Multiple vulnerabilities in Mozilla Firefox

Popis

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface, gain privileges, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in SafeRefPtr can be exploited to cause denial of service or execute arbitrary code.
2. Denial of service vulnerability can be exploited remotely to cause denial of service.
3. Information disclosure vulnerability in NSS can be exploited to obtain sensitive information.
4. Remote code execution vulnerability in Windows Error Reporter can be exploited remotely to execute arbitrary code.
5. Integer overflow vulnerability can be exploited to cause denial of service.
6. Clickjacking permission prompts vulnerability can be exploited remotely to spoof user interface.
7. Remote code execution vulnerability can be exploited remotely to execute arbitrary code.
8. Memory safety vulnerability can be exploited to execute arbitrary code.
9. Clickjacking permission prompts vulnerability can be exploited remotely to gain privileges.
10. Security vulnerability in composition area can be exploited to bypass security restrictions.

Oficiální doporučení

• MFSA2024-12

Vykořisťování

Public exploits exist for this vulnerability.

Související produkty

• Mozilla-Firefox

seznam CVE

• CVE-2023-5388
  high
• CVE-2024-2612
  critical
• CVE-2024-2613
  critical
• CVE-2024-2605
  high
• CVE-2024-2608
  critical
• CVE-2024-2609
  high
• CVE-2024-2606
  warning
• CVE-2024-2607
  critical
• CVE-2024-2615
  critical
• CVE-2024-2614
  critical
• CVE-2024-2611
  high
• CVE-2024-2610
  high

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com