Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-1011

Опубликовано: 04 фев. 2025
Источник: nvd
CVSS3: 8.8
CVSS3: 9.8
EPSS Низкий

Описание

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
Версия до 128.7.0 (исключая)
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
Версия до 135.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*
Версия до 135.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*
Версия от 128.0.1 (включая) до 128.7.0 (исключая)

EPSS

Процентиль: 47%
0.00628
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-94

Связанные уязвимости

CVSS3: 8.8
ubuntu
больше 1 года назад

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 8.8
redhat
больше 1 года назад

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability was fixed in Firefox 135, Firefox ESR 128.7, Thunderbird 128.7, and Thunderbird 135.

CVSS3: 8.8
debian
больше 1 года назад

A bug in WebAssembly code generation could have lead to a crash. It ma ...

CVSS3: 9.8
github
больше 1 года назад

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 9.8
fstec
больше 1 года назад

Уязвимость компонента WebAssembly браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, Thunderbird ESR, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 47%
0.00628
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-94