The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird lies in improper restrictions on operations within memory buffers, allowing attackers to execute arbitrary memory writes.

🗓️ 17 Mar 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 7 Views

Vulnerabilities in Firefox and Thunderbird permit remote arbitrary memory writes via improper memory buffer handling of Safe Bag attributes.

Reporter	Title	Published	Views	Family All 346
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.8.0-alt1	10 Mar 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package palemoon version 2:32.0.1-alt1	16 Mar 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.8.0-alt1	15 Mar 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar SIEM includes components with known vulnerabilities	6 Jul 202318:48	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Pak for Security includes components with multiple known vulnerabilities	7 Jun 202316:53	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Security Vulnerabilities may affect IBM Robotic Process Automation for Cloud Pak.	21 Jun 202322:10	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in CloudPak for Watson AIOPs	26 Apr 202315:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM QRadar Network Packet Capture includes components with multiple known vulnerabilities	10 Oct 202313:37	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Assistant for IBM Cloud Pak for Data is vulnerable to Mozilla Network Security Services (NSS) arbitrary code execution vulnerability( CVE-2023-0767)	6 Jul 202318:01	–	ibm

Vulners

Node

OR

mozilla thunderbirdRange<102.8

mozilla firefoxRange<110

mozilla firefox_esrRange<102.8

project_harbor harborMatch2.7.0

oracle oracle_exadataRange<21.2.23.0.0

red_hat red_hat_enterprise_linuxMatch6

red_hat red_hat_enterprise_linuxMatch7

red_hat red_hat_enterprise_linuxMatch8

red_hat red_hat_enterprise_linuxMatch9

Source	Link
redos	www.redos.red-soft.ru/support/secure/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2023-05/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2023-06/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2023-07/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-0767
access	www.access.redhat.com/security/cve/CVE-2023-0767
altsp	www.altsp.su/obnovleniya-bezopasnosti/
abf	www.abf.rosalinux.ru/advisories/ROSA-SA-2023-2165
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.8/
login	www.login.oracle.com/

11 Nov 2024 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 37.5

CVSS 27.6

EPSS0.00817

Mozilla Firefox Mozilla Thunderbird Memory buffer restrictions Arbitrary memory writes Safe Bag attributes