CVE-2024-2605

2024-03-1912:15:08

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-2605

windows

error reporter

arbitrary code

sandbox

firefox

thunderbird

7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

15.5%

JSON

An attacker could have leveraged the Windows Error Reporter to run arbitrary code on the system escaping the sandbox. Note: This issue only affected Windows operating systems. Other operating systems are unaffected. This vulnerability affects Firefox < 124, Firefox ESR < 115.9, and Thunderbird < 115.9.

OSVersionArchitecturePackageVersionFilename
Alpine3.18-communitynoarchfirefox-esr< 115.9.0-r0UNKNOWN
Alpine3.19-communitynoarchfirefox-esr< 115.9.0-r0UNKNOWN