PT-2024-3596 · Mozilla+4 · Firefox+4

Andrew Mccreight + 1 · Published 2024-04-16 · Updated 2025-03-14 · CVE-2024-3865

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Firefox versions prior to 125

Description: The issue is related to memory safety bugs present in Firefox, some of which showed evidence of memory corruption. It is presumed that with enough effort, some of these bugs could have been exploited to run arbitrary code. The vulnerability is also described as a buffer overflow in memory when processing HTML content, which could allow a remote attacker to execute arbitrary code.

Recommendations: For versions prior to 125, update to version 125 or later to resolve the issue. As a temporary workaround, consider restricting access to potentially vulnerable HTML content until the update is applied.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

ALT-PU-2024-15839

ALT-PU-2024-6765

BDU:2024-03907

CVE-2024-3865

OESA-2025-1265

OESA-2025-1268

OPENSUSE-SU-2024:13907-1

OPENSUSE-SU-2024:14572-1

USN-6747-1

USN-6747-2

Affected Products

Alt Linux

Astra Linux

Firefox

Linuxmint

Ubuntu

References · 2095

• 🔥 https://github.com/LOURC0D3/CVE-2024-4367-PoC · Exploit
• 🔥 https://github.com/bjrjk/CVE-2024-29943 · Exploit
• 🔥 https://github.com/s4vvysec/CVE-2024-4367-POC · Exploit
• 🔥 https://github.com/spaceraccoon/detect-cve-2024-4367 · Exploit
• 🔥 https://github.com/Zombie-Kaiser/cve-2024-4367-PoC-fixed · Exploit
• 🔥 https://github.com/tdonaworth/Firefox-CVE-2024-9680 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-4367 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-9394 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-6613 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-10466 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-5725 · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-3865 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-9400 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2023-5172 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-3853 · Security Note