Lucene search
HistoryMay 14, 2024 - 6:15 p.m.
CVE-2024-4367
font handling
pdf.js
javascript execution
firefox
thunderbird
vulnerability
A type check was missing when handling fonts in PDF.js, which would allow arbitrary JavaScript execution in the PDF.js context. This vulnerability affects Firefox < 126, Firefox ESR < 115.11, and Thunderbird < 115.11.
References
bugzilla.mozilla.org/show_bug.cgi?id=1893645
lists.debian.org/debian-lts-announce/2024/05/msg00010.html
lists.debian.org/debian-lts-announce/2024/05/msg00012.html
www.mozilla.org/security/advisories/mfsa2024-21/
www.mozilla.org/security/advisories/mfsa2024-22/
www.mozilla.org/security/advisories/mfsa2024-23/
Related
debiancve
debiancve
CVE-2024-4367
2024-05-14 18:15:12
osv
osv
Arbitrary JavaScript execution due to using outdated libraries
2024-06-05 14:15:50
react-pdf vulnerable to arbitrary JavaScript execution upon opening a malicious PDF with PDF.js
2024-05-07 16:48:59
CVE-2024-34342
2024-05-07 15:15:09
wpvulndb
wpvulndb
PDF.js < 4.2.67 - Arbitrary JavaScript Execution
2024-06-03 00:00:00
cve
cve
CVE-2024-4367
2024-05-14 18:15:12
github
github
Arbitrary JavaScript execution due to using outdated libraries
2024-06-05 14:15:50
veracode
veracode
Remote Code Execution (RCE)
2024-05-08 04:43:35
redhatcve
redhatcve
CVE-2024-4367
2024-05-14 18:54:47
githubexploit
githubexploit
Exploit for CVE-2024-4367
2024-05-20 10:02:23
Exploit for CVE-2024-4367
2024-05-20 22:56:10
Exploit for CVE-2024-4367
2024-05-22 18:05:47
vulnrichment
vulnrichment
CVE-2024-4367
2024-05-14 17:21:23
cvelist
cvelist
CVE-2024-4367
2024-05-14 17:21:23
ubuntucve
ubuntucve
CVE-2024-4367
2024-05-14 00:00:00
thn
thn
nessus
nessus
Mozilla Firefox ESR < 115.11
2024-05-14 00:00:00
Mozilla Thunderbird < 115.11
2024-05-14 00:00:00
RHEL 9 : firefox (RHSA-2024:2884)
2024-05-16 00:00:00
redhat
redhat
(RHSA-2024:2887) Important: firefox security update
2024-05-16 11:24:50
(RHSA-2024:2884) Important: firefox security update
2024-05-16 11:24:32
(RHSA-2024:2882) Important: firefox security update
2024-05-16 11:23:40
oraclelinux
oraclelinux
firefox security update
2024-05-16 00:00:00
thunderbird security update
2024-05-20 00:00:00
thunderbird security update
2024-06-11 00:00:00
debian
debian
[SECURITY] [DSA 5693-1] thunderbird security update
2024-05-17 17:04:52
[SECURITY] [DSA 5691-1] firefox-esr security update
2024-05-15 17:48:47
[SECURITY] [DLA 3815-1] firefox-esr security update
2024-05-16 07:16:17
openvas
openvas
Mozilla Firefox ESR Security Update (mfsa_2024-22) - Mac OS X
2024-05-17 00:00:00
Mozilla Thunderbird Security Update (mfsa_2024-23) - Windows
2024-05-17 00:00:00
Slackware: Security Advisory (SSA:2024-164-01)
2024-06-13 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2024-06-12 21:36:48
[slackware-security] mozilla-firefox
2024-05-14 19:27:14
freebsd
freebsd
Gitlab -- Vulnerabilities
2024-05-22 00:00:00
kaspersky
kaspersky
KLA67587 Multiple vulnerabilities in Mozilla Firefox ESR
2024-05-14 00:00:00
KLA67450 Multiple vulnerabilities in Mozilla Thunderbird
2024-05-15 00:00:00
KLA67588 Multiple vulnerabilities in Mozilla Firefox
2024-05-14 00:00:00
almalinux
almalinux
Moderate: thunderbird security update
2024-06-10 00:00:00
Important: thunderbird security update
2024-05-16 00:00:00
Moderate: firefox security update
2024-06-10 00:00:00
mageia
mageia
Updated nss & firefox packages fix security vulnerabilities
2024-05-22 02:17:20
Updated thunderbird packages fix security vulnerabilities
2024-05-22 02:38:02
rocky
rocky
thunderbird security update
2024-06-14 14:00:40
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.11 — Mozilla
2024-05-14 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.11 — Mozilla
2024-05-15 00:00:00
Security Vulnerabilities fixed in Firefox 126 — Mozilla
2024-05-14 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-05-22 00:00:00
Firefox vulnerabilities
2024-05-21 00:00:00
Firefox regressions
2024-05-29 00:00:00
amazon
amazon
Important: thunderbird
2024-06-06 20:17:00
wordfence
wordfence