USN-4926-1

Dashboard / Vulnerabilities / USN-4926-1

USN-4926-1

Summary: firefox vulnerabilities

Details: Multiple security issues were discovered in Firefox. If a user were tricked into opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, bypass security restrictions, trick the user into disclosing confidential information, or execute arbitrary code. (CVE-2021-23994, CVE-2021-23996, CVE-2021-23997, CVE-2021-23998, CVE-2021-23999, CVE-2021-24000, CVE-2021-24001, CVE-2021-29945, CVE-2021-29946, CVE-2021-29947) A use-after-free was discovered when Responsive Design Mode was enabled. If a user were tricked into opening a specially crafted website with Responsive Design Mode enabled, an attacker could potentially exploit this to cause a denial of service, or execute arbitrary code. (CVE-2021-23995) It was discovered that Firefox mishandled ftp URLs with encoded newline characters. If a user were tricked into clicking on a specially crafted link, an attacker could potentially exploit this to send arbitrary FTP commands. (CVE-2021-24002)

References: https://ubuntu.com/security/notices/USN-4926-1, https://ubuntu.com/security/CVE-2021-23994, https://ubuntu.com/security/CVE-2021-23995, https://ubuntu.com/security/CVE-2021-23996, https://ubuntu.com/security/CVE-2021-23997, https://ubuntu.com/security/CVE-2021-23998, https://ubuntu.com/security/CVE-2021-23999, https://ubuntu.com/security/CVE-2021-24000, https://ubuntu.com/security/CVE-2021-24001, https://ubuntu.com/security/CVE-2021-24002, https://ubuntu.com/security/CVE-2021-29945, https://ubuntu.com/security/CVE-2021-29946, https://ubuntu.com/security/CVE-2021-29947