Ubuntu 12.04 LTS / 14.04 LTS / 15.04 : ubufox update (USN-2702-2)

Ubuntu Security Notice (C) 2015-2016 Canonical, Inc. / NASL script (C) 2015-2016 Tenable Network Security, Inc.


Synopsis :

The remote Ubuntu host is missing a security-related patch.

Description :

USN-2702-1 fixed vulnerabilities in Firefox. This update provides the
corresponding updates for Ubufox.

Gary Kwong, Christian Holler, Byron Campen, Tyson Smith, Bobby Holley,
Chris Coulson, and Eric Rahm discovered multiple memory safety issues
in Firefox. If a user were tricked in to opening a specially crafted
website, an attacker could potentially exploit these to cause a denial
of service via application crash, or execute arbitrary code with the
privileges of the user invoking Firefox. (CVE-2015-4473,
CVE-2015-4474)

Aki Helin discovered an out-of-bounds read when playing
malformed MP3 content in some circumstances. If a user were
tricked in to opening a specially crafted website, an
attacker could potentially exploit this to obtain sensitive
information, cause a denial of service via application
crash, or execute arbitrary code with the privileges of the
user invoking Firefox. (CVE-2015-4475)

A use-after-free was discovered during MediaStream playback
in some circumstances. If a user were tricked in to opening
a specially crafted website, an attacker could potentially
exploit this to cause a denial of service via application
crash or execute arbitrary code with the priviliges of the
user invoking Firefox. (CVE-2015-4477)

Andre Bargull discovered that non-configurable properties
on JavaScript objects could be redefined when parsing JSON.
If a user were tricked in to opening a specially crafted
website, an attacker could potentially exploit this to
bypass same-origin restrictions. (CVE-2015-4478)

Multiple integer overflows were discovered in
libstagefright. If a user were tricked in to opening a
specially crafted website, an attacker could potentially
exploit these to cause a denial of service via application
crash, or execute arbitrary code with the privileges of the
user invoking Firefox. (CVE-2015-4479, CVE-2015-4480,
CVE-2015-4493)

Jukka Jylanki discovered a crash that occurs because
JavaScript does not properly gate access to Atomics or
SharedArrayBuffers in some circumstances. If a user were
tricked in to opening a specially crafted website, an
attacker could potentially exploit this to cause a denial of
service. (CVE-2015-4484)

Abhishek Arya discovered 2 buffer overflows in libvpx when
decoding malformed WebM content in some circumstances. If a
user were tricked in to opening a specially crafted website,
an attacker could potentially exploit these to cause a
denial of service via application crash, or execute
arbitrary code with the privileges of the user invoking
Firefox. (CVE-2015-4485, CVE-2015-4486)

Ronald Crane reported 3 security issues. If a user were
tricked in to opening a specially crafted website, an
attacker could potentially exploit these, in combination
with another security vulnerability, to cause a denial of
service via application crash, or execute arbitrary code
with the privileges of the user invoking Firefox.
(CVE-2015-4487, CVE-2015-4488, CVE-2015-4489)

Christoph Kerschbaumer discovered an issue with Mozilla's
implementation of Content Security Policy (CSP), which could
allow for a more permissive usage in some cirucumstances. An
attacker could potentially exploit this to conduct
cross-site scripting (XSS) attacks. (CVE-2015-4490)

Gustavo Grieco discovered a heap overflow in gdk-pixbuf. If
a user were tricked in to opening a specially crafted
website, an attacker could potentially exploit this to cause
a denial of service via application crash or execute
arbitrary code with the priviliges of the user invoking
Firefox. (CVE-2015-4491)

Looben Yang discovered a use-after-free when using
XMLHttpRequest with shared workers in some circumstances. If
a user were tricked in to opening a specially crafted
website, an attacker could potentially exploit this to cause
a denial of service via application crash or execute
arbitrary code with the priviliges of the user invoking
Firefox. (CVE-2015-4492).

Note that Tenable Network Security has extracted the preceding
description block directly from the Ubuntu security advisory. Tenable
has attempted to automatically clean and format it as much as possible
without introducing additional issues.

Solution :

Update the affected xul-ext-ubufox package.

Risk factor :

Critical / CVSS Base Score : 10.0
(CVSS2#AV:N/AC:L/Au:N/C:C/I:C/A:C)
CVSS Temporal Score : 7.4
(CVSS2#E:U/RL:OF/RC:C)
Public Exploit Available : false

Ready to Amp Up Your Nessus Experience?

Get Nessus Professional to scan unlimited IPs, run compliance checks & more

Buy Nessus Professional Now