Multiple vulnerabilities in Mozilla Firefox

Description

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information, spoof user interface, gain privileges, bypass security restrictions.

Below is a complete list of vulnerabilities:

1. Use after free vulnerability in SafeRefPtr can be exploited to cause denial of service or execute arbitrary code.
2. Denial of service vulnerability can be exploited remotely to cause denial of service.
3. Information disclosure vulnerability in NSS can be exploited to obtain sensitive information.
4. Remote code execution vulnerability in Windows Error Reporter can be exploited remotely to execute arbitrary code.
5. Integer overflow vulnerability can be exploited to cause denial of service.
6. Clickjacking permission prompts vulnerability can be exploited remotely to spoof user interface.
7. Remote code execution vulnerability can be exploited remotely to execute arbitrary code.
8. Memory safety vulnerability can be exploited to execute arbitrary code.
9. Clickjacking permission prompts vulnerability can be exploited remotely to gain privileges.
10. Security vulnerability in composition area can be exploited to bypass security restrictions.

Original advisories

• MFSA2024-12

Related products

• Mozilla-Firefox

CVE list

• CVE-2023-5388
  warning
• CVE-2024-2612
  warning
• CVE-2024-2613
  warning
• CVE-2024-2605
  warning
• CVE-2024-2608
  warning
• CVE-2024-2609
  warning
• CVE-2024-2606
  warning
• CVE-2024-2607
  warning
• CVE-2024-2615
  warning
• CVE-2024-2614
  warning
• CVE-2024-2611
  warning
• CVE-2024-2610
  warning

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com