Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-0742

Опубликовано: 23 янв. 2024
Источник: debian

Описание

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed122.0-1package
firefox-esrfixed115.7.0esr-1package
thunderbirdfixed1:115.7.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-01/#CVE-2024-0742

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-02/#CVE-2024-0742

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-04/#CVE-2024-0742

Связанные уязвимости

CVSS3: 4.3
ubuntu
больше 1 года назад

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

CVSS3: 7.5
redhat
больше 1 года назад

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

CVSS3: 4.3
nvd
больше 1 года назад

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

CVSS3: 4.3
github
больше 1 года назад

It was possible for certain browser prompts and dialogs to be activated or dismissed unintentionally by the user due to an incorrect timestamp used to prevent input after page load. This vulnerability affects Firefox < 122, Firefox ESR < 115.7, and Thunderbird < 115.7.

CVSS3: 6.8
fstec
больше 1 года назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с ошибками в настройках безопасности, позволяющая нарушителю обойти существующие ограничения безопасности