Lucene search
HistoryJul 09, 2024 - 3:15 p.m.
CVE-2024-6603
firefox
memory corruption
vulnerability
cve-2024-6603
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0
Percentile
15.8%
In an out-of-memory scenario an allocation could fail but free would have been called on the pointer afterwards leading to memory corruption. This vulnerability affects Firefox < 128, Firefox ESR < 115.13, Thunderbird < 115.13, and Thunderbird < 128.
Related
debiancve
debiancve
CVE-2024-6603
2024-07-09 15:15:12
ubuntucve
ubuntucve
CVE-2024-6603
2024-07-10 00:00:00
alpinelinux
alpinelinux
CVE-2024-6603
2024-07-09 15:15:12
cvelist
cvelist
CVE-2024-6603
2024-07-09 14:25:57
osv
osv
CVE-2024-6603
2024-07-10 00:00:00
CGA-4h6p-w3r6-fc89
2024-07-15 21:52:23
CGA-fwr6-xf4j-g2c2
2024-07-15 21:57:45
vulnrichment
vulnrichment
CVE-2024-6603
2024-07-09 14:25:57
redhatcve
redhatcve
CVE-2024-6603
2024-07-15 14:37:43
cve
cve
CVE-2024-6603
2024-07-09 15:15:12
wolfi
wolfi
CVE-2024-6603 vulnerabilities
2024-09-18 21:11:55
rocky
rocky
firefox security update
2024-07-15 12:18:45
thunderbird security update
2024-07-26 12:33:59
thunderbird security update
2024-07-26 12:33:00
redhat
redhat
(RHSA-2024:4500) Important: firefox security update
2024-07-11 11:26:07
(RHSA-2024:4517) Important: firefox security update
2024-07-11 15:02:15
(RHSA-2024:4508) Important: firefox security update
2024-07-11 13:37:26
nessus
nessus
Oracle Linux 9 : firefox (ELSA-2024-4500)
2024-07-12 00:00:00
RHEL 9 : thunderbird (RHSA-2024:4624)
2024-07-18 00:00:00
Rocky Linux 8 : thunderbird (RLSA-2024:4635)
2024-07-26 00:00:00
almalinux
almalinux
Important: thunderbird security update
2024-07-18 00:00:00
Important: thunderbird security update
2024-07-18 00:00:00
Important: firefox security update
2024-07-11 00:00:00
oraclelinux
oraclelinux
firefox security update
2024-07-11 00:00:00
firefox security update
2024-07-11 00:00:00
thunderbird security update
2024-07-18 00:00:00
mageia
mageia
Updated thunderbird packages fix security vulnerabilities
2024-07-21 05:28:06
Updated nss & firefox packages fix security vulnerabilities
2024-07-16 06:21:38
openvas
openvas
Mozilla Thunderbird Security Update (mfsa_2024-31) - Windows
2024-07-19 00:00:00
Mageia: Security Advisory (MGASA-2024-0274)
2024-07-22 00:00:00
Mozilla Firefox ESR Security Update (mfsa_2024-30) - Windows
2024-07-11 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2024-07-23 19:09:25
[slackware-security] mozilla-firefox
2024-07-10 17:52:20
redos
redos
ROS-20240920-11
2024-09-20 00:00:00
ROS-20240902-11
2024-09-02 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-07-22 00:00:00
Firefox vulnerabilities
2024-07-10 00:00:00
kaspersky
kaspersky
KLA70479 Multiple vulnerabilities in Mozilla Thunderbird
2024-07-15 00:00:00
KLA70405 Multiple vulnerabilities in Mozilla Firefox ESR
2024-07-09 00:00:00
KLA70478 Multiple vulnerabilities in Mozilla Thunderbird
2024-07-11 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.13 — Mozilla
2024-07-09 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.13 — Mozilla
2024-07-15 00:00:00
Security Vulnerabilities fixed in Thunderbird 128 — Mozilla
2024-07-11 00:00:00
CVSS3
7.4
Attack Vector
NETWORK
Attack Complexity
HIGH
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N
EPSS
0
Percentile
15.8%
Related for NVD:CVE-2024-6603