KLA11325 Multiple vulnerabilities in Mozilla Firefox and Mozilla Firefox ESR

Detect date:

10/02/2018

Severity:

Critical

Description:

Multiple serious vulnerabilities were found in Mozilla Firefox and Mozilla Firefox ESR. Malicious users can exploit these vulnerabilities to execute arbitrary code, bypass security restrictions.

Affected products:

Mozilla Firefox earlier than 62.0.3
Mozilla Firefox ESR 60 earlier than 60.2.2

Solution:

Update to the latest version
Download Mozilla Firefox

Original advisories:

Mozilla Foundation Security Advisory 2018-24

Impacts:

ACE

Related products:

Mozilla Firefox

CVE-IDS:

CVE-2018-123865.8High
CVE-2018-123876.4High

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.