VDB
CNVD-2024-40514
CNVD-2024-40514
PUBLISHED
CVSS 7.5 HIGH
Mozilla Firefox是一款开源Web浏览器。Mozilla Firefox ESR是Firefox（Web浏览器）的一个延长支持版本。Mozilla Thunderbird是一套从Mozilla Application Suite独立出来的电子邮件客户端软件。 多款Mozilla产品存在代码执行漏洞，攻击者可利用该漏洞在易受攻击的系统上执行任意代码或造成拒绝服务。
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| mozilla | firefox_esr | 0 |
| Mozilla | Thunderbird | unspecified, unspecified |
| mozilla | firefox | 0 |
| mozilla | thunderbird | 0, 0 |
| Mozilla | Firefox | unspecified |
| Mozilla | Firefox ESR | unspecified |
Timeline
- Jul 9, 2024 CVE Published
- Sep 6, 2024 PoC Published
- Oct 30, 2025 CVE Updated
References
- https://bugzilla.mozilla.org/show_bug.cgi?id=1901411 url
- https://github.com/tc39/ecma262/security/advisories/GHSA-g38c-wh3c-5h9r url
- https://www.mozilla.org/security/advisories/mfsa2024-29/ url
- https://www.mozilla.org/security/advisories/mfsa2024-30/ url
- https://www.mozilla.org/security/advisories/mfsa2024-31/ url
- https://www.mozilla.org/security/advisories/mfsa2024-32/ url