The vulnerability of Mozilla Firefox, Firefox ESR, and the email client Thunderbird relates to the execution of operations beyond the buffer in memory, allowing an attacker to execute arbitrary code.

🗓️ 26 Mar 2023 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 2 Views

A vulnerability in Firefox ESR and Thunderbird lets remote code execution via HTML beyond buffer.

Reporter	Title	Published	Views	Family All 232
ALT Linux	Security fix for the ALT Linux 10 package thunderbird version 102.9.0-alt1	31 Mar 202300:00	–	altlinux
ALT Linux	Security fix for the ALT Linux 10 package firefox-esr version 102.9.0-alt1	31 Mar 202300:00	–	altlinux
IBM Security Bulletins	Security Bulletin: Due to use of Mozilla Firefox, IBM Cloud Pak for Multicloud Management Monitoring is vulnerable to multiple vulnerabilities.	31 Aug 202311:04	–	ibm
ATTACKERKB	CVE-2023-28176	2 Jun 202317:15	–	attackerkb
Tenable Nessus	Amazon Linux 2 : thunderbird (ALAS-2023-1988)	22 Mar 202300:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2023-004)	27 Sep 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : firefox (ALSA-2023:1336)	21 Mar 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : firefox (ALSA-2023:1337)	21 Mar 202300:00	–	nessus
Tenable Nessus	AlmaLinux 8 : thunderbird (ALSA-2023:1403)	23 Mar 202300:00	–	nessus
Tenable Nessus	AlmaLinux 9 : thunderbird (ALSA-2023:1407)	24 Mar 202300:00	–	nessus

Vulners

Node

novell suse_openstack_cloudMatch9

OR

novell suse_openstack_cloud_crowbarMatch9

OR

novell suse_caas_platformMatch4.0

OR

mozilla firefoxRange<111

OR

mozilla firefox_esrRange<102.9

OR

mozilla thunderbirdRange<102.9

OR

red_hat red_hat_enterprise_linuxMatch7

OR

red_hat red_hat_enterprise_linuxMatch8

OR

red_hat red_hat_enterprise_linuxMatch9

Source	Link
cybersecurity-help	www.cybersecurity-help.cz/vdb/SB2023031644
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2023-09/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2023-10/
mozilla	www.mozilla.org/en-US/security/advisories/mfsa2023-11/
security-tracker	www.security-tracker.debian.org/tracker/CVE-2023-28176
access	www.access.redhat.com/security/cve/cve-2023-28176
ubuntu	www.ubuntu.com/security/notices/USN-5954-1
suse	www.suse.com/security/cve/CVE-2023-28176.html
repo	www.repo.red-soft.ru/redos/7.3c/x86_64/updates/
altsp	www.altsp.su/obnovleniya-bezopasnosti/

30 Sep 2024 00:00Current

8.1High risk

Vulners AI Score8.1

CVSS 37.5

CVSS 27.6

EPSS0.00713

firefox thunderbird html processing remote code execution beyond buffer