for an out-of-bounds read of data from memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5444
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A vulnerability while parsing "application/http-index-format" format content where uninitialized values are used to create an array. This could allow the reading of uninitialized memory into the arrays affected. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5445
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
An out-of-bounds read when an HTTP/2 connection to a servers sends "DATA" frames with incorrect data content. This leads to a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5446
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
An out-of-bounds read during the processing of glyph widths during text layout. This results in a potentially exploitable crash and could allow an attacker to read otherwise inaccessible memory. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5447
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
An out-of-bounds write in "ClearKeyDecryptor" while decrypting some Clearkey-encrypted media content. The "ClearKeyDecryptor" code runs within the Gecko Media Plugin (GMP) sandbox. If a second mechanism is found to escape the sandbox, this vulnerability allows for the writing of arbitrary data within memory, resulting in a potentially exploitable crash. This vulnerability affects Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5448
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A possibly exploitable crash triggered during layout and manipulation of bidirectional unicode text in concert with CSS animations. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5449
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A mechanism to spoof the addressbar through the user interaction on the addressbar and the "onblur" event. The event could be used by script to affect text display to make the loaded site appear to be different from the one actually loaded within the addressbar. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5451
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A mechanism to bypass file system access protections in the sandbox to use the file picker to access different files than those selected in the file picker through the use of relative paths. This allows for read only access to the local file system. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5454
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
The internal feed reader APIs that crossed the sandbox barrier allowed for a sandbox escape and escalation of privilege if combined with another vulnerability that resulted in remote code execution inside the sandboxed process. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5455
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A mechanism to bypass file system access protections in the sandbox using the file system request constructor through an IPC message. This allows for read and write access to the local file system. This vulnerability affects Firefox ESR < 52.1 and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5456
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A buffer overflow in WebGL triggerable by web content, resulting in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5459
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A use-after-free vulnerability in frame selection triggered by a combination of malicious script content and key presses by a user. This results in a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5460
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
Mozilla Network Security Services (NSS) before 3.21.4, 3.22.x through 3.28.x before 3.28.4, 3.29.x before 3.29.5, and 3.30.x before 3.30.1 allows remote attackers to cause a denial of service (out-of-bounds write) or possibly have unspecified other impact by leveraging incorrect base64 operations.
Затронутые продукты
Ссылки
- CVE-2017-5461
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A flaw in DRBG number generation within the Network Security Services (NSS) library where the internal state V does not correctly carry bits over. The NSS library has been updated to fix this issue to address this issue and Firefox ESR 52.1 has been updated with NSS version 3.28.4. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5462
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
During DOM manipulations of the accessibility tree through script, the DOM tree can become out of sync with the accessibility tree, leading to memory corruption and a potentially exploitable crash. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5464
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
An out-of-bounds read while processing SVG content in "ConvolvePixel". This results in a crash and also allows for otherwise inaccessible memory being copied into SVG graphic content, which could then displayed. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5465
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
If a page is loaded from an original site through a hyperlink and contains a redirect to a "data:text/html" URL, triggering a reload will run the reloaded "data:text/html" page with its origin set incorrectly. This allows for a cross-site scripting (XSS) attack. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5466
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
A potential memory corruption and crash when using Skia content when drawing content outside of the bounds of a clipping region. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5467
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
Fixed potential buffer overflows in generated Firefox code due to CVE-2016-6354 issue in Flex. This vulnerability affects Thunderbird < 52.1, Firefox ESR < 45.9, Firefox ESR < 52.1, and Firefox < 53.
Затронутые продукты
Ссылки
- CVE-2017-5469
- SUSE Bug 1035082
- SUSE Bug 1035209
Описание
Memory safety bugs were reported in Firefox 53 and Firefox ESR 52.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort that some of these could be exploited to run arbitrary code. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-5470
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
A use-after-free vulnerability with the frameloader during tree reconstruction while regenerating CSS layout when attempting to use a node in the tree that no longer exists. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-5472
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
A use-after-free vulnerability when using an incorrect URL during the reloading of a docshell. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7749
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
A use-after-free vulnerability during video control operations when a "<track>" element holds a reference to an older window if that window has been replaced in the DOM. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7750
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
A use-after-free vulnerability with content viewer listeners that results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7751
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
A use-after-free vulnerability during specific user interactions with the input method editor (IME) in some languages due to how events are handled. This results in a potentially exploitable crash but would require specific user interaction to trigger. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7752
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
An out-of-bounds read in WebGL with a maliciously crafted "ImageInfo" object during WebGL operations. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7754
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
The Firefox installer on Windows can be made to load malicious DLL files stored in the same directory as the installer when it is run. This allows privileged execution if the installer is run with elevated privileges. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7755
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
A use-after-free and use-after-scope vulnerability when logging errors from headers for XML HTTP Requests (XHR). This could result in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7756
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
A use-after-free vulnerability in IndexedDB when one of its objects is destroyed in memory while a method on it is still being executed. This results in a potentially exploitable crash. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7757
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
An out-of-bounds read vulnerability with the Opus encoder when the number of channels in an audio stream changes while the encoder is in use. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7758
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
The Mozilla Maintenance Service "helper.exe" application creates a temporary directory writable by non-privileged users. When this is combined with creation of a junction (a form of symbolic link), protected files in the target directory of the junction can be deleted by the Mozilla Maintenance Service, which has privileged access. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54.
Затронутые продукты
Ссылки
- CVE-2017-7761
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
Default fonts on OS X display some Tibetan characters as whitespace. When used in the addressbar as part of an IDN this can be used for domain name spoofing attacks. Note: This attack only affects OS X operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7763
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
Characters from the "Canadian Syllabics" unicode block can be mixed with characters from other unicode blocks in the addressbar instead of being rendered as their raw "punycode" form, allowing for domain name spoofing attacks through character confusion. The current Unicode standard allows characters from "Aspirational Use Scripts" such as Canadian Syllabics to be mixed with Latin characters in the "moderately restrictive" IDN profile. We have changed Firefox behavior to match the upcoming Unicode version 10.0 which removes this category and treats them as "Limited Use Scripts.". This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7764
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
The "Mark of the Web" was not correctly saved on Windows when files with very long names were downloaded from the Internet. Without the Mark of the Web data, the security warning that Windows displays before running executables downloaded from the Internet is not shown. Note: This attack only affects Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7765
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the service that it is reading a status file provided by the Mozilla Windows Updater. The Mozilla Maintenance Service executes with privileged access, bypassing system protections against unprivileged users. Note: This attack requires local system access and only affects Windows. Other operating systems are not affected. This vulnerability affects Firefox ESR < 52.2 and Firefox < 54.
Затронутые продукты
Ссылки
- CVE-2017-7768
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242
Описание
A number of security vulnerabilities in the Graphite 2 library including out-of-bounds reads, buffer overflow reads and writes, and the use of uninitialized memory. These issues were addressed in Graphite 2 version 1.3.10. This vulnerability affects Firefox < 54, Firefox ESR < 52.2, and Thunderbird < 52.2.
Затронутые продукты
Ссылки
- CVE-2017-7778
- SUSE Bug 1043960
- SUSE Bug 1044239
- SUSE Bug 1044240
- SUSE Bug 1044241
- SUSE Bug 1044242