PT-2023-3735 · Mozilla+5 · Firefox+5

Andrew Mccreight

·

Publicado

2023-07-04

·

Atualizado

2025-03-14

·

CVE-2023-37212

CVSS v2.0

10

Alta

VetorAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 115
Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code with sufficient effort. This is a result of a buffer overflow in memory, allowing a remote attacker to execute arbitrary code.
Recommendations For versions prior to 115, update to version 115 or later to resolve the issue. As a temporary workaround, consider restricting access to sensitive features or modules in Firefox until the update is applied.

Correção

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALT-PU-2023-4102
ALT-PU-2023-5754
ALT-PU-2023-6436
ALT-PU-2024-14035
ALT-PU-2024-3614
ALT-PU-2024-4241
BDU:2023-04023
CVE-2023-37212
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2023_2886-1
OPENSUSE-SU-2024:13037-1
OPENSUSE-SU-2024:14572-1
SUSE-SU-2023:2849-1
SUSE-SU-2023:2850-1
SUSE-SU-2023:2886-1
USN-6201-1

Produtos afetados

Alt Linux
Astra Linux
Firefox
Linuxmint
Suse
Ubuntu