Уязвимость повреждения памяти в Mozilla Firefox и Thunderbird, способная привести к выполнению произвольного кода
Описание
Разработчики Mozilla сообщили об ошибках безопасности памяти в Firefox и Thunderbird версии 68.5. Некоторые из этих ошибок указывают на повреждение памяти. Предполагается, что при достаточных усилиях их возможно использовать для выполнения произвольного кода.
Затронутые версии ПО
- Thunderbird версий до 68.6
- Firefox версий до 74
- Firefox ESR (Extended Support Release) версий до 68.6
Тип уязвимости
- Повреждение памяти
- Выполнение произвольного кода
Ссылки
- Issue TrackingVendor Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Issue TrackingVendor Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
Одно из
EPSS
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
Связанные уязвимости
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.
Mozilla developers reported memory safety bugs present in Firefox and ...
Mozilla developers reported memory safety bugs present in Firefox and Thunderbird 68.5. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 68.6, Firefox < 74, Firefox < ESR68.6, and Firefox ESR < 68.6.
EPSS
9.8 Critical
CVSS3
7.5 High
CVSS2