Ubuntu Security Notice 895-1 - Several flaws were discovered in the browser engine of Firefox. If a user were tricked into viewing a malicious website, a remote attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. Orlando Barrera II discovered a flaw in the Web Workers implementation of Firefox. If a user were tricked into posting to a malicious website, an attacker could cause a denial of service or possibly execute arbitrary code with the privileges of the user invoking the program. Alin Rad Pop discovered that Firefox's HTML parser would incorrectly free memory under certain circumstances. Various other issues were also discovered.
2dcdd0dec241173d727afd68f732b2898aa5a88259c9a6d5ea4874bd644a0cbe