説明
Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to cause denial of service, perform cross-site scripting attack, spoof user interface, bypass security restrictions, execute arbitrary code, obtain sensitive information.
Below is a complete list of vulnerabilities:
- Corrupt pointer dereference vulnerability in js::CheckTracedThing can be exploited to cause denial of service
- Denial of service vulnerability in HTTP/2 can be exploited remotely to cause denial of service.
- Integer overflow vulnerability in OpenType sanitizer can be exploited to cause denial of service.
- Out of bounds memory read in MSubstr can be exploited to cause denial of service.
- Memory safety vulnerability can be exploited to execute arbitrary code.
- Use after free vulnerability can be exploited to cause denial of service or execute arbitrary code.
- Use of uninitialized memory vulnerability in MarkStack assignment operator can be exploited to cause denial of service or execute arbitrary code.
- Out of bounds memory read can be exploited to cause denial of service.
- Use after free vulnerability in WASM garbage collection can be exploited to cause denial of service or execute arbitrary code.
- Information disclosure vulnerability in GetBoundName can be exploited to obtain sensitive information.
- Security vulnerability can be exploited to bypass security restrictions.
- Out of memory conditions vulnerability can be exploited to cause denial of service.
- Use after free vulnerability in networking can be exploited to cause denial of service or execute arbitrary code.
オリジナルアドバイザリー
エクスプロイテーション
Public exploits exist for this vulnerability.
関連製品
CVEリスト
- CVE-2024-3858 critical
- CVE-2024-3302 warning
- CVE-2024-3859 high
- CVE-2024-3855 high
- CVE-2024-3864 critical
- CVE-2024-3861 warning
- CVE-2024-3862 high
- CVE-2024-3853 critical
- CVE-2024-3857 critical
- CVE-2024-3854 critical
- CVE-2024-3856 critical
- CVE-2024-3852 critical
- CVE-2024-3863 critical
- CVE-2024-3860 high
- CVE-2024-3865 critical
- CVE-2024-5702 critical
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！