Alert GCSA-16016 - Vulnerabilita' multiple in Mozilla Firefox

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

**********************************************************************

Alert ID: GCSA-16016
Data: 10 Marzo 2016
Titolo: Vulnerabilita' multiple in Mozilla Firefox

**********************************************************************


:: Descrizione del problema

Sono state riscontrate varie vulnerabilità in Mozilla Firefox per
mezzo delle quali un utente remoto puo': causare l'esecuzione di codice
arbitrario, causare condizioni di denial of service, modificare file
nel sistema vittima, scavalcare le restrizioni same-origin, mascherare 
le URL nella barra degli indirizzi.

Per una descrizione completa delle vulnerabilita' consultare le
segnalazioni ufficiali.


:: Piattaforme e Software interessati

Mozilla Firefox e Firefox ESR versioni precedenti la 45 e 38.6.1
su Linux, Unix e Windows


:: Impatto

Accesso alle informazioni utente
Accesso alle informazioni di sistema
Esecuzione remota di codice arbitrario
Denial of service


:: Soluzione

Aggiornare Mozilla Firefox alle versioni:
Firefox 45
Firefox ESR 38.6.1


:: Riferimenti

Mozilla Foundation Security Advisories
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-16/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-17/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-18/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-19/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-20/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-21/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-22/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-23/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-24/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-25/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-26/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-27/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-28/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-29/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-30/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-31/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-32/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-33/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-34/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-35/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-36/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-37/
  https://www.mozilla.org/en-US/security/advisories/mfsa2016-38/

Security Tracker
  http://securitytracker.com/id/1035215

Redhat
  http://rhn.redhat.com/errata/RHSA-2016-0371.html

Oracle
  http://linux.oracle.com/errata/ELSA-2016-0371.html

Ubuntu
  http://www.ubuntu.com/usn/usn-2917-1

I riferimenti CVE sono disponibili
nelle segnalazioni originali.


GARR CERT Security Alert - subscribe/unsubscribe: http://www.cert.garr.it/alert/ricevi-gli-alert-di-cert

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iEYEARECAAYFAlbhq0sACgkQwZxMk2USYEI7owCeMo2FvJVukugYNs2fvOC1+AW2
jKwAoL47n3+fT0lhpIsCaU4NnnuYV83l
=mOXR
-----END PGP SIGNATURE-----