Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2023-25751

Опубликовано: 02 июн. 2023
Источник: debian

Описание

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed111.0-1package
firefox-esrfixed102.9.0esr-1package
thunderbirdfixed1:102.9.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-09/#CVE-2023-25751

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-10/#CVE-2023-25751

  • https://www.mozilla.org/en-US/security/advisories/mfsa2023-11/#CVE-2023-25751

Связанные уязвимости

CVSS3: 6.5
ubuntu
около 2 лет назад

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 7.5
redhat
больше 2 лет назад

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 6.5
nvd
около 2 лет назад

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 6.5
github
около 2 лет назад

Sometimes, when invalidating JIT code while following an iterator, the newly generated code could be overwritten incorrectly. This could lead to a potentially exploitable crash. This vulnerability affects Firefox < 111, Firefox ESR < 102.9, and Thunderbird < 102.9.

CVSS3: 7.5
fstec
больше 2 лет назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с неверным управлением генерацией кода, позволяющая нарушителю вызвать отказ в обслуживании или, возможно, оказать другое воздействие