Уязвимость повреждения памяти в Firefox и Thunderbird, приводящая к выполнению произвольного кода
Описание
Разработчики Mozilla сообщают о наличии ошибок безопасности памяти в Firefox 91 и Firefox ESR 78.13. Некоторые из этих ошибок свидетельствуют о повреждении памяти. Предполагается, что при достаточных усилиях злоумышленник способен использовать некоторые из них для выполнения произвольного кода.
Затронутые версии ПО
- Firefox ESR < 78.14
- Thunderbird < 78.14
- Firefox < 92
Тип уязвимости
- Повреждение памяти
- Выполнение произвольного кода
Ссылки
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Third Party Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14, and Firefox < 92.
Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14, and Firefox < 92.
Mozilla developers reported memory safety bugs present in Firefox 91 a ...
Mozilla developers reported memory safety bugs present in Firefox 91 and Firefox ESR 78.13. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Firefox ESR < 78.14, Thunderbird < 78.14, and Firefox < 92.
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2