PT-2023-3106 · Mozilla+4 · Firefox+4

Andrew Mccreight

+1

·

Publicado

2023-06-06

·

Atualizado

2025-03-14

·

CVE-2023-34417

CVSS v3.1

10

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 114
Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted malicious web page.
Recommendations For versions prior to 114, update to version 114 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious web pages to minimize the risk of exploitation.

Exploit

Correção

Memory Corruption

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787CWE-119

Identificadores relacionados

ALT-PU-2023-1974
ALT-PU-2023-5754
ALT-PU-2023-6436
ALT-PU-2024-14035
ALT-PU-2024-3614
ALT-PU-2024-4241
BDU:2023-03198
CVE-2023-34417
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2024:12991-1
OPENSUSE-SU-2024:14572-1
USN-6143-1
USN-6143-2
USN-6143-3

Produtos afetados

Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu