PT-2023-4133 · Mozilla+10 · Firefox+12

Dianna Smith

+2

·

Published

2023-08-01

·

Updated

2024-12-12

·

CVE-2023-4056

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Firefox versions 115 through 115 Firefox ESR versions 102.13 through 102.13 Firefox ESR versions 115.0 through 115.0 Thunderbird versions 102.13 through 102.13 Thunderbird versions 115.0 through 115.0 Firefox versions prior to 116 Firefox ESR versions prior to 102.14 Firefox ESR versions prior to 115.1
Description The issue is related to memory safety bugs that could potentially be exploited to run arbitrary code, with evidence of memory corruption found in some cases. The vulnerability may allow a remote attacker to impact the integrity of protected information by exploiting errors in state management due to an excessive number of cookies in document.cookie. Additionally, the vulnerability in the Mozilla Thunderbird email client is related to a boundary error when processing HTML content, which could allow an attacker to trick a victim into opening a specially crafted web page, causing memory damage and potentially executing arbitrary code.
Recommendations For Firefox version 115, update to version 116 or later. For Firefox ESR version 115.0, update to version 115.1 or later. For Firefox ESR version 102.13, update to version 102.14 or later. For Thunderbird version 115.0, update to a version that includes the fix for the boundary error in HTML content processing. For Thunderbird version 102.13, update to a version that includes the fix for the boundary error in HTML content processing. As a temporary workaround, consider restricting the use of document.cookie to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Memory Corruption

Buffer Overflow

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-787CWE-119CWE-120

Related Identifiers

ALSA-2023:4462
ALSA-2023:4468
ALSA-2023:4497
ALSA-2023:4499
ALT-PU-2023-5754
ALT-PU-2023-5836
ALT-PU-2023-6436
ALT-PU-2024-13898
ALT-PU-2024-14035
ALT-PU-2024-3614
ALT-PU-2024-3860
ALT-PU-2024-4241
ALT-PU-2024-4748
BDU:2023-04442
CESA-2023_4468
CESA-2023_4497
CVE-2023-4056
DLA-3521-1
DLA-3523-1
DSA-5464-1
DSA-5469-1
MGASA-2023-0266
OESA-2023-1671
OESA-2023-1673
OESA-2023-1674
OPENSUSE-SU-2023_3162-1
OPENSUSE-SU-2023_3228-1
OPENSUSE-SU-2024:13091-1
OPENSUSE-SU-2024:13124-1
OPENSUSE-SU-2024:13133-1
OPENSUSE-SU-2024:14572-1
RHSA-2023:4460
RHSA-2023:4461
RHSA-2023:4462
RHSA-2023:4463
RHSA-2023:4464
RHSA-2023:4465
RHSA-2023:4468
RHSA-2023:4469
RHSA-2023:4492
RHSA-2023:4493
RHSA-2023:4494
RHSA-2023:4495
RHSA-2023:4496
RHSA-2023:4497
RHSA-2023:4499
RHSA-2023:4500
RHSA-2023_4461
RHSA-2023_4462
RHSA-2023_4468
RHSA-2023_4495
RHSA-2023_4497
RHSA-2023_4499
RLSA-2023:4462
RLSA-2023:4468
RLSA-2023:4497
RLSA-2023:4499
ROSA-SA-2023-2232
ROSA-SA-2023-2233
SUSE-SU-2023:3161-1
SUSE-SU-2023:3162-1
SUSE-SU-2023:3163-1
SUSE-SU-2023:3228-1
SUSE-SU-2023_3161-1
SUSE-SU-2023_3162-1
SUSE-SU-2023_3163-1
USN-6267-1
USN-6267-2
USN-6267-3
USN-6333-1

Affected Products

Alt Linux
Almalinux
Astra Linux
Centos
Firefox
Firefox Esr
Linuxmint
Red Hat
Red Os
Rocky Linux
Suse
Thunderbird
Ubuntu