PT-2023-2799 · Mozilla+10 · Firefox Esr+11
Gabriele Svelto
·
Published
2022-07-27
·
Updated
2025-01-09
·
CVE-2023-1945
CVSS v2.0
7.5
High
| Vector | AV:N/AC:L/Au:N/C:P/I:P/A:P |
Name of the Vulnerable Software and Affected Versions
Thunderbird versions prior to 102.10
Firefox ESR versions prior to 102.10
Description
The issue is related to the Safe Browsing API, where unexpected data could lead to memory corruption and a potentially exploitable crash. This could allow a remote attacker to execute arbitrary code in the target system and cause memory damage using a specially crafted website. The vulnerability is associated with a buffer overflow operation in memory.
Recommendations
For Thunderbird versions prior to 102.10, update to version 102.10 or later.
For Firefox ESR versions prior to 102.10, update to version 102.10 or later.
As a temporary workaround, consider restricting access to the Safe Browsing API until a patch is available.
Fix
Memory Corruption
Information Disclosure
NULL Pointer Dereference
UI Misrepresentation of Critical Information
Buffer Overflow
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Firefox Esr
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Thunderbird
Ubuntu