Kaspersky ID:
KLA62517
Bulunma tarihi:
12/19/2023
Yüklendi:
03/26/2025

Açıklama

Multiple vulnerabilities were found in Mozilla Firefox. Malicious users can exploit these vulnerabilities to bypass security restrictions, obtain sensitive information, execute arbitrary code, spoof user interface, cause denial of service.

Below is a complete list of vulnerabilities:

  1. Security vulnerability in protocol handler can be exploited to bypass security restrictions.
  2. Security vulnerability in Symlinks can be exploited to bypass security restrictions.
  3. Information disclosure vulnerability can be exploited to obtain sensitive information.
  4. Security vulnerability in VideoBridge can be exploited to bypass security restrictions.
  5. Memory safety vulnerability can be exploited to execute arbitrary code.
  6. Use after free vulnerability in PR_GetIdentitiesLayer can be exploited to execute arbitrary code.
  7. Information disclosure vulnerability in EncryptingOutputStreams can be exploited to obtain sensitive information.
  8. Security vulnerability in TypedArrayscan be exploited to bypass security restrictions.
  9. Clickjacking permission prompts vulnerability in popup transition can be exploited remotely to spoof user interface.
  10. Heap buffer overflow vulnerability in nsTextFragment can be exploited to cause denial of service.
  11. Heap buffer overflow vulnerability in nsWindow::PickerOpen(void) can be exploited to cause denial of service.
  12. Security vulnerability in dialog element can be exploited to bypass security restrictions.
  13. Heap buffer overflow vulnerability in WebGL ACE can be exploited to execute arbitrary code.
  14. Security UI vulnerability in Android Toast notifications (only for Android) can be exploited to spoof user interface.
  15. Security UI vulnerability in WebPush requests can be exploited to spoof user interface.
  16. Information disclosure vulnerability in NSS can be exploited to obtain sensitive information.
  17. Security vulnerability in ShutdownObserver can be exploited to bypass security restrictions.

Orijinal öneriler

Kötüye kullanma

Public exploits exist for this vulnerability.

İlgili ürünler

CVE Listesi

  • CVE-2023-6871
    warning
  • CVE-2023-6857
    high
  • CVE-2023-6872
    high
  • CVE-2023-6860
    high
  • CVE-2023-6864
    critical
  • CVE-2023-6859
    critical
  • CVE-2023-6865
    high
  • CVE-2023-6866
    critical
  • CVE-2023-6867
    high
  • CVE-2023-6858
    critical
  • CVE-2023-6861
    critical
  • CVE-2023-6869
    high
  • CVE-2023-6856
    critical
  • CVE-2023-6870
    warning
  • CVE-2023-6868
    warning
  • CVE-2023-6135
    warning
  • CVE-2023-6873
    critical
  • CVE-2023-6863
    critical

Daha fazlasını okuyun

Bölgenizde yayılan güvenlik açıklarının istatistiklerini öğrenin statistics.securelist.com

Bu güvenlik açığının açıklamasında bir tutarsızlık mı tespit ettiniz? Bize bildirin!
Kaspersky IT Security Calculator
Daha fazla bilgi edin
Yeni Kaspersky!
Dijital hayatınız güçlü korumayı hak ediyor!
Daha fazla bilgi edin
Do you want to save your changes?
Your message has been sent successfully.