Mozilla Firefox Buffer Overflow Vulnerability (CNVD-2023-06866)

2022-06-0100:00:00

China National Vulnerability Database

www.cnvd.org.cn

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

JSON

Mozilla Firefox is an open source web browser from the Mozilla Foundation, U.S. Mozilla Firefox is vulnerable to a buffer overflow vulnerability that stems from manipulation of webp images that could lead to memory corruption. An attacker could exploit the vulnerability to cause an uninitialized variable on the stack to be incorrectly released, leading to a potentially exploitable crash.