CLD-56 Details

Other IDs this deficiency may be known by:

CVE ID None
Other ID(s) mfsa2017-22

Basic Information:

Affected Package(s) firefox
Deficiency Type SECURITY
Date Created 2017-09-28 11:56:29
Date Last Modified 2017-09-28 13:29:55

Version Specific Information:

Cucumber 1.0 i686 fixed in firefox-52.4.0esr-i686-1
Cucumber 1.0 x86_64 fixed in firefox-52.4.0esr-x86_64-1

Cucumber 1.1 i686 fixed in firefox-52.4.0esr-i686-1
Cucumber 1.1 x86_64 fixed in firefox-52.4.0esr-x86_64-1

Details:

This CLD addresses the following CVE IDs:
	CVE-2017-7793: Use-after-free with Fetch API
	CVE-2017-7818: Use-after-free during ARIA array manipulation
	CVE-2017-7819: Use-after-free while resizing images in design mode
	CVE-2017-7824: Buffer overflow when drawing and validating elements with ANGLE
	CVE-2017-7805: Use-after-free in TLS 1.2 generating handshake hashes
	CVE-2017-7814: Blob and data URLs bypass phishing and malware protection warnings
	CVE-2017-7825: OS X fonts render some Tibetan and Arabic unicode characters as spaces
	CVE-2017-7823: CSP sandbox directive did not create a unique origin
	CVE-2017-7810: Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4

For more information see:
	https://www.mozilla.org/en-US/security/advisories/mfsa2017-22/