USN-2936-1

See a problem?

Source

https://ubuntu.com/security/notices/USN-2936-1

Import Source

https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2936-1.json

JSON Data

https://api.osv.dev/v1/vulns/USN-2936-1

Related

Published

2016-04-27T12:24:50.515434Z

Modified

2016-04-27T12:24:50.515434Z

Summary

firefox vulnerabilities

Details

Christian Holler, Tyson Smith, Phil Ringalda, Gary Kwong, Jesse Ruderman, Mats Palmgren, Carsten Book, Boris Zbarsky, David Bolter, Randell Jesup, Andrew McCreight, and Steve Fink discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-2804, CVE-2016-2806, CVE-2016-2807)

An invalid write was discovered when using the JavaScript .watch() method in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-2808)

Looben Yang discovered a use-after-free and buffer overflow in service workers. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-2811, CVE-2016-2812)

Sascha Just discovered a buffer overflow in libstagefright in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code with the privileges of the user invoking Firefox. (CVE-2016-2814)

Muneaki Nishimura discovered that CSP is not applied correctly to web content sent with the multipart/x-mixed-replace MIME type. An attacker could potentially exploit this to conduct cross-site scripting (XSS) attacks when they would otherwise be prevented. (CVE-2016-2816)

Muneaki Nishimura discovered that the chrome.tabs.update API for web extensions allows for navigation to javascript: URLs. A malicious extension could potentially exploit this to conduct cross-site scripting (XSS) attacks. (CVE-2016-2817)

Mark Goodwin discovered that about:healthreport accepts certain events from any content present in the remote-report iframe. If another vulnerability allowed the injection of web content in the remote-report iframe, an attacker could potentially exploit this to change the user's sharing preferences. (CVE-2016-2820)

References

Affected packages

Ubuntu:14.04:LTS / firefox

Package

Name: firefox
Purl: pkg:deb/ubuntu/firefox@46.0+build5-0ubuntu0.14.04.2?arch=src?distro=trusty

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

46.0+build5-0ubuntu0.14.04.2

Affected versions

24.*

24.0+build1-0ubuntu1

25.*

25.0+build3-0ubuntu0.13.10.1

28.*

28.0~b2+build1-0ubuntu2

28.0+build1-0ubuntu1

28.0+build2-0ubuntu1

28.0+build2-0ubuntu2

29.*

29.0+build1-0ubuntu0.14.04.2

30.*

30.0+build1-0ubuntu0.14.04.3

31.*

31.0+build1-0ubuntu0.14.04.1

32.*

32.0+build1-0ubuntu0.14.04.1

32.0.3+build1-0ubuntu0.14.04.1

33.*

33.0+build2-0ubuntu0.14.04.1

34.*

34.0+build2-0ubuntu0.14.04.1

35.*

35.0+build3-0ubuntu0.14.04.2

35.0.1+build1-0ubuntu0.14.04.1

36.*

36.0+build2-0ubuntu0.14.04.4

36.0.1+build2-0ubuntu0.14.04.1

36.0.4+build1-0ubuntu0.14.04.1

37.*

37.0+build2-0ubuntu0.14.04.1

37.0.1+build1-0ubuntu0.14.04.1

37.0.2+build1-0ubuntu0.14.04.1

38.*

38.0+build3-0ubuntu0.14.04.1

39.*

39.0+build5-0ubuntu0.14.04.1

39.0.3+build2-0ubuntu0.14.04.1

40.*

40.0+build4-0ubuntu0.14.04.1

40.0+build4-0ubuntu0.14.04.4

40.0.3+build1-0ubuntu0.14.04.1

41.*

41.0+build3-0ubuntu0.14.04.1

41.0.1+build2-0ubuntu0.14.04.1

41.0.2+build2-0ubuntu0.14.04.1

42.*

42.0+build2-0ubuntu0.14.04.1

43.*

43.0+build1-0ubuntu0.14.04.1

43.0.4+build3-0ubuntu0.14.04.1

44.*

44.0+build3-0ubuntu0.14.04.1

44.0.1+build2-0ubuntu0.14.04.1

44.0.2+build1-0ubuntu0.14.04.1

45.*

45.0+build2-0ubuntu0.14.04.1

45.0.1+build1-0ubuntu0.14.04.2

45.0.2+build1-0ubuntu0.14.04.1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "firefox-locale-nl": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-kn": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-gl": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-sv": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-eo": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-fy": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-or": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-az": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-lt": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-hy": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-kk": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-km": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-uk": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-sr": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ca": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-is": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-dbg": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-testsuite": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ga": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-it": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ja": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-lg": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ms": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-dev": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-mozsymbols": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ko": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-hr": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-mai": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-nb": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-zh-hans": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-vi": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-he": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-sw": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-el": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-oc": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-xh": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-nn": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ar": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-csb": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-cs": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-gn": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-hsb": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-zu": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ro": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-globalmenu": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-af": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-nso": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-sk": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-si": "46.0+build5-0ubuntu0.14.04.2",
            "firefox": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-cy": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-dbgsym": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-fa": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-sq": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-en": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-tr": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-br": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-et": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ast": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-th": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-da": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-fi": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ku": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-mn": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ru": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-mk": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-bg": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-hu": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-gu": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-bn": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ml": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-an": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-be": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-eu": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-fr": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-pa": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-as": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-lv": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-mr": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-bs": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-te": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ta": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-ka": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-id": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-gd": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-hi": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-uz": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-pl": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-es": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-de": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-zh-hant": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-pt": "46.0+build5-0ubuntu0.14.04.2",
            "firefox-locale-sl": "46.0+build5-0ubuntu0.14.04.2"
        }
    ]
}

Ubuntu:16.04:LTS / firefox

Package

Name: firefox
Purl: pkg:deb/ubuntu/firefox@46.0+build5-0ubuntu0.16.04.2?arch=src?distro=xenial

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Fixed

46.0+build5-0ubuntu0.16.04.2

Affected versions

41.*

41.0.2+build2-0ubuntu1

42.*

42.0+build2-0ubuntu1

44.*

44.0+build3-0ubuntu2

44.0.1+build1-0ubuntu1

44.0.2+build1-0ubuntu1

45.*

45.0+build2-0ubuntu1

45.0.1+build1-0ubuntu1

45.0.2+build1-0ubuntu1

Ecosystem specific

{
    "availability": "No subscription required",
    "binaries": [
        {
            "firefox-locale-nl": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-kn": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-gl": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-sv": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-eo": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-fy": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-or": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-az": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-lt": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-hy": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-kk": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-km": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-uk": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-sr": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ca": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-is": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-dbg": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-testsuite": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ga": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-it": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ja": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-lg": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ms": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-dev": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-mozsymbols": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ko": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-hr": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-mai": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-nb": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-zh-hans": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-vi": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-he": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-sw": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-el": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-oc": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-xh": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-nn": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ar": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-csb": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-cs": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-gn": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-hsb": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-zu": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ro": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-globalmenu": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-af": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-nso": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-sk": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-si": "46.0+build5-0ubuntu0.16.04.2",
            "firefox": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-cy": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-dbgsym": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-fa": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-sq": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-en": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-tr": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-br": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-et": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ast": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-th": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-da": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-fi": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ku": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-mn": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ru": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-mk": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-bg": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-hu": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-gu": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-bn": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ml": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-an": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-be": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-eu": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-fr": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-pa": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-as": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-lv": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-mr": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-bs": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-te": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ta": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-ka": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-id": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-gd": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-hi": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-uz": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-pl": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-es": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-de": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-zh-hant": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-pt": "46.0+build5-0ubuntu0.16.04.2",
            "firefox-locale-sl": "46.0+build5-0ubuntu0.16.04.2"
        }
    ]
}