USN-3801-1

Dashboard / Vulnerabilities / USN-3801-1

USN-3801-1

Summary: firefox vulnerabilities

Details: Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, bypass CSP restrictions, spoof the protocol registration notification bar, leak SameSite cookies, bypass mixed content warnings, or execute arbitrary code. (CVE-2018-12388, CVE-2018-12390, CVE-2018-12392, CVE-2018-12393, CVE-2018-12398, CVE-2018-12399, CVE-2018-12401, CVE-2018-12402, CVE-2018-12403) Multiple security issues were discovered with WebExtensions in Firefox. If a user were tricked in to installing a specially crafted extension, an attacker could potentially exploit these to bypass domain restrictions, gain additional privileges, or run content scripts in local pages without permission. (CVE-2018-12395, CVE-2018-12396, CVE-2018-12397)

References: https://ubuntu.com/security/notices/USN-3801-1, https://ubuntu.com/security/CVE-2018-12388, https://ubuntu.com/security/CVE-2018-12390, https://ubuntu.com/security/CVE-2018-12392, https://ubuntu.com/security/CVE-2018-12393, https://ubuntu.com/security/CVE-2018-12395, https://ubuntu.com/security/CVE-2018-12396, https://ubuntu.com/security/CVE-2018-12397, https://ubuntu.com/security/CVE-2018-12398, https://ubuntu.com/security/CVE-2018-12399, https://ubuntu.com/security/CVE-2018-12401, https://ubuntu.com/security/CVE-2018-12402, https://ubuntu.com/security/CVE-2018-12403