Kaspersky ID:
KLA49166
Date de la détection:
05/09/2023
Mis à jour:
03/28/2025

Description

Multiple vulnerabilities were found in Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to cause denial of service, spoof user interface, execute arbitrary code, gain privileges.

Below is a complete list of vulnerabilities:

  1. Denial of service vulnerability in Content process can be exploited to cause denial of service.
  2. Denial of service vulnerability in Exposed protocol handlers can be exploited to cause denial of service.
  3. Out of bounds vulnerability in RLBox Expat driver can be exploited to cause denial of service.
  4. Security UI vulnerability in Popups can be exploited to spoof user interface.
  5. Security UI vulnerability in Address bar can be exploited to spoof user interface.
  6. Memory corruption vulnerability in FileReader can be exploited remotely to cause denial of service or execute arbitrary code.
  7. Elevation of privilege vulnerability in Popup notifications can be exploited remotely to gain privileges.
  8. Memory safety vulnerability can be exploited to execute arbitrary code.

Fiches de renseignement originales

Produits associés

Liste CVE

  • CVE-2023-32206
    high
  • CVE-2023-32205
    warning
  • CVE-2023-32211
    high
  • CVE-2023-32213
    critical
  • CVE-2023-32207
    critical
  • CVE-2023-32214
    critical
  • CVE-2023-32215
    critical
  • CVE-2023-32212
    warning

En savoir plus

Découvrez les statistiques de la propagation des vulnérabilités dans votre région statistics.securelist.com

Vous avez trouvé une inexactitude dans la description de cette vulnérabilité ? Faites-le nous savoir !
Kaspersky IT Security Calculator:
Calculez le profil de sécurité de votre entreprise
Apprendre encore plus
Kaspersky!
Votre vie en ligne mérite une protection complète!
Apprendre encore plus
Do you want to save your changes?
Your message has been sent successfully.