Home / mailings [USN-1121-1] firefox vulnerabilities
Posted on 30 April 2011
Ubuntu Security==========================
==========================
========================
Ubuntu Security Notice USN-1121-1
April 30, 2011
firefox vulnerabilities
==========================
==========================
========================
A security issue affects these releases of Ubuntu and its derivatives:
- Ubuntu 11.04
Summary:
Multiple firefox vulnerabilities
Software Description:
- firefox: Safe and easy web browser from Mozilla
Details:
Boris Zbarsky, Gary Kwong, Jesse Ruderman, Michael Wu, and Ted Mielczarek=
discovered multiple memory vulnerabilities. An attacker could exploit the=
se
to possibly run arbitrary code as the user running Firefox. (CVE-2011-007=
9)
It was discovered that there was a vulnerability in the memory handling o=
f
certain types of content. An attacker could exploit this to possibly run
arbitrary code as the user running Firefox. (CVE-2011-0081)
It was discovered that Firefox incorrectly handled certain JavaScript
requests. An attacker could exploit this to possibly run arbitrary code a=
s
the user running Firefox. (CVE-2011-0069)
Ian Beer discovered a vulnerability in the memory handling of a certain
types of documents. An attacker could exploit this to possibly run
arbitrary code as the user running Firefox. (CVE-2011-0070)
Chris Evans discovered a vulnerability in Firefox's XSLT generate-id()
function. An attacker could possibly use this vulnerability to make other=
attacks more reliable. (CVE-2011-1202)
Update instructions:
The problem can be corrected by updating your system to the following
package versions:
Ubuntu 11.04:
firefox 4.0.1+build1+nobinonly-0ubuntu0.11.04.1=
After a standard system update you need to restart Firefox to make all th=
e
necessary changes.
References:
CVE-2011-0079 CVE-2011-0081 CVE-2011-0069 CVE-2011-0070 CVE-2011-1202
Package Information:
https://launchpad.net/ubuntu/+source/firefox/4.0.1+build1+nobinonly-0ub=
untu0.11.04.1
------------
