VDB
CVE-2023-49060
CVE-2023-49060
PUBLISHED
Es bestehen mehrere Schwachstellen in Mozilla Firefox, Mozilla Firefox ESR und Mozilla Thunderbird. Diese Fehler bestehen in mehreren Komponenten wie dem WebGL2 blitFramebuffer oder dem MessagePort::Entangled, unter anderem aufgrund eines unzulässigen Speicherzugriffs, eines use-after-free, eines fehlerhaften Parsings von relativen URLs und Fehlern in der Speichersicherheit. Ein entfernter, anonymer Angreifer kann diese Schwachstellen ausnutzen, um beliebigen Code auszuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen oder einen Denial-of-Service-Zustand zu verursachen. Eine erfolgreiche Ausnutzung erfordert eine Benutzerinteraktion.
EPSS 0.46% · 64.5th percentile
Risk Scores
EPSS Score
0.46%
64.5th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Fedora | Fedora Linux | |
| Red Hat | Red Hat Enterprise Linux | |
| IGEL | IGEL OS | |
| Ubuntu | Ubuntu Linux | |
| SUSE | SUSE openSUSE | |
| Oracle | Oracle Linux | |
| SUSE | SUSE Linux | |
| Debian | Debian Linux | |
| Mozilla | Mozilla Firefox <120 | |
| Amazon | Amazon Linux 2 | |
| Gentoo | Gentoo Linux | |
| Mozilla | Mozilla Thunderbird <115.5.0 | |
| Mozilla | Mozilla Firefox ESR <115.5 |
Exploit Intelligence
Timeline
- Nov 21, 2023 CVE Published
- Nov 22, 2023 EPSS Score
- Dec 22, 2023 EPSS Score
- Jan 21, 2024 EPSS Score
- Feb 20, 2024 EPSS Score
- Mar 21, 2024 EPSS Score
- Apr 20, 2024 EPSS Score
- May 20, 2024 EPSS Score
- Jun 19, 2024 EPSS Score
- Jul 19, 2024 EPSS Score
- Aug 18, 2024 EPSS Score
- Sep 17, 2024 EPSS Score
References
- https://wid.cert-bund.de/.well-known/csaf/white/2023/wid-sec-w-2023-2995.json advisory
- https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2023-2995 advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-49/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-50/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-51/ advisory
- https://www.mozilla.org/en-US/security/advisories/mfsa2023-52/ advisory
- https://lists.debian.org/debian-security-announce/2023/msg00257.html advisory
- https://ubuntu.com/security/notices/USN-6509-1 advisory
- https://lists.debian.org/debian-lts-announce/2023/11/msg00017.html advisory
- https://ubuntu.com/security/notices/USN-6515-1 advisory
- https://lists.debian.org/debian-security-announce/2023/msg00262.html advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-bb021a4854 advisory
- https://bodhi.fedoraproject.org/updates/FEDORA-2023-985a025a03 advisory
- https://lists.suse.com/pipermail/sle-security-updates/2023-November/017238.html advisory
- https://access.redhat.com/errata/RHSA-2023:7512 advisory
- https://access.redhat.com/errata/RHSA-2023:7511 advisory
- https://access.redhat.com/errata/RHSA-2023:7510 advisory
- https://access.redhat.com/errata/RHSA-2023:7509 advisory
- https://access.redhat.com/errata/RHSA-2023:7508 advisory
- https://access.redhat.com/errata/RHSA-2023:7507 advisory
…and 31 more