PT-2023-3106 · Mozilla+4 · Firefox+4

Andrew Mccreight

+1

·

Published

2023-06-06

·

Updated

2025-03-14

·

CVE-2023-34417

CVSS v3.1

10

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 114
Description The issue is related to memory safety bugs, including evidence of memory corruption, which could potentially be exploited to run arbitrary code. Exploitation of this issue may allow a remote attacker to execute arbitrary code using a specially crafted malicious web page.
Recommendations For versions prior to 114, update to version 114 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially malicious web pages to minimize the risk of exploitation.

Exploit

Fix

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787CWE-119

Related Identifiers

ALT-PU-2023-1974
ALT-PU-2023-5754
ALT-PU-2023-6436
ALT-PU-2024-14035
ALT-PU-2024-3614
ALT-PU-2024-4241
BDU:2023-03198
CVE-2023-34417
OESA-2025-1265
OESA-2025-1268
OPENSUSE-SU-2024:12991-1
OPENSUSE-SU-2024:14572-1
USN-6143-1
USN-6143-2
USN-6143-3

Affected Products

Alt Linux
Astra Linux
Firefox
Linuxmint
Ubuntu