Kaspersky Threats

CVSS

?

7.5

Detect date

?

05/09/2018

Severity

?

Critical

Description

Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges, execute arbitrary code, perform XSS attacks and bypass security restrictions.

Below is a complete list of vulnerabilities:

A use-after-free vulnerability with SVG animations and clip paths can be exploited remotely to execute arbitrary code or cause denial of service;
A use-after-free vulnerability with SVG animations and text paths can be exploited remotely to execute arbitrary code or cause denial of service;
Same-origin bypass vulnerability in PDF Viewer can be exploited remotely to execute arbitrary code;
A code injection vulnerability in PDF Viewer can be exploited remotely to execute arbitrary code;
An integer overflow and out-of-bounds write in Skia can be exploited remotely to cause denial of service;
An uninitialized memory use in WebRTC encoder can be exploited remotely to cause denial of service;
An information leak vulnerability in WebExtentions can be exploited remotely to obtain sensitive information;
An out-of-bounds read vulnerability in mixed content websocket messages can be exploited remotely to cause denial of service;
A unspecified vulnerability in JavaScript Start-up Bytecode Cache can be exploited remotely to gain privileges;
An unspecified vulnerability in CSP can be exploited remotely to perform cross-site scripting attacks;
A permission bypass vulnerability in WebExtensions can be exploited remotely to bypass security restrictions;
An unspecified vulnerability in JavaScript debugger can be exploited remotely to perform unspecified attacks;
An unspecified vulnerability can be exploited remotely to bypass security restrictions;
An unspecified vulnerability can be exploited remotely to execute arbitrary code;
An unspecified vulnerability can be exploited remotely to obtain sensitive information;
An unspecified vulnerability can be exploited remotely to execute arbitrary code;
An unspecified vulnerability in CSP can be exploited remotely to bypass security restrictions;
A script injection vulnerability in JSON Viewer can be exploited remotely to obtain sensitive information;
A buffer overflow vulnerability in XSLT can be exploited remotely to cause denial of service;
A buffer overflow vulnerability can be exploited remotely via UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data to cause denial of service;
A vulnerability related to Flash protected mode can be exploited remotely to perform unspecified attacks;
An use-after-free vulnerability in WebGL can be exploited remotely to cause denial of service;

Technical details

Vulnerabilities (6)-(15) and (17)-(19), (21), (22) only affects Mozilla Firefox;

Vulnerability (20) only affects Mozilla Firefox ESR;

Vulnerability (16) only affects Windows 10 users running the April 2018 update or later. It does not affect other Windows users or other operating systems.

NB: At this moment Mozilla has just reserved CVE numbers for these vulnerabilities. Information can be changed soon.

Affected products

Mozilla Firefox earlier than 60
Mozilla Firefox ESR earlier than 52.8

Solution

Update to the latest version
Download Mozilla Firefox ESR
Download Mozilla Firefox

Original advisories

Mozilla Foundation Security Advisory 2018-11
Mozilla Foundation Security Advisory 2018-12

Impacts

?

ACE

[?]

OSI

[?]

XSSCSS

[?]

SB

[?]

PE

[?]

DoS

[?]

CVSS ?	7.5
Detect date ?	05/09/2018
Severity ?	Critical
Description	Multiple serious vulnerabilities have been found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to obtain sensitive information, cause denial of service, gain privileges, execute arbitrary code, perform XSS attacks and bypass security restrictions. Below is a complete list of vulnerabilities: A use-after-free vulnerability with SVG animations and clip paths can be exploited remotely to execute arbitrary code or cause denial of service; A use-after-free vulnerability with SVG animations and text paths can be exploited remotely to execute arbitrary code or cause denial of service; Same-origin bypass vulnerability in PDF Viewer can be exploited remotely to execute arbitrary code; A code injection vulnerability in PDF Viewer can be exploited remotely to execute arbitrary code; An integer overflow and out-of-bounds write in Skia can be exploited remotely to cause denial of service; An uninitialized memory use in WebRTC encoder can be exploited remotely to cause denial of service; An information leak vulnerability in WebExtentions can be exploited remotely to obtain sensitive information; An out-of-bounds read vulnerability in mixed content websocket messages can be exploited remotely to cause denial of service; A unspecified vulnerability in JavaScript Start-up Bytecode Cache can be exploited remotely to gain privileges; An unspecified vulnerability in CSP can be exploited remotely to perform cross-site scripting attacks; A permission bypass vulnerability in WebExtensions can be exploited remotely to bypass security restrictions; An unspecified vulnerability in JavaScript debugger can be exploited remotely to perform unspecified attacks; An unspecified vulnerability can be exploited remotely to bypass security restrictions; An unspecified vulnerability can be exploited remotely to execute arbitrary code; An unspecified vulnerability can be exploited remotely to obtain sensitive information; An unspecified vulnerability can be exploited remotely to execute arbitrary code; An unspecified vulnerability in CSP can be exploited remotely to bypass security restrictions; A script injection vulnerability in JSON Viewer can be exploited remotely to obtain sensitive information; A buffer overflow vulnerability in XSLT can be exploited remotely to cause denial of service; A buffer overflow vulnerability can be exploited remotely via UTF8 to Unicode string conversion within JavaScript with extremely large amounts of data to cause denial of service; A vulnerability related to Flash protected mode can be exploited remotely to perform unspecified attacks; An use-after-free vulnerability in WebGL can be exploited remotely to cause denial of service; Technical details Vulnerabilities (6)-(15) and (17)-(19), (21), (22) only affects Mozilla Firefox; Vulnerability (20) only affects Mozilla Firefox ESR; Vulnerability (16) only affects Windows 10 users running the April 2018 update or later. It does not affect other Windows users or other operating systems. NB: At this moment Mozilla has just reserved CVE numbers for these vulnerabilities. Information can be changed soon.
Affected products	Mozilla Firefox earlier than 60 Mozilla Firefox ESR earlier than 52.8
Solution	Update to the latest version Download Mozilla Firefox ESR Download Mozilla Firefox
Original advisories	Mozilla Foundation Security Advisory 2018-11 Mozilla Foundation Security Advisory 2018-12
Impacts ?	ACE [?] OSI [?] XSSCSS [?] SB [?] PE [?] DoS [?]
Related products	Mozilla Firefox ESR Mozilla Firefox
CVE-IDS ?	CVE-2018-5150 CVE-2018-5151 CVE-2018-5182 CVE-2018-5181 CVE-2018-5180 CVE-2018-5165 CVE-2018-5177 CVE-2018-5176 CVE-2018-5175 CVE-2018-5174 CVE-2018-5173 CVE-2018-5172 CVE-2018-5169 CVE-2018-5168 CVE-2018-5167 CVE-2018-5166 CVE-2018-5164 CVE-2018-5163 CVE-2018-5153 CVE-2018-5152 CVE-2018-5160 CVE-2018-5159 CVE-2018-5158 CVE-2018-5157 CVE-2018-5155 CVE-2018-5154