SB2021042934 - Arch Linux update for firefox
Published: April 29, 2021
Breakdown by Severity
- Low
- Medium
- High
- Critical
Description
This security bulletin contains information about 11 secuirty vulnerabilities.
1) Out-of-bounds write (CVE-ID: CVE-2021-23994)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input within the WebGL framebuffer. A remote attacker can create a specially crafted web page, trick the victim into opening it using the affected software, trigger out-of-bounds write and execute arbitrary code on the target system.
2) Use-fater-free (CVE-ID: CVE-2021-23995)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a boundary error when processing untrusted input, when Responsive Design Mode is enabled. A remote attacker can create a specially crafted web page, trick the victim into opening it using the affected software, trigger a use-after-fee error and execute arbitrary code on the target system.
3) Security restrictions bypass (CVE-ID: CVE-2021-23996)
The vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to application allows content rendering outside of the webpage's viewport. A remote attacker can utilize 3D CSS in conjunction with JavaScript to spoof contents of a web page.
4) Use-after-free (CVE-ID: CVE-2021-23997)
The vulnerability allows a remote attacker to compromise vulnerable system.
The vulnerability exists due to a use-after-free error caused by unexpected data type conversions when freeing fonts from cache. A remote attacker can create a specially crafted web page, trick the victim into visiting it, trigger a use-after-free error and execute arbitrary code on the system.
Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.
5) Insecure Inherited Permissions (CVE-ID: CVE-2021-23998)
the vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to the way HTTP pages inherit a secure lock icon, when navigating from an HTTP page. A remote attacker can create a specially crafted webpage that through a series of complicated navigation will force the browser to display a secure lock icon on an unencrypted HTTP page.
6) Insecure Inherited Permissions (CVE-ID: CVE-2021-23999)
the vulnerability allows a remote attacker to perform spoofing attack.
The vulnerability exists due to the way Firefox handles Blob URLs. If a Blob URL was loaded through some unusual user interaction, it could have been loaded by the System Principal and granted additional privileges that should not be granted to web content.
7) Race condition (CVE-ID: CVE-2021-24000)
The vulnerability allows a remote attacker to perform clickjacking attack.
The vulnerability exists due to a race condition within requestPointerLock() and setTimeout() methods in conjunctions with certain elements, such as <input type="file">. A remote attacker can create a specially crafted web page that will result in a situation where a user interacting with one tab when they believed they were on a separate tab and gain access to sensitive information.
8) Security restrictions bypass (CVE-ID: CVE-2021-24001)
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to application does not properly impose security restrictions to testing infrastructure. A compromised content process could have performed session history manipulations it should not have been able to due to testing infrastructure that was not restricted to testing-only configurations.
9) Input validation error (CVE-ID: CVE-2021-24002)
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient validation of user-supplied input when processing newline characters in an FTP URL (such as %0A and %0D). A remote attacker can trick the victim to click on a specially crafted URL and execute arbitrary FTP commands on a remote server, given that victim has access to the FTP server.
10) Input validation error (CVE-ID: CVE-2021-29946)
The vulnerability allows a remote attacker to bypass implemented security restrictions.
The vulnerability exists due to insufficient validation of user-supplied input. Ports that were written as an integer overflow above the bounds of a 16-bit integer could have bypassed port blocking restrictions when used in the Alt-Svc header.
11) Buffer overflow (CVE-ID: CVE-2021-29947)
The vulnerability allows a remote attacker to execute arbitrary code on the target system.
The vulnerability exists due to a boundary error when processing web content. A remote attacker can create a specially crafted web page, trick the victim into opening it, trigger memory corruption and execute arbitrary code on the target system.
Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.
Remediation
Install update from vendor's website.