PT-2023-22304 · Mozilla+1 · Focus+2

Hafiizh + 1 · Published 2023-04-15 · Updated 2024-12-12 · CVE-2023-29534

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions Firefox for Android versions prior to 112 Focus for Android versions prior to 112

Description Different techniques existed to obscure the fullscreen notification in Firefox and Focus for Android, potentially leading to user confusion and spoofing attacks.

Recommendations For Firefox for Android versions prior to 112, update to version 112 or later to resolve the issue. For Focus for Android versions prior to 112, update to version 112 or later to resolve the issue.

Fix

Related Identifiers

ALT-PU-2023-1621

ALT-PU-2023-1817

ALT-PU-2023-5202

CVE-2023-29534

OPENSUSE-SU-2024:12882-1

OPENSUSE-SU-2024:14572-1

Affected Products

Alt Linux

Firefox

Focus

References · 1948

• https://bdu.fstec.ru/vul/2023-05893 · Security Note
• https://bdu.fstec.ru/vul/2023-01805 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29551 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25750 · Security Note
• https://bdu.fstec.ru/vul/2023-02689 · Security Note
• https://osv.dev/vulnerability/CVE-2023-29534 · Vendor Advisory
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29531 · Security Note
• https://bdu.fstec.ru/vul/2023-05888 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29538 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-28160 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29549 · Security Note
• https://bdu.fstec.ru/vul/2023-05891 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25748 · Security Note
• https://bdu.fstec.ru/vul/2023-01452 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-29539 · Security Note