PT-2023-7304 · Mozilla+9 · Firefox+11

M. Coolie + 1 · Published 2023-11-21 · Updated 2025-03-21 · CVE-2023-6207

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Firefox versions prior to 120 Firefox ESR versions prior to 115.5.0 Thunderbird versions prior to 115.5.0

Description The issue is related to ownership mismanagement, leading to a use-after-free in ReadableByteStreams. This can be exploited by a remote attacker to execute arbitrary code.

Recommendations For Firefox versions prior to 120, update to version 120 or later. For Firefox ESR versions prior to 115.5.0, update to version 115.5.0 or later. For Thunderbird versions prior to 115.5.0, update to version 115.5.0 or later.

Exploit

Fix

Buffer Overflow

Use After Free

Weakness Enumeration

CWE-119

CWE-416

Related Identifiers

ALSA-2023:7500

ALSA-2023:7501

ALSA-2023:7507

ALSA-2023:7508

ALT-PU-2023-7473

ALT-PU-2023-8216

ALT-PU-2023-8227

ALT-PU-2023-8368

ALT-PU-2024-13898

ALT-PU-2024-15839

ALT-PU-2024-3614

ALT-PU-2024-3860

ALT-PU-2024-4748

BDU:2023-08332

CESA-2023_7500

CESA-2023_7508

CVE-2023-6207

DLA-3661-1

DLA-3674-1

DSA-5561-1

DSA-5566-1

MGASA-2023-0342

MGASA-2023-0343

OESA-2025-1322

OESA-2025-1323

OPENSUSE-SU-2023_4588-1

OPENSUSE-SU-2023_4928-1

OPENSUSE-SU-2024:13459-1

OPENSUSE-SU-2024:13468-1

OPENSUSE-SU-2024:14572-1

RHSA-2023:7499

RHSA-2023:7500

RHSA-2023:7501

RHSA-2023:7502

RHSA-2023:7503

RHSA-2023:7504

RHSA-2023:7505

RHSA-2023:7506

RHSA-2023:7507

RHSA-2023:7508

RHSA-2023:7509

RHSA-2023:7510

RHSA-2023:7511

RHSA-2023:7512

RHSA-2023:7547

RHSA-2023:7569

RHSA-2023:7570

RHSA-2023:7573

RHSA-2023:7574

RHSA-2023:7577

RHSA-2023_7500

RHSA-2023_7501

RHSA-2023_7505

RHSA-2023_7507

RHSA-2023_7508

RHSA-2023_7509

RLSA-2023:7500

SUSE-SU-2023:4588-1

SUSE-SU-2023:4912-1

SUSE-SU-2023:4928-1

SUSE-SU-2023:4929-1

USN-6509-1

USN-6509-2

USN-6515-1

Affected Products

Alt Linux

Almalinux

Astra Linux

Centos

Firefox

Firefox Esr

Linuxmint

Red Hat

Red Os

Suse

Thunderbird

Ubuntu

References · 2023

• 🔥 https://github.com/mistymntncop/CVE-2023-4863 · Exploit
• 🔥 https://github.com/LOURC0D3/CVE-2024-4367-PoC · Exploit
• 🔥 https://github.com/bjrjk/CVE-2024-29943 · Exploit
• 🔥 https://github.com/s4vvysec/CVE-2024-4367-POC · Exploit
• 🔥 https://github.com/LiveOverflow/webp-CVE-2023-4863 · Exploit
• 🔥 https://github.com/wrv/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/UT-Security/cve-2023-5217-poc · Exploit
• 🔥 https://github.com/Zombie-Kaiser/cve-2024-4367-PoC-fixed · Exploit
• 🔥 https://github.com/spaceraccoon/detect-cve-2024-4367 · Exploit
• 🔥 https://github.com/tdonaworth/Firefox-CVE-2024-9680 · Exploit
• 🔥 https://github.com/bbaranoff/CVE-2023-4863 · Exploit
• https://osv.dev/vulnerability/ALSA-2023:7508 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2023:4912-1 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6208 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-6213 · Vendor Advisory