Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2024-14977
HistoryMar 21, 2024 - 12:00 a.m.

Code execution vulnerability in multiple Mozilla products (CNVD-2024-14977)

2024-03-2100:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
mozilla
firefox
thunderbird
code execution
integer overflow
arbitrary code
denial of service

7.9 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.3%

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox (the web browser).Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in several Mozilla products, caused by an integer overflow in AppendEncodedAttributeValue(), ExtraSpaceNeededForAttrEncoding() and AppendEncodedCharacters(). An attacker could use this vulnerability to execute arbitrary code on a system or cause a denial of service.