Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2025-1011

Опубликовано: 04 фев. 2025
Источник: nvd
CVSS3: 8.8
CVSS3: 9.8
EPSS Низкий

Описание

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mozilla:firefox:*:*:*:*:esr:*:*:*
Версия до 128.7.0 (исключая)
cpe:2.3:a:mozilla:firefox:*:*:*:*:-:*:*:*
Версия до 135.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:-:*:*:*
Версия до 135.0 (исключая)
cpe:2.3:a:mozilla:thunderbird:*:*:*:*:esr:*:*:*
Версия от 128.0.1 (включая) до 128.7.0 (исключая)

EPSS

Процентиль: 37%
0.0015
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-94

Связанные уязвимости

CVSS3: 8.8
ubuntu
4 месяца назад

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 6.4
redhat
4 месяца назад

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 8.8
debian
4 месяца назад

A bug in WebAssembly code generation could have lead to a crash. It ma ...

CVSS3: 9.8
github
4 месяца назад

A bug in WebAssembly code generation could have lead to a crash. It may have been possible for an attacker to leverage this to achieve code execution. This vulnerability affects Firefox < 135, Firefox ESR < 128.7, Thunderbird < 128.7, and Thunderbird < 135.

CVSS3: 9.8
fstec
5 месяцев назад

Уязвимость компонента WebAssembly браузеров Mozilla Firefox, Firefox ESR и почтового клиента Thunderbird, Thunderbird ESR, позволяющая нарушителю вызвать отказ в обслуживании

EPSS

Процентиль: 37%
0.0015
Низкий

8.8 High

CVSS3

9.8 Critical

CVSS3

Дефекты

NVD-CWE-noinfo
CWE-94