Lucene search

PRIOn knowledge basePRION:CVE-2023-4576

HistorySep 11, 2023 - 9:15 a.m.

Integer overflow

2023-09-1109:15:00

PRIOn knowledge base

www.prio-n.com

windows

integer overflow

recordedsourcesurfacecreation

heap buffer overflow

sensitive data leakage

sandbox escape

firefox

thunderbird

vulnerability

8.2 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.7%

JSON

On Windows, an integer overflow could occur in RecordedSourceSurfaceCreation which resulted in a heap buffer overflow potentially leaking sensitive data that could have led to a sandbox escape.
This bug only affects Firefox on Windows. Other operating systems are unaffected. This vulnerability affects Firefox < 117, Firefox ESR < 102.15, Firefox ESR < 115.2, Thunderbird < 102.15, and Thunderbird < 115.2.

CPENameOperatorVersion
firefoxlt117.0
firefox_esrlt102.15
firefox_esrge115.0
firefox_esrlt115.2
thunderbirdlt115.2

Name	Operator	Version
firefox	lt	117.0
firefox_esr	lt	102.15
firefox_esr	ge	115.0
firefox_esr	lt	115.2
thunderbird	lt	115.2

References

bugzilla.mozilla.org/show_bug.cgi?id=1846694

www.mozilla.org/security/advisories/mfsa2023-34/

www.mozilla.org/security/advisories/mfsa2023-35/

www.mozilla.org/security/advisories/mfsa2023-36/

www.mozilla.org/security/advisories/mfsa2023-37/

www.mozilla.org/security/advisories/mfsa2023-38/