Уязвимость повреждения памяти в Mozilla Firefox и Thunderbird, способная привести к выполнению произвольного кода
Описание
Команда Mozilla Fuzzing Team выявила ошибки безопасности памяти в Firefox 103, Firefox ESR 102.1 и Firefox ESR 91.12. Некоторые из этих ошибок демонстрируют признаки повреждения памяти, и предполагается, что при достаточных усилиях злоумышленник способен использовать их для выполнения произвольного кода.
Затронутые версии ПО
- Thunderbird до версии 102.2
- Thunderbird до версии 91.13
- Firefox ESR до версии 91.13
- Firefox ESR до версии 102.2
- Firefox до версии 104
Тип уязвимости
- Повреждение памяти
- Выполнение произвольного кода
Ссылки
- Issue TrackingNot ApplicableVendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Issue TrackingNot ApplicableVendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
8.8 High
CVSS3
Дефекты
Связанные уязвимости
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.
Members the Mozilla Fuzzing Team reported memory safety bugs present i ...
Members the Mozilla Fuzzing Team reported memory safety bugs present in Firefox 103, Firefox ESR 102.1, and Firefox ESR 91.12. Some of these bugs showed evidence of memory corruption and we presume that with enough effort some of these could have been exploited to run arbitrary code. This vulnerability affects Thunderbird < 102.2, Thunderbird < 91.13, Firefox ESR < 91.13, Firefox ESR < 102.2, and Firefox < 104.
Уязвимость обработчика JavaScript-сценариев SpiderMonkey браузеров Firefox, Firefox ESR и почтового клиента Thunderbird, позволяющая нарушителю выполнить произвольный код
EPSS
8.8 High
CVSS3