MGASA-2015-0089

Dashboard / Vulnerabilities / MGASA-2015-0089

MGASA-2015-0089

Summary: Updated firefox and thunderbird packages fix security vulnerabilities

Details: Updated firefox and thunderbird packages fix security vulnerabilities: Several flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox or Thunderbird to crash or, potentially, execute arbitrary code with the privileges of the user running it (CVE-2015-0836, CVE-2015-0831, CVE-2015-0827). An information leak flaw was found in the way Firefox and Thunderbird implemented autocomplete forms. An attacker able to trick a user into specifying a local file in the form could use this flaw to access the contents of that file (CVE-2015-0822).

References: https://advisories.mageia.org/MGASA-2015-0089.html, https://bugs.mageia.org/show_bug.cgi?id=15356, https://www.mozilla.org/en-US/security/advisories/mfsa2015-11/, https://www.mozilla.org/en-US/security/advisories/mfsa2015-16/, https://www.mozilla.org/en-US/security/advisories/mfsa2015-19/, https://www.mozilla.org/en-US/security/advisories/mfsa2015-24/, https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr/, https://www.mozilla.org/en-US/security/known-vulnerabilities/thunderbird/, https://rhn.redhat.com/errata/RHSA-2015-0265.html, https://rhn.redhat.com/errata/RHSA-2015-0266.html