Mozilla patches heap buffer overflow in Firefox browsers

By
Mozilla patches heap buffer overflow in Firefox browsers

The Mozilla Foundation Security has released an advisory to patch critical vulnerabilities in Firefox and Firefox ESR products which could allow a remote attacker to take control of an affected system.

The Mozilla Foundation Security has released an advisory to patch critical vulnerabilities in Firefox and Firefox ESR products which could allow a remote attacker to take control of an affected system.

The vulnerabilities were patched in Firefox 60.0.2, ESR 60.0.2, and ESR 52.8.1 and were caused by a heap buffer overflow can occur in the Skia library when rasterising paths using a maliciously crafted SVG file with anti-aliasing turned off, according the security advisory.

The bug would result in a potentially exploitable crash, researchers said informing users to update their systems to address vulnerabilities in Firefox and Firefox ESR.

Last month, Mozilla rolled out its two-step authentication for all Firefox Accounts. The program was unique in that it was designed without support for SMS-based codes and was designed to work with the authentication of third party services such as Google Authenticator, Duo Mobile and Authy 2-Factor Authentication.

This article originally appeared at scmagazineuk.com

Copyright © SC Magazine, UK edition
Tags:

Most Read Articles

How to cast from Windows 10 to a smart TV with 5KPlayer

How to cast from Windows 10 to a smart TV with 5KPlayer

How to: Fix a stuck Windows 10 update

How to: Fix a stuck Windows 10 update

Is a Nintendo Switch Virtual Console coming as Nintendo bans retro ROM resources?

Is a Nintendo Switch Virtual Console coming as Nintendo bans retro ROM resources?

PC & Tech Authority and APC magazine are merging!

PC & Tech Authority and APC magazine are merging!