Mozilla patches heap buffer overflow in Firefox browsers

By
Mozilla patches heap buffer overflow in Firefox browsers

The Mozilla Foundation Security has released an advisory to patch critical vulnerabilities in Firefox and Firefox ESR products which could allow a remote attacker to take control of an affected system.

The Mozilla Foundation Security has released an advisory to patch critical vulnerabilities in Firefox and Firefox ESR products which could allow a remote attacker to take control of an affected system.

The vulnerabilities were patched in Firefox 60.0.2, ESR 60.0.2, and ESR 52.8.1 and were caused by a heap buffer overflow can occur in the Skia library when rasterising paths using a maliciously crafted SVG file with anti-aliasing turned off, according the security advisory.

The bug would result in a potentially exploitable crash, researchers said informing users to update their systems to address vulnerabilities in Firefox and Firefox ESR.

Last month, Mozilla rolled out its two-step authentication for all Firefox Accounts. The program was unique in that it was designed without support for SMS-based codes and was designed to work with the authentication of third party services such as Google Authenticator, Duo Mobile and Authy 2-Factor Authentication.

This article originally appeared at scmagazineuk.com

Copyright © SC Magazine, UK edition
Tags:

Most Read Articles

The new Telstra – only 20 years in the making...

The new Telstra – only 20 years in the making...

How to: Boot Windows 10 in Safe Mode

How to: Boot Windows 10 in Safe Mode

Spyro Reignited Trilogy first gameplay shows it could be the perfect nostalgia trip

Spyro Reignited Trilogy first gameplay shows it could be the perfect nostalgia trip

Explainer: why Chinese telecoms participating in Australia’s 5G network could be a problem

Explainer: why Chinese telecoms participating in Australia’s 5G network could be a problem