1. Home
  2. Security Advisories
  3. Red Hat
  4. RHSA-2017:0461

[RHSA-2017:0461] firefox security update

Severity Critical
Affected Packages 8
CVEs 9
Info Packages References Vulnerabilities

Mozilla Firefox is an open source web browser.

This update upgrades Firefox to version 52.0 ESR.

Security Fix(es):

  • Multiple flaws were found in the processing of malformed web content. A web page containing malicious content could cause Firefox to crash or, potentially, execute arbitrary code with the privileges of the user running Firefox. (CVE-2017-5398, CVE-2017-5400, CVE-2017-5401, CVE-2017-5402, CVE-2017-5404, CVE-2017-5407, CVE-2017-5408, CVE-2017-5410, CVE-2017-5405)

Red Hat would like to thank the Mozilla project for reporting these issues. Upstream acknowledges Nils, Jerri Rice, Rh0, Anton Eliasson, David Kohlbrenner, Ivan Fratric of Google Project Zero, Anonymous, Eric Lawrence of Chrome Security, Boris Zbarsky, Christian Holler, Honza Bambas, Jon Coppeard, Randell Jesup, André Bargull, Kan-Ru Chen, and Nathan Froyd as the original reporters.

Package Affected Version
pkg:rpm/redhat/firefox?arch=x86_64&distro=redhat-7.3 < 52.0-4.el7_3
pkg:rpm/redhat/firefox?arch=s390x&distro=redhat-7.3 < 52.0-4.el7_3
pkg:rpm/redhat/firefox?arch=s390&distro=redhat-7.3 < 52.0-4.el7_3
pkg:rpm/redhat/firefox?arch=ppc64le&distro=redhat-7.3 < 52.0-4.el7_3
pkg:rpm/redhat/firefox?arch=ppc64&distro=redhat-7.3 < 52.0-4.el7_3
pkg:rpm/redhat/firefox?arch=ppc&distro=redhat-7.3 < 52.0-4.el7_3
pkg:rpm/redhat/firefox?arch=i686&distro=redhat-7.3 < 52.0-4.el7_3
pkg:rpm/redhat/firefox?arch=aarch64&distro=redhat-7.3 < 52.0-4.el7_3
ID
RHSA-2017:0461
Severity
critical
URL
https://access.redhat.com/errata/RHSA-2017:0461
Published
2017-03-08T00:00:00
(7 years ago)
Modified
2017-03-08T00:00:00
(7 years ago)
Rights
Copyright 2017 Red Hat, Inc.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/redhat/firefox?arch=x86_64&distro=redhat-7.3 redhat firefox < 52.0-4.el7_3 redhat-7.3 x86_64
Affected pkg:rpm/redhat/firefox?arch=s390x&distro=redhat-7.3 redhat firefox < 52.0-4.el7_3 redhat-7.3 s390x
Affected pkg:rpm/redhat/firefox?arch=s390&distro=redhat-7.3 redhat firefox < 52.0-4.el7_3 redhat-7.3 s390
Affected pkg:rpm/redhat/firefox?arch=ppc64le&distro=redhat-7.3 redhat firefox < 52.0-4.el7_3 redhat-7.3 ppc64le
Affected pkg:rpm/redhat/firefox?arch=ppc64&distro=redhat-7.3 redhat firefox < 52.0-4.el7_3 redhat-7.3 ppc64
Affected pkg:rpm/redhat/firefox?arch=ppc&distro=redhat-7.3 redhat firefox < 52.0-4.el7_3 redhat-7.3 ppc
Affected pkg:rpm/redhat/firefox?arch=i686&distro=redhat-7.3 redhat firefox < 52.0-4.el7_3 redhat-7.3 i686
Affected pkg:rpm/redhat/firefox?arch=aarch64&distro=redhat-7.3 redhat firefox < 52.0-4.el7_3 redhat-7.3 aarch64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date