CVE-2024-10941

Опубликовано: 06 нояб. 2024

Источник: nvd

CVSS3: 6.5

CVSS3: 4.3

EPSS Низкий

Описание

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

Ссылки

https://bugzilla.mozilla.org/show_bug.cgi?id=1880879
Issue Tracking
https://bugzilla.mozilla.org/show_bug.cgi?id=1887614
Issue Tracking
https://www.mozilla.org/security/advisories/mfsa2024-21/
Issue Tracking
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:mozilla:firefox:*:*:*:*:*:*:*:*

Версия до 126.0 (исключая)

EPSS

Процентиль: 37%

0.0043

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

NVD-CWE-Other

CWE-86

Связанные уязвимости

CVE-2024-10941

CVSS3: 6.5

ubuntu

около 2 лет назад

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

CVE-2024-10941

CVSS3: 3.1

redhat

около 2 лет назад

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

CVE-2024-10941

CVSS3: 6.5

debian

около 2 лет назад

A malicious website could have included an iframe with an malformed UR ...

GHSA-8w77-hpx9-8fm3

CVSS3: 6.5

github

около 2 лет назад

A malicious website could have included an iframe with an malformed URI resulting in a non-exploitable browser crash. This vulnerability affects Firefox < 126.

ALT-PU-2024-7772

CVSS3: 9.8

altlinux

больше 2 лет назад

ALT-PU-2024-7772: package `firefox` update to version 126.0-alt1

EPSS

Процентиль: 37%

0.0043

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS3

Дефекты

NVD-CWE-Other

CWE-86