KLA65257 ACE vulnerability in Mozilla Firefox ESR

Remote code execution vulnerability was found in Mozilla Firefox ESR. Malicious users can exploit this vulnerability to execute arbitrary code.

Original advisories

MFSA2024-16

Related products

Mozilla-Firefox-ESR

CVE list

CVE-2024-29944 warning

Solution

Update to the latest version

Download Firefox ESR

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Mozilla Firefox ESR earlier than 115.9.1