Mozilla has released security updates to address multiple vulnerabilities in Firefox and Firefox ESR. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.
US-CERT encourages users and administrators to review the Mozilla Security Advisory for [Firefox 54](<https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/>) and [Firefox ESR 52.2](<https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/>) and apply the necessary update.
This product is provided subject to this Notification and this [Privacy & Use](<https://www.dhs.gov/privacy-policy>) policy.
**Please share your thoughts.**
We recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ncas/current-activity/2017/06/13/Mozilla-Releases-Security-Updates>); we'd welcome your feedback.
{"id": "CISA:36A973055E5E400578DBF82BC86883F0", "type": "cisa", "bulletinFamily": "info", "title": "Mozilla Releases Security Updates", "description": "Mozilla has released security updates to address multiple vulnerabilities in Firefox and Firefox ESR. A remote attacker could exploit some of these vulnerabilities to take control of an affected system.\n\nUS-CERT encourages users and administrators to review the Mozilla Security Advisory for [Firefox 54](<https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/>) and [Firefox ESR 52.2](<https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/>) and apply the necessary update.\n\nThis product is provided subject to this Notification and this [Privacy & Use](<https://www.dhs.gov/privacy-policy>) policy.\n\n**Please share your thoughts.**\n\nWe recently updated our anonymous [product survey](<https://www.surveymonkey.com/r/CISA-cyber-survey?product=https://us-cert.cisa.gov/ncas/current-activity/2017/06/13/Mozilla-Releases-Security-Updates>); we'd welcome your feedback.\n", "published": "2017-06-13T00:00:00", "modified": "2017-06-13T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "https://us-cert.cisa.gov/ncas/current-activity/2017/06/13/Mozilla-Releases-Security-Updates", "reporter": "CISA", "references": ["https://www.mozilla.org/en-US/security/advisories/mfsa2017-15/", "https://www.mozilla.org/en-US/security/advisories/mfsa2017-16/"], "cvelist": [], "lastseen": "2021-02-24T18:07:43", "viewCount": 4, "enchantments": {"dependencies": {"references": []}, "score": {"value": 2.3, "vector": "NONE"}, "backreferences": {"references": [{"type": "ics", "idList": ["ICSA-20-282-02"]}, {"type": "mozilla", "idList": ["MFSA2017-16"]}, {"type": "threatpost", "idList": ["THREATPOST:F7C1C6A7D07F7CFA8DFDD80051147A3B"]}]}, "exploitation": null, "vulnersScore": 2.3}, "wildExploited": false, "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"wildexploited": 1647356730, "dependencies": 1647589307, "score": 1659743467}, "_internal": {"wildexploited_cvelist": null}}