DSA-3987: -1 firefox-esr -- security update
firefox-esr - security update
Other sources
Several security issues have been found in the Mozilla Firefox web browser: Multiple memory safety errors, use-after-frees, buffer overflows and other implementation errors may lead to the execution of arbitrary code, denial of service, cross-site scripting or bypass of the phishing and malware protection feature.
Affected Software
Event History
Child vulnerabilities
Contains the following vulnerabilities.
Frequently Asked Questions
What impact could successful exploitation have?
Depending on the specific issue, exploitation may allow arbitrary code execution, denial of service, cross-site scripting, or bypass of phishing and malware protection.
Which kinds of underlying flaws are covered by this update?
The update addresses multiple implementation errors, including memory-safety issues, use-after-free vulnerabilities, and buffer overflows.
Which individual vulnerabilities are referenced by the advisory?
The advisory references CVE-2017-7793, CVE-2017-7805, and CVE-2017-7810.