SB2021020131 - Ubuntu update for firefox
Published: February 1, 2021
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 11 secuirty vulnerabilities.
1) Information disclosure (CVE-ID: CVE-2021-23953)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to cross-origin information leak when processing PDF files. A remote attacker can create a specially crafted PDF file, trick the victim into opening it and gain access to sensitive information via redirected PDF requests, when said information is served as chunked data.
2) Type Confusion (CVE-ID: CVE-2021-23954)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a type confusion error when using the new logical assignment operators in a JavaScript switch statement. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger a type confusion error and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
3) Spoofing attack (CVE-ID: CVE-2021-23955)
The vulnerability allows a remote attacker to perform clickjacking attack.
The vulnerability exists due to misusing requestPointerLock. The browser could have been confused into transferring a pointer lock
state into another tab. A remote attacker can perform a clickjacking attack.
4) Spoofing attack (CVE-ID: CVE-2021-23956)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to confusing behavior of the file picker dialog. A remote attacker can trick the victim who intended to select and upload a single file into uploading a whole directory.
5) Resource management error (CVE-ID: CVE-2021-23958)
The vulnerability allows a remote attacker to gain access to sensitive information.
The vulnerability exists due to improper management of internal resources within the application. A remote attacker can confuse the browser into transferring a screen sharing state into another tab, which would leak unintended information.
6) Buffer overflow (CVE-ID: CVE-2021-23960)
The vulnerability allows a remote attacker to execute arbitrary code on the system.
7) Information disclosure (CVE-ID: CVE-2021-23961)
The vulnerability allows a remote attacker to gain access to potentially sensitive information.
The vulnerability exists due to the way Firefox handles requests to internal resources. A remote attacker can create a specially crafted web page and combined with slipstream research techniques collect information about hosts in internal network as well as services running on the user's local machine.
8) Buffer overflow (CVE-ID: CVE-2021-23962)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content in nsTreeBodyFrame::RowCountChanged. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption, which results in a user-after-poison and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
9) Resource management error (CVE-ID: CVE-2021-23963)
The vulnerability allows a remote attacker to perform a denial of service (DoS) attack.
The vulnerability exists due to improper management of internal resources within the application. When sharing geolocation during an active WebRTC share, Firefox could have reset the webRTC sharing state in the user interface, leading to loss of control over the currently granted permission.
10) Buffer overflow (CVE-ID: CVE-2021-23964)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content. A remote attacker can create a specially crafted website, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
11) Buffer overflow (CVE-ID: CVE-2021-23965)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing HTML content. A remote attacker can create a specially crafted website, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install update from vendor's website.