DeutschShown in its original language — a full translation is planned for a future version.
Mozilla Firefox: Mehrere Schwachstellen
view advisory published 2023-06-06
Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox und Mozilla Firefox ESR, ausnutzen, um Sicherheitsvorkehrungen zu umgehen und Code auszuführen.
01
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2023-34417US | critical9.8 | — | ||
Memory safety bugs present in Firefox 113. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to… | ||||
| CVE-2023-34416US | critical9.8 | — | ||
Memory safety bugs present in Firefox 113, Firefox ESR 102.11, and Thunderbird 102.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effor… | ||||
| CVE-2023-34415US | medium6.1 | — | ||
When choosing a site-isolated process for a document loaded from a data: URL that was the result of a redirect, Firefox would load that document in the same process as the site tha… | ||||
| CVE-2023-34414US | low3.1 | — | ||
The error page for sites with invalid TLS certificates was missing the
activation-delay Firefox uses to protect prompts and permission dialogs
from attacks that exploit human respo… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2023:3560 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3561 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3562 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3578 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3579 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3589 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3590 vom 2023-06-14external
- Red Hat Security Advisory RHSA-2023:3597 vom 2023-06-14external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan