PT-2024-4247 · Mozilla+11 · Pdf.Js+14
Thomas Rinsma
·
Published
2023-10-30
·
Updated
2026-04-02
·
CVE-2024-4367
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions: Mozilla Firefox versions 115.11.0esr-1~deb10u1 and earlier, Mozilla Thunderbird versions 115.10.0 and 128.3.0-alt1, Network Security Services (NSS).
Description: Multiple security issues have been found in Mozilla Firefox, Mozilla Thunderbird, and Network Security Services (NSS). These vulnerabilities could potentially result in arbitrary code execution, denial of service, or clickjacking. The vulnerabilities in Firefox have been addressed in version 115.11.0esr-1~deb10u1. The vulnerabilities in Thunderbird have been addressed in versions 115.10.0 and 128.3.0-alt1. The vulnerability in NSS has been addressed with fixes for a Minerva side-channel information leak.
Recommendations: Upgrade Mozilla Firefox to version 115.11.0esr-1~deb10u1 or later. Upgrade Mozilla Thunderbird to version 115.10.0 or 128.3.0-alt1. Update Network Security Services (NSS) to the latest version.
Exploit
Fix
Type Confusion
Improper Check for Exceptional Conditions
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Alt Linux
Almalinux
Astra Linux
Centos
Confluence
Firefox
Firefox Esr
Linuxmint
Pdf.Js
Red Hat
Red Os
Rocky Linux
Suse
Thunderbird
Ubuntu