Red Hat Security Advisory

RHSA-2016:1551

firefox security update

Released 2016-08-03 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat Enterprise Linux (v. 5 server) firefox-45.3.0-1.el5_11, firefox-45.3.0-1.el5_11.i386
Red Hat Enterprise Linux Client (v. 7) firefox-45.3.0-1.el7_2
Red Hat Enterprise Linux Client Optional (v. 7) firefox-45.3.0-1.el7_2
Red Hat Enterprise Linux Desktop (v. 5 client) firefox-45.3.0-1.el5_11, firefox-45.3.0-1.el5_11.i386
Red Hat Enterprise Linux Desktop (v. 6) firefox-45.3.0-1.el6_8
Red Hat Enterprise Linux Desktop Optional (v. 6) firefox-45.3.0-1.el6_8
Red Hat Enterprise Linux HPC Node Optional (v. 6) firefox-45.3.0-1.el6_8
Red Hat Enterprise Linux Server (v. 6) firefox-45.3.0-1.el6_8
Red Hat Enterprise Linux Server (v. 7) firefox-45.3.0-1.el7_2
Red Hat Enterprise Linux Server Optional (v. 6) firefox-45.3.0-1.el6_8, firefox-45.3.0-1.el6_8.ppc
Red Hat Enterprise Linux Server Optional (v. 7) firefox-45.3.0-1.el7_2, firefox-45.3.0-1.el7_2.ppc
Red Hat Enterprise Linux Workstation (v. 6) firefox-45.3.0-1.el6_8
Red Hat Enterprise Linux Workstation (v. 7) firefox-45.3.0-1.el7_2
Red Hat Enterprise Linux Workstation Optional (v. 6) firefox-45.3.0-1.el6_8
Red Hat Enterprise Linux Workstation Optional (v. 7) firefox-45.3.0-1.el7_2

Fixes 12 records

TI-2016-04552 CVE-2016-5254 · GHSA-rr56-xh92-q28g

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla…

MEDIUM 47

Use-after-free vulnerability in the nsXULPopupManager::KeyDown function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows attackers to execute arbitrary code or cause a denial of service (heap memory…

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02953 Published 2016-08-05 Fixed CWE-416

TI-2016-02379 CVE-2016-2838 · GHSA-q8h4-5cvc-cmwh

Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla…

MEDIUM 45

Heap-based buffer overflow in the nsBidi::BracketData::AddOpening function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via directional content in an S…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.04506 Published 2016-08-05 Fixed CWE-119

TI-2016-04562 CVE-2016-5264 · GHSA-vj6g-r2j4-3gp8

Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function…

MEDIUM 44

Use-after-free vulnerability in the nsNodeUtils::NativeAnonymousChildListChange function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code or cause a denial…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03193 Published 2016-08-05 Fixed CWE-416

TI-2016-04557 CVE-2016-5259 · GHSA-93fp-mg63-wc9r

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla…

MEDIUM 44

Use-after-free vulnerability in the CanonicalizeXPCOMParticipant function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via a script that closes its own…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03259 Published 2016-08-05 Fixed CWE-416

TI-2016-04556 CVE-2016-5258 · GHSA-5v6h-wvqr-3crq

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0…

MEDIUM 44

Use-after-free vulnerability in the WebRTC socket thread in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code by leveraging incorrect free operations on DTLS o…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03259 Published 2016-08-05 Fixed CWE-416

TI-2016-04550 CVE-2016-5252 · GHSA-8vhf-hgr9-gmr5

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox…

MEDIUM 44

Stack-based buffer underflow in the mozilla::gfx::BasePoint4d function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allows remote attackers to execute arbitrary code via crafted two-dimensional graphic…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.03065 Published 2016-08-05 Fixed CWE-119

TI-2016-02377 CVE-2016-2836 · GHSA-458f-jrrc-3qjf

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0…

MEDIUM 43

Multiple unspecified vulnerabilities in the browser engine in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow remote attackers to cause a denial of service (memory corruption and application crash) or…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0289 Published 2016-08-05 Fixed CWE-119

TI-2016-04561 CVE-2016-5263 · GHSA-f56r-gj93-xc2f

The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x…

MEDIUM 42

The nsDisplayList::HitTest function in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 mishandles rendering display transformation, which allows remote attackers to execute arbitrary code via a crafted web s…

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.02253 Published 2016-08-05 Fixed CWE-704

TI-2016-02378 CVE-2016-2837 · GHSA-94c3-g97c-h69h

Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the…

LOW 35

Heap-based buffer overflow in the ClearKey Content Decryption Module (CDM) in the Encrypted Media Extensions (EME) API in Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 might allow remote attackers to execu…

CVSS 3.0MEDIUM 6.3 Network No auth User interaction EPSS 0.04577 Published 2016-08-05 Fixed CWE-119

TI-2016-04560 CVE-2016-5262 · GHSA-3qpq-w8fc-xx86

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript…

LOW 30

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 process JavaScript event-handler attributes of a MARQUEE element within a sandboxed IFRAME element that lacks the sandbox="allow-scripts" attribute value, whic…

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.01464 Published 2016-08-05 Fixed CWE-79

TI-2016-04563 CVE-2016-5265 · GHSA-vf6c-g2gw-jg5r

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote…

LOW 27

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 allow user-assisted remote attackers to bypass the Same Origin Policy, and conduct Universal XSS (UXSS) attacks or read arbitrary files, by arranging for the p…

CVSS 3.0MEDIUM 5.5 Local No auth User interaction EPSS 0.01247 Published 2016-08-05 Fixed CWE-200

TI-2016-02371 CVE-2016-2830 · GHSA-wfq5-5w67-p795

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network…

LOW 23

Mozilla Firefox before 48.0 and Firefox ESR 45.x before 45.3 preserve the network connection used for favicon resource retrieval after the associated browser window is closed, which makes it easier for remote web servers…

CVSS 3.0MEDIUM 4.3 Network No auth User interaction EPSS 0.01459 Published 2016-08-05 Fixed CWE-200