DeutschShown in its original language — a full translation is planned for a future version.
Mozilla Firefox, Firefox ESR und Thunderbird: Mehrere Schwachstellen
view advisory published 2024-09-03
Ein entfernter anonymer Angreifer kann mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen oder Daten zu manipulieren.
01
describes (11)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2024-8394US | medium6.5 | — | ||
When aborting the verification of an OTR chat session, an attacker could have caused a use-after-free bug leading to a potentially exploitable crash. This vulnerability affects Thu… | ||||
| CVE-2024-8389US | critical9.8 | — | ||
Memory safety bugs present in Firefox 129. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to… | ||||
| CVE-2024-8388US | medium5.3 | — | ||
Multiple prompts and panels from both Firefox and the Android OS could be used to obscure the notification announcing the transition to fullscreen mode after the fix for CVE-2023-6… | ||||
| CVE-2024-8387US | critical9.8 | — | ||
Memory safety bugs present in Firefox 129, Firefox ESR 128.1, and Thunderbird 128.1. Some of these bugs showed evidence of memory corruption and we presume that with enough effort… | ||||
| CVE-2024-8386US | medium6.1 | — | ||
If a site had been granted the permission to open popup windows, it could cause Select elements to appear on top of another site to perform a spoofing attack. This vulnerability af… | ||||
| CVE-2024-8385US | critical9.8 | — | ||
A difference in the handling of StructFields and ArrayTypes in WASM could be used to trigger an exploitable type confusion vulnerability. This vulnerability affects Firefox < 130,… | ||||
| CVE-2024-8384US | critical9.8 | — | ||
The JavaScript garbage collector could mis-color cross-compartment objects if OOM conditions were detected at the right point between two passes. This could have led to memory corr… | ||||
| CVE-2024-8383US | high7.5OT elevated | — | ||
Firefox normally asks for confirmation before asking the operating system to find an application to handle a scheme that the browser does not support. It did not ask before doing s… | ||||
| CVE-2024-8382US | high8.8 | — | ||
Internal browser event interfaces were exposed to web content when privileged EventHandler listener callbacks ran for those events. Web content that tried to use those interfaces w… | ||||
| CVE-2024-8381US | critical9.8 | Exploit | ||
A potentially exploitable type confusion could be triggered when looking up a property name on an object being used as the `with` environment. This vulnerability affects Firefox <… | ||||
| CVE-2023-6870US | medium4.3 | — | ||
Applications which spawn a Toast notification in a background thread may have obscured fullscreen notifications displayed by Firefox.
*This issue only affects Android versions of… | ||||
02
references
External citations — patches, advisories, analysis.
- Red Hat Security Advisory RHSA-2024:6681 vom 2024-09-16external
- Red Hat Security Advisory RHSA-2024:6682 vom 2024-09-16external
- Red Hat Security Advisory RHSA-2024:6683 vom 2024-09-16external
- Red Hat Security Advisory RHSA-2024:6684 vom 2024-09-16external
- Red Hat Security Advisory RHSA-2024:6719 vom 2024-09-17external
- Red Hat Security Advisory RHSA-2024:6720 vom 2024-09-17external
- Red Hat Security Advisory RHSA-2024:6721 vom 2024-09-17external
- Red Hat Security Advisory RHSA-2024:6722 vom 2024-09-17external
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan