USN-2993-1

See a problem?
Source
https://ubuntu.com/security/notices/USN-2993-1
Import Source
https://github.com/canonical/ubuntu-security-notices/blob/main/osv/usn/USN-2993-1.json
JSON Data
https://api.osv.dev/v1/vulns/USN-2993-1
Related
Published
2016-06-09T15:13:22.892525Z
Modified
2016-06-09T15:13:22.892525Z
Summary
firefox vulnerabilities
Details

Christian Holler, Gary Kwong, Jesse Ruderman, Tyson Smith, Timothy Nikkel, Sylvestre Ledru, Julian Seward, Olli Pettay, Karl Tomlinson, Christoph Diehl, Julian Hector, Jan de Mooij, Mats Palmgren, and Tooru Fujisawa discovered multiple memory safety issues in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-2815, CVE-2016-2818)

A buffer overflow was discovered when parsing HTML5 fragments in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-2819)

A use-after-free was discovered in contenteditable mode in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-2821)

Jordi Chancel discovered a way to use a persistent menu within a <select> element and place this in an arbitrary location. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to spoof the addressbar contents. (CVE-2016-2822)

Armin Razmdjou that the location.host property can be set to an arbitrary string after creating an invalid data: URI. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to bypass some same-origin protections. (CVE-2016-2825)

A use-after-free was discovered when processing WebGL content in some circumstances. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service via application crash, or execute arbitrary code. (CVE-2016-2828)

Tim McCormack discovered that the permissions notification can show the wrong icon when a page requests several permissions in quick succession. An attacker could potentially exploit this by tricking the user in to giving consent for access to the wrong resource. (CVE-2016-2829)

It was discovered that a pointerlock can be created in a fullscreen window without user consent in some circumstances, and this pointerlock cannot be cancelled without quitting Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit this to cause a denial of service or conduct clickjacking attacks. (CVE-2016-2831)

John Schoenick discovered that CSS pseudo-classes can leak information about plugins that are installed but disabled. An attacker could potentially exploit this to fingerprint users. (CVE-2016-2832)

Matt Wobensmith discovered that Content Security Policy (CSP) does not block the loading of cross-domain Java applets when specified by policy. An attacker could potentially exploit this to bypass CSP protections and conduct cross-site scripting (XSS) attacks. (CVE-2016-2833)

In addition, multiple unspecified security issues were discovered in NSS. (CVE-2016-2834)

References

Affected packages

Ubuntu:14.04:LTS / firefox

Package

Name
firefox
Purl
pkg:deb/ubuntu/firefox@47.0+build3-0ubuntu0.14.04.1?arch=src?distro=trusty

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
47.0+build3-0ubuntu0.14.04.1

Affected versions

24.*

24.0+build1-0ubuntu1

25.*

25.0+build3-0ubuntu0.13.10.1

28.*

28.0~b2+build1-0ubuntu2
28.0+build1-0ubuntu1
28.0+build2-0ubuntu1
28.0+build2-0ubuntu2

29.*

29.0+build1-0ubuntu0.14.04.2

30.*

30.0+build1-0ubuntu0.14.04.3

31.*

31.0+build1-0ubuntu0.14.04.1

32.*

32.0+build1-0ubuntu0.14.04.1
32.0.3+build1-0ubuntu0.14.04.1

33.*

33.0+build2-0ubuntu0.14.04.1

34.*

34.0+build2-0ubuntu0.14.04.1

35.*

35.0+build3-0ubuntu0.14.04.2
35.0.1+build1-0ubuntu0.14.04.1

36.*

36.0+build2-0ubuntu0.14.04.4
36.0.1+build2-0ubuntu0.14.04.1
36.0.4+build1-0ubuntu0.14.04.1

37.*

37.0+build2-0ubuntu0.14.04.1
37.0.1+build1-0ubuntu0.14.04.1
37.0.2+build1-0ubuntu0.14.04.1

38.*

38.0+build3-0ubuntu0.14.04.1

39.*

39.0+build5-0ubuntu0.14.04.1
39.0.3+build2-0ubuntu0.14.04.1

40.*

40.0+build4-0ubuntu0.14.04.1
40.0+build4-0ubuntu0.14.04.4
40.0.3+build1-0ubuntu0.14.04.1

41.*

41.0+build3-0ubuntu0.14.04.1
41.0.1+build2-0ubuntu0.14.04.1
41.0.2+build2-0ubuntu0.14.04.1

