Lucene search
PRIOn knowledge basePRION:CVE-2023-4574HistorySep 11, 2023 - 9:15 a.m.
Design/Logic Flaw
2023-09-1109:15:00
PRIOn knowledge base
www.prio-n.com
8
color picker
callback creation
use-after-free
ipc
exploit
firefox
thunderbird
vulnerability
When creating a callback over IPC for showing the Color Picker window, multiple of the same callbacks could have been created at a time and eventually all simultaneously destroyed as soon as one of the callbacks finished. This could have led to a use-after-free causing a potentially exploitable crash. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 117.0 | |
| firefox_esr | ge | 115.0 | |
| firefox_esr | lt | 115.2 | |
| firefox_esr | lt | 102.15 | |
| thunderbird | lt | 115.2 |
Related
alpinelinux
alpinelinux
CVE-2023-4574
2023-09-11 09:15:09
nvd
nvd
CVE-2023-4574
2023-09-11 09:15:09
debiancve
debiancve
CVE-2023-4574
2023-09-11 09:15:09
veracode
veracode
Use After Free
2023-09-03 12:45:25
cve
cve
CVE-2023-4574
2023-09-11 09:15:09
redhatcve
redhatcve
CVE-2023-4574
2023-08-30 10:15:41
ubuntucve
ubuntucve
CVE-2023-4574
2023-08-30 00:00:00
cvelist
cvelist
CVE-2023-4574
2023-09-11 08:00:40
nessus
nessus
Debian DSA-5488-1 : thunderbird - security update
2023-09-06 00:00:00
Debian DLA-3554-1 : thunderbird - LTS security update
2023-09-06 00:00:00
Amazon Linux 2 : firefox (ALASFIREFOX-2023-014)
2023-10-06 00:00:00
openvas
openvas
Debian: Security Advisory (DSA-5488-1)
2023-09-05 00:00:00
Debian: Security Advisory (DLA-3554-1)
2023-09-05 00:00:00
Debian: Security Advisory (DLA-3553-1)
2023-09-04 00:00:00
osv
osv
thunderbird - security update
2023-09-03 00:00:00
thunderbird - security update
2023-09-05 00:00:00
firefox-esr - security update
2023-08-30 00:00:00
debian
debian
[SECURITY] [DLA 3553-1] firefox-esr security update
2023-09-01 13:30:53
[SECURITY] [DSA 5485-1] firefox-esr security update
2023-08-30 17:54:54
[SECURITY] [DSA 5488-1] thunderbird security update
2023-09-03 11:54:48
kaspersky
kaspersky
KLA52674 Multiple vulnerabilities in Mozilla Thunderbird
2023-08-29 00:00:00
KLA52662 Multiple vulnerabilities in Mozilla Firefox ESR
2023-08-29 00:00:00
KLA52660 Multiple vulnerabilities in Mozilla Firefox
2023-08-29 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 102.15 — Mozilla
2023-08-29 00:00:00
Security Vulnerabilities fixed in Thunderbird 102.15 — Mozilla
2023-08-29 00:00:00
Security Vulnerabilities fixed in Firefox 117 — Mozilla
2023-08-29 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2023-09-14 00:00:00
Firefox vulnerabilities
2023-08-30 00:00:00
almalinux
almalinux
Important: thunderbird security update
2023-09-04 00:00:00
Important: firefox security update
2023-09-04 00:00:00
Important: thunderbird security update
2023-09-04 00:00:00
oraclelinux
oraclelinux
thunderbird security update
2023-09-06 00:00:00
thunderbird security update
2023-09-05 00:00:00
thunderbird security update
2023-09-06 00:00:00
redhat
redhat
(RHSA-2023:4948) Important: thunderbird security update
2023-09-04 15:03:59
(RHSA-2023:4955) Important: thunderbird security update
2023-09-04 15:04:43
(RHSA-2023:4946) Important: thunderbird security update
2023-09-04 15:03:25
rocky
rocky
thunderbird security update
2023-10-06 22:57:16
firefox security update
2023-10-06 22:57:16
redos
redos
ROS-20230919-01
2023-09-19 00:00:00
ROS-20230919-02
2023-09-19 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2023-08-30 22:09:54
mageia
mageia
Updated firefox/thunderbird packages fix security vulnerability
2023-09-25 01:16:18
rosalinux
rosalinux
Advisory ROSA-SA-2024-2371
2024-03-12 12:37:38
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-02-19 00:00:00
ibm
ibm