RHSA-2017:2831CriticalCVSS 9.8
Red Hat Security Advisory: firefox security update
🔗 CVE IDs covered (7)
📋 Description
CVE-2017-7793 — Mozilla: Use-after-free with Fetch API (MFSA 2017-22) CVE-2017-7810 — Mozilla: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4 (MFSA 2017-22) CVE-2017-7814 — Mozilla: Blob and data URLs bypass phishing and malware protection warnings (MFSA 2017-22) CVE-2017-7818 — Mozilla: Use-after-free during ARIA array manipulation (MFSA 2017-22) CVE-2017-7819 — Mozilla: Use-after-free while resizing images in design mode (MFSA 2017-22) CVE-2017-7823 — Mozilla: CSP sandbox directive did not create a unique origin (MFSA 2017-22) CVE-2017-7824 — Mozilla: Buffer overflow when drawing and validating elements with ANGLE (MFSA 2017-22)
🔗 References (11)
- selfhttps://access.redhat.com/errata/RHSA-2017:2831
- externalhttps://access.redhat.com/security/updates/classification/#critical
- externalhttps://www.mozilla.org/en-US/security/advisories/mfsa2017-22/
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1496649
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1496651
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1496652
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1496653
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1496654
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1496655
- externalhttps://bugzilla.redhat.com/show_bug.cgi?id=1496656
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2017/rhsa-2017_2831.json