42.*

42.0+build2-0ubuntu0.14.04.1

43.*

43.0+build1-0ubuntu0.14.04.1
43.0.4+build3-0ubuntu0.14.04.1

44.*

44.0+build3-0ubuntu0.14.04.1
44.0.1+build2-0ubuntu0.14.04.1
44.0.2+build1-0ubuntu0.14.04.1

45.*

45.0+build2-0ubuntu0.14.04.1
45.0.1+build1-0ubuntu0.14.04.2
45.0.2+build1-0ubuntu0.14.04.1

46.*

46.0+build5-0ubuntu0.14.04.2
46.0.1+build1-0ubuntu0.14.04.3

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "firefox-locale-nl": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-kn": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-gl": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-sv": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-eo": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-fy": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-or": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-az": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-lt": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-hy": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-kk": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-km": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-uk": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-sr": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ca": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-is": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-dbg": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-testsuite": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ga": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-it": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ja": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-lg": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ms": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-dev": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-mozsymbols": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ko": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-hr": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-mai": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-nb": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-zh-hans": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-vi": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-he": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-sw": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-el": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-oc": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-xh": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-nn": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ar": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-csb": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-hsb": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-cs": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-gn": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-zu": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ro": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-globalmenu": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-af": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-nso": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-sk": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-si": "47.0+build3-0ubuntu0.14.04.1",
            "firefox": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-cy": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-dbgsym": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-cak": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-sq": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-en": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-tr": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-br": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-et": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ast": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-th": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-da": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-fi": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ku": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-fa": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-mn": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ru": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-mk": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-bg": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-hu": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-gu": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-bn": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ml": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-an": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-be": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-eu": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-fr": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-pa": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-as": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-lv": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-mr": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-bs": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-te": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ta": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-ka": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-id": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-gd": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-hi": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-uz": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-pl": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-es": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-de": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-zh-hant": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-pt": "47.0+build3-0ubuntu0.14.04.1",
            "firefox-locale-sl": "47.0+build3-0ubuntu0.14.04.1"
        }
    ]
}

Ubuntu:16.04:LTS / firefox

Package

Name
firefox
Purl
pkg:deb/ubuntu/firefox@47.0+build3-0ubuntu0.16.04.1?arch=src?distro=xenial

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
47.0+build3-0ubuntu0.16.04.1

Affected versions

41.*

41.0.2+build2-0ubuntu1

42.*

42.0+build2-0ubuntu1

44.*

44.0+build3-0ubuntu2
44.0.1+build1-0ubuntu1
44.0.2+build1-0ubuntu1

45.*

45.0+build2-0ubuntu1
45.0.1+build1-0ubuntu1
45.0.2+build1-0ubuntu1

46.*

46.0+build5-0ubuntu0.16.04.2
46.0.1+build1-0ubuntu0.16.04.2

Ecosystem specific 

{
    "availability": "No subscription required",
    "binaries": [
        {
            "firefox-locale-nl": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-kn": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-gl": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-sv": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-eo": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-fy": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-or": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-az": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-lt": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-hy": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-kk": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-km": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-uk": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-sr": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ca": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-is": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-dbg": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-testsuite": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ga": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-it": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ja": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-lg": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ms": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-dev": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-mozsymbols": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ko": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-hr": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-mai": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-nb": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-zh-hans": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-vi": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-he": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-sw": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-el": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-oc": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-xh": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-nn": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ar": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-csb": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-hsb": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-cs": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-gn": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-zu": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ro": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-globalmenu": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-af": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-nso": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-sk": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-si": "47.0+build3-0ubuntu0.16.04.1",
            "firefox": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-cy": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-dbgsym": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-cak": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-sq": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-en": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-tr": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-br": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-et": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ast": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-th": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-da": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-fi": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ku": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-fa": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-mn": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ru": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-mk": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-bg": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-hu": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-gu": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-bn": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ml": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-an": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-be": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-eu": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-fr": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-pa": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-as": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-lv": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-mr": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-bs": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-te": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ta": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-ka": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-id": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-gd": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-hi": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-uz": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-pl": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-es": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-de": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-zh-hant": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-pt": "47.0+build3-0ubuntu0.16.04.1",
            "firefox-locale-sl": "47.0+build3-0ubuntu0.16.04.1"
        }
    ]
}