Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

debian логотип

CVE-2024-2607

Опубликовано: 19 мар. 2024
Источник: debian
EPSS Низкий

Описание

Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

Пакеты

ПакетСтатусВерсия исправленияРелизТип
firefoxfixed124.0-1package
firefox-esrfixed115.9.0esr-1package
thunderbirdfixed1:115.9.0-1package

Примечания

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-12/#CVE-2024-2607

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-13/#CVE-2024-2607

  • https://www.mozilla.org/en-US/security/advisories/mfsa2024-14/#CVE-2024-2607

EPSS

Процентиль: 80%
0.01453
Низкий

Связанные уязвимости

CVSS3: 8.1
ubuntu
больше 1 года назад

Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 7.5
redhat
больше 1 года назад

Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 8.1
nvd
больше 1 года назад

Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 8.1
github
больше 1 года назад

Return registers were overwritten which could have allowed an attacker to execute arbitrary code. *Note:* This issue only affected Armv7-A systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

CVSS3: 7.5
fstec
больше 1 года назад

Уязвимость браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, связанная с выходом операции за границы буфера в памяти, позволяющая нарушителю выполнить произвольный код

EPSS

Процентиль: 80%
0.01453
Низкий