PT-2024-37748 · Mozilla+2 · Firefox Android+2

Shaheen Fazim · Publicado 2024-07-09 · Atualizado 2025-03-14 · CVE-2024-6605

Positive Technologies (AI Summary) · Pt

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Nome do software vulnerável e versões afetadas

Versões do Firefox para Android anteriores à 128

Descrição

A vulnerabilidade permite a interação imediata com solicitações de permissão, o que poderia ser usado para ataques de “tapjacking”.

Recomendações

Para versões anteriores à 128, atualize para a versão 128 ou posterior para resolver o problema.

Correção

Enumeração de Fraquezas

CWE-277

Identificadores relacionados

ALT-PU-2024-13895

ALT-PU-2024-15839

CVE-2024-6605

OESA-2025-1265

OESA-2025-1268

OPENSUSE-SU-2024:14197-1

OPENSUSE-SU-2024:14572-1

OPENSUSE-SU-2024_3003-1

SUSE-SU-2024:2876-1

SUSE-SU-2024:3003-1

Produtos afetados

Alt Linux

Firefox Android

Suse

Referências · 2066

• https://suse.com/security/cve/CVE-2023-25744 · Nota
• https://suse.com/security/cve/CVE-2021-29962 · Nota
• https://suse.com/security/cve/CVE-2023-29545 · Nota
• https://suse.com/security/cve/CVE-2020-26955 · Nota
• https://suse.com/security/cve/CVE-2015-2731 · Nota
• https://suse.com/security/cve/CVE-2024-2612 · Nota
• https://suse.com/security/cve/CVE-2023-5731 · Nota
• https://suse.com/security/cve/CVE-2016-5281 · Nota
• https://suse.com/security/cve/CVE-2019-17016 · Nota
• https://suse.com/security/cve/CVE-2022-29917 · Nota
• https://suse.com/security/cve/CVE-2017-5444 · Nota
• https://suse.com/security/cve/CVE-2016-5252 · Nota
• https://suse.com/security/cve/CVE-2017-5460 · Nota
• https://suse.com/security/cve/CVE-2008-0412 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2024-4367 · Nota de Segurança