Lucene search

China National Vulnerability DatabaseCNVD-2024-14979

HistoryMar 21, 2024 - 12:00 a.m.

Code execution vulnerability in multiple Mozilla products (CNVD-2024-14979)

2024-03-2100:00:00

China National Vulnerability Database

www.cnvd.org.cn

mozilla

firefox

thunderbird

code execution

vulnerability

arbitrary code

denial of service

cnvd-2024-14979

7.7 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

10.5%

JSON

Mozilla Firefox is an open source web browser.Mozilla Firefox ESR is an extended support version of Firefox (the web browser).Mozilla Thunderbird is a suite of email client software separate from the Mozilla Application Suite. A code execution vulnerability exists in multiple Mozilla products that stems from a self-referential object that could lead to reuse after release. An attacker could exploit the vulnerability to execute arbitrary code on a system or cause a denial of service.

CPENameOperatorVersion
mozilla firefox esrlt115.9
mozilla thunderbirdlt115.9

CPE	Name	Operator	Version
	mozilla firefox esr	lt	115.9
	mozilla thunderbird	lt	115.9