The vulnerability of Mozilla Firefox, Mozilla Firefox ESR, and the email client Mozilla Thunderbird lies in improper restrictions on operations within memory buffers, which allows attackers to influence system functionality.

🗓️ 04 Sep 2024 00:00:00Reported by FSTEC of Russia — Information Security Threat DatabaseType

bdu_fstec

bdu_fstec🔗 bdu.fstec.ru👁 4 Views

Firefox, Firefox ESR, and Thunderbird have memory buffer flaws enabling remote attackers to influence operations.

Reporter	Title	Published	Views	Family All 171
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: IBM App Connect Enterprise Certified Container UBI updates	14 Mar 202516:34	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM Cloud Pak for Multicloud Management	15 Apr 202502:34	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge for IBM Cloud Pak for Data v4.8.8 is vulnerable to multiple Base OS issues	1 May 202521:48	–	ibm
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2024-027)	17 Aug 202400:00	–	nessus
Tenable Nessus	Debian dla-3937 : libnss3 - security update	28 Oct 202400:00	–	nessus
Tenable Nessus	Debian dsa-5727 : firefox-esr - security update	11 Jul 202400:00	–	nessus
Tenable Nessus	Debian dsa-5733 : thunderbird - security update	18 Jul 202400:00	–	nessus
Tenable Nessus	Debian dsa-5807 : libnss3 - security update	10 Nov 202400:00	–	nessus
Tenable Nessus	Fedora 39 : thunderbird (2024-0639ad0299)	26 Jul 202400:00	–	nessus

Vulners

Node

mozilla firefoxRange<128

OR

mozilla firefox_esrRange<115.13

OR

mozilla thunderbirdRange<115.13

OR

mozilla thunderbirdRange<128

Source	Link
redos	www.redos.red-soft.ru/support/secure/
mozilla	www.mozilla.org/security/advisories/mfsa2024-29/
mozilla	www.mozilla.org/security/advisories/mfsa2024-30/
mozilla	www.mozilla.org/security/advisories/mfsa2024-31/
mozilla	www.mozilla.org/security/advisories/mfsa2024-32/
wiki	www.wiki.astralinux.ru/astra-linux-se17-bulletin-2024-1108SE17MD
altsp	www.altsp.su/obnovleniya-bezopasnosti/
redos	www.redos.red-soft.ru/support/secure/uyazvimosti/uyazvimost-nss-cve-2024-6602/
xn--80ahaefyxhn	www.xn--80ahaefyxhn.xn--j1afgaq.xn--p1ai/bin/view/%D0%9E%D0%A1%D0%BD%D0%BE%D0%B2%D0%B0/%D0%9E%D0%B1%D0%BD%D0%BE%D0%B2%D0%BB%D0%B5%D0%BD%D0%B8%D1%8F/2.12/
wiki	www.wiki.astralinux.ru/astra-linux-se18-bulletin-2025-0411SE18

06 May 2025 00:00Current

7.2High risk

Vulners AI Score7.2

CVSS 36.1

CVSS 26.4

EPSS0.00977

memory buffers remote attackers firefox browser thunderbird client