Поиск уязвимостей
Количество 28
Количество 28
BDU:2023-02689
Уязвимость браузеров Mozilla Firefox, Focus for Android, Mozilla Firefox ESR и почтового клиента Thunderbird, связанная с некорректной обработкой имен файлов, оканчивающихся на .desktop, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольные команды
CVE-2023-29541
Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2023-29541
Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2023-29541
Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
CVE-2023-29541
Firefox did not properly handle downloads of files ending in <code>.de ...
ALT-PU-2023-1797
ALT-PU-2023-1797: package `firefox-esr` update to version 102.10.0-alt1
ALT-PU-2023-1649
ALT-PU-2023-1649: package `firefox-esr` update to version 102.10.0-alt1
ALT-PU-2023-1783
ALT-PU-2023-1783: package `thunderbird` update to version 102.10.0-alt1
ALT-PU-2023-1648
ALT-PU-2023-1648: package `thunderbird` update to version 102.10.0-alt1
GHSA-wm65-g4q2-jh7c
Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10.
ALT-PU-2023-1621
ALT-PU-2023-1621: package `firefox` update to version 112.0-alt1
ALT-PU-2023-1817
ALT-PU-2023-1817: package `firefox` update to version 112.0.2-alt0.p10.1
ELSA-2023-1791
ELSA-2023-1791: firefox security update (IMPORTANT)
ELSA-2023-1787
ELSA-2023-1787: firefox security update (IMPORTANT)
ELSA-2023-1786
ELSA-2023-1786: firefox security update (IMPORTANT)
ALT-PU-2022-2306
ALT-PU-2022-2306: package `firefox` update to version 103.0-alt1
RLSA-2023:1809
Important: thunderbird security update
RLSA-2023:1802
Important: thunderbird security update
ELSA-2023-1809
ELSA-2023-1809: thunderbird security update (IMPORTANT)
ELSA-2023-1806
ELSA-2023-1806: thunderbird security update (IMPORTANT)
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | BDU:2023-02689 Уязвимость браузеров Mozilla Firefox, Focus for Android, Mozilla Firefox ESR и почтового клиента Thunderbird, связанная с некорректной обработкой имен файлов, оканчивающихся на .desktop, позволяющая нарушителю обойти ограничения безопасности и выполнить произвольные команды | CVSS3: 5 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-29541 Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-29541 Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
 | CVE-2023-29541 Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
| CVE-2023-29541 Firefox did not properly handle downloads of files ending in <code>.de ... | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
| ALT-PU-2023-1797 ALT-PU-2023-1797: package `firefox-esr` update to version 102.10.0-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-1649 ALT-PU-2023-1649: package `firefox-esr` update to version 102.10.0-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-1783 ALT-PU-2023-1783: package `thunderbird` update to version 102.10.0-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-1648 ALT-PU-2023-1648: package `thunderbird` update to version 102.10.0-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| GHSA-wm65-g4q2-jh7c Firefox did not properly handle downloads of files ending in <code>.desktop</code>, which can be interpreted to run attacker-controlled commands. <br>*This bug only affects Firefox for Linux on certain Distributions. Other operating systems are unaffected, and Mozilla is unable to enumerate all affected Linux Distributions.*. This vulnerability affects Firefox < 112, Focus for Android < 112, Firefox ESR < 102.10, Firefox for Android < 112, and Thunderbird < 102.10. | CVSS3: 8.8 | 1% Низкий | больше 3 лет назад |
| ALT-PU-2023-1621 ALT-PU-2023-1621: package `firefox` update to version 112.0-alt1 | CVSS3: 9.8 | больше 3 лет назад | |
| ALT-PU-2023-1817 ALT-PU-2023-1817: package `firefox` update to version 112.0.2-alt0.p10.1 | CVSS3: 9.8 | больше 3 лет назад | |
| ELSA-2023-1791 ELSA-2023-1791: firefox security update (IMPORTANT) | больше 3 лет назад | ||
| ELSA-2023-1787 ELSA-2023-1787: firefox security update (IMPORTANT) | больше 3 лет назад | ||
| ELSA-2023-1786 ELSA-2023-1786: firefox security update (IMPORTANT) | больше 3 лет назад | ||
| ALT-PU-2022-2306 ALT-PU-2022-2306: package `firefox` update to version 103.0-alt1 | CVSS3: 9.8 | больше 4 лет назад | |
 | RLSA-2023:1809 Important: thunderbird security update | больше 3 лет назад | ||
| RLSA-2023:1802 Important: thunderbird security update | больше 3 лет назад | ||
| ELSA-2023-1809 ELSA-2023-1809: thunderbird security update (IMPORTANT) | больше 3 лет назад | ||
| ELSA-2023-1806 ELSA-2023-1806: thunderbird security update (IMPORTANT) | больше 3 лет назад |
Уязвимостей на страницу