CVE-2019-9821

A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox < 67.

A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox < 67.

A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox < 67.

A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox < 67.

A use-after-free vulnerability can occur in AssertWorkerThread due to a race condition with shared workers. This results in a potentially exploitable crash. This vulnerability affects Firefox < 67.

This update for MozillaFirefox fixes the following issues:

MozillaFirefox was updated to 60.7.0esr (boo#1135824 MFSA 2019-14):

• CVE-2018-18511: Cross-origin theft of images with ImageBitmapRenderingContext
• CVE-2019-11691: Use-after-free in XMLHttpRequest
• CVE-2019-11692: Use-after-free removing listeners in the event listener manager
• CVE-2019-11693: Buffer overflow in WebGL bufferdata on Linux
• CVE-2019-11694: (Windows only) Uninitialized memory memory leakage in Windows sandbox
• CVE-2019-11698: Theft of user history data through drag and drop of hyperlinks to and from bookmarks
• CVE-2019-5798: Out-of-bounds read in Skia
• CVE-2019-7317: Use-after-free in png_image_free of libpng library
• CVE-2019-9797: Cross-origin theft of images with createImageBitmap
• CVE-2019-9800: Memory safety bugs fixed in Firefox 67 and Firefox ESR 60.7
• CVE-2019-9815: Disable hyperthreading on content JavaScript threads on macOS
• CVE-2019-9816: Type confusion with object groups and UnboxedObjects
• CVE-2019-9817: Stealing of cross-domain images using canvas
• CVE-2019-9818: (Windows only) Use-after-free in crash generation server
• CVE-2019-9819: Compartment mismatch with fetch API
• CVE-2019-9820: Use-after-free of ChromeEventHandler by DocShell
• CVE-2019-9821: Use-after-free in AssertWorkerThread

These are all security issues fixed in the MozillaFirefox-92.0-1.2 package on the GA media of openSUSE Tumbleweed.

These are all security issues fixed in the firefox-esr-128.5.1-1.1 package on the GA media of openSUSE Tumbleweed.

Multiple security issues were discovered in Firefox. If a user were tricked in to opening a specially crafted website, an attacker could potentially exploit these to cause a denial of service, spoof the browser UI, trick the user in to launching local executable binaries, obtain sensitive information, conduct cross-site scripting (XSS) attacks, or execute arbitrary code. (CVE-2019-11691, CVE-2019-11692, CVE-2019-11693, CVE-2019-11695, CVE-2019-11696, CVE-2019-11699, CVE-2019-11701, CVE-2019-7317, CVE-2019-9800, CVE-2019-9814, CVE-2019-9817, CVE-2019-9819, CVE-2019-9820, CVE-2019-9821)

It was discovered that pressing certain key combinations could bypass addon installation prompt delays. If a user opened a specially crafted website, an attacker could potentially exploit this to trick them in to installing a malicious extension. (CVE-2019-11697)

It was discovered that history data could be exposed via drag and drop of hyperlinks to and from bookmarks. If a user were tricked in to dragging a specially crafted hyperlink to the bookmark toolbar or sidebar, and subsequently back in to the web content area, an attacker could potentially exploit this to obtain sensitive information. (CVE-2019-11698)

A type confusion bug was discovered with object groups and UnboxedObjects. If a user were tricked in to opening a specially crafted website after enabling the UnboxedObjects feature, an attacker could potentially exploit this to bypass security checks. (CVE-2019-9816)