Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-1546

Опубликовано: 20 фев. 2024
Источник: debian
EPSS Низкий

Описание

When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed123.0-1package
firefox-esrfixed115.8.0esr-1package
thunderbirdfixed1:115.8.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-05/#CVE-2024-1546

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-06/#CVE-2024-1546

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-07/#CVE-2024-1546

EPSS

Процентиль: 67%
0.00538
Низкий

Связанные уязвимости

CVSS3: 7.5
ubuntu
больше 1 года назад

When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

CVSS3: 7.5
redhat
больше 1 года назад

When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

CVSS3: 7.5
nvd
больше 1 года назад

When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulnerability affects Firefox < 123, Firefox ESR < 115.8, and Thunderbird < 115.8.

CVSS3: 7.5
github
больше 1 года назад

When storing and re-accessing data on a networking channel, the length of buffers may have been confused, resulting in an out-of-bounds memory read. This vulnerability affects Firefox < 123 and Firefox ESR < 115.8.

CVSS3: 8.8
fstec
больше 1 года назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с неверным ограничением визуализируемых слоев или фреймов пользовательского интерфейса, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 67%
0.00538
Низкий