CVE-2024-29944

2024-03-2213:15:07

Alpine Linux Development Team

security.alpinelinux.org

cve-2024-29944

desktop firefox

javascript execution

6.9 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

16.0%

JSON

An attacker was able to inject an event handler into a privileged object that would allow arbitrary JavaScript execution in the parent process. Note: This vulnerability affects Desktop Firefox only, it does not affect mobile versions of Firefox. This vulnerability affects Firefox < 124.0.1 and Firefox ESR < 115.9.1.

OSVersionArchitecturePackageVersionFilename
Alpineedge-communitynoarchmozjs115< 115.9.1-r0UNKNOWN
Alpine3.18-communitynoarchfirefox-esr< 115.9.1-r0UNKNOWN
Alpine3.19-communitynoarchfirefox-esr< 115.9.1-r0UNKNOWN
Alpine3.19-communitynoarchmozjs115< 115.9.1-r0UNKNOWN
Alpine3.20-communitynoarchmozjs115< 115.9.1-r0UNKNOWN

OS	Version	Architecture	Package	Version	Filename
Alpine	edge-community	noarch	mozjs115	< 115.9.1-r0	UNKNOWN
Alpine	3.18-community	noarch	firefox-esr	< 115.9.1-r0	UNKNOWN
Alpine	3.19-community	noarch	firefox-esr	< 115.9.1-r0	UNKNOWN
Alpine	3.19-community	noarch	mozjs115	< 115.9.1-r0	UNKNOWN
Alpine	3.20-community	noarch	mozjs115	< 115.9.1-r0	UNKNOWN