MGASA-2017-0023

See a problem?
Please try reporting it to the source first.

Source

https://advisories.mageia.org/MGASA-2017-0023.html

Import Source

https://advisories.mageia.org/MGASA-2017-0023.json

JSON Data

https://api.test.osv.dev/v1/vulns/MGASA-2017-0023

Related

Published

2017-01-27T09:19:09Z

Modified

2017-01-27T09:08:07Z

Summary

Updated firefox packages fix security vulnerability

Details

Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox (CVE-2017-5373, CVE-2017-5375, CVE-2017-5376, CVE-2017-5378, CVE-2017-5380, CVE-2017-5383, CVE-2017-5386, CVE-2017-5390, CVE-2017-5396).

References

Credits

- Mageia - COORDINATOR
- - https://wiki.mageia.org/en/Packages_Security_Team

Affected packages

Mageia:5 / firefox

Package

Name: firefox
Purl: pkg:rpm/mageia/firefox?distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

45.7.0-1.mga5

Ecosystem specific

{
    "section": "core"
}

Mageia:5 / firefox-l10n

Package

Name: firefox-l10n
Purl: pkg:rpm/mageia/firefox-l10n?distro=mageia-5

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

45.7.0-1.mga5

Ecosystem specific

{
    "section": "core"
}