VDB
CNVD-2023-75345
CNVD-2023-75345
PUBLISHED
Mozilla Firefox ESR是美国Mozilla基金会的一款开源Web浏览器。 Mozilla Firefox ESR存在内存破坏漏洞，远程攻击者可利用该漏洞提交特殊的WEB请求，诱使用户解析，可使应用程序崩溃或以应用程序上下文执行任意代码。
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Mozilla | Thunderbird | unspecified, unspecified |
| Mozilla | Firefox | unspecified |
| Mozilla | Firefox ESR | unspecified, unspecified |
Timeline
- Sep 1, 2023 CVE Published
- Sep 11, 2023 PoC Published
References
- Memory safety bugs fixed in Firefox 117, Firefox ESR 102.15, Firefox ESR 115.2, Thunderbird 102.15, and Thunderbird 115.2 url
- https://www.mozilla.org/security/advisories/mfsa2023-34/ url
- https://www.mozilla.org/security/advisories/mfsa2023-35/ url
- https://www.mozilla.org/security/advisories/mfsa2023-36/ url
- https://www.mozilla.org/security/advisories/mfsa2023-37/ url
- https://www.mozilla.org/security/advisories/mfsa2023-38/ url