Lucene search
PRIOn knowledge basePRION:CVE-2023-5174HistorySep 27, 2023 - 3:19 p.m.
Design/Logic Flaw
2023-09-2715:19:00
PRIOn knowledge base
www.prio-n.com
9
windows
design flaw
handle duplication
firefox
sandbox
use-after-free
vulnerability
nvd
thunderbird
If Windows failed to duplicate a handle during process creation, the sandbox code may have inadvertently freed a pointer twice, resulting in a use-after-free and a potentially exploitable crash.
This bug only affects Firefox on Windows when run in non-standard configurations (such as using runas). Other operating systems are unaffected. This vulnerability affects Firefox < 118, Firefox ESR < 115.3, and Thunderbird < 115.3.
| CPE | Name | Operator | Version |
|---|---|---|---|
| firefox | lt | 118 | |
| firefox_esr | lt | 115.3 | |
| thunderbird | lt | 115.3 |
Related
veracode
veracode
Denial Of Service (DoS)
2023-10-02 19:12:38
cve
cve
CVE-2023-5174
2023-09-27 15:19:42
nvd
nvd
CVE-2023-5174
2023-09-27 15:19:42
redhatcve
redhatcve
CVE-2023-5174
2023-09-27 06:54:29
ubuntucve
ubuntucve
CVE-2023-5174
2023-09-27 00:00:00
alpinelinux
alpinelinux
CVE-2023-5174
2023-09-27 15:19:42
cnvd
cnvd
Mozilla Firefox Process Created Twice Release Vulnerability
2023-10-07 00:00:00
cvelist
cvelist
CVE-2023-5174
2023-09-27 14:13:19
debiancve
debiancve
CVE-2023-5174
2023-09-27 15:19:42
kaspersky
kaspersky
KLA60814 Multiple vulnerabilities in Mozilla Thunderbird
2023-09-26 00:00:00
KLA60813 Multiple vulnerabilities in Mozilla Firefox ESR
2023-09-26 00:00:00
KLA60812 Multiple vulnerabilities in Mozilla Firefox
2023-09-26 00:00:00
nessus
nessus
SUSE SLES12 Security Update : MozillaFirefox (SUSE-SU-2023:3837-1)
2023-09-28 00:00:00
SUSE SLES15 Security Update : MozillaFirefox (SUSE-SU-2023:3899-1)
2023-09-30 00:00:00
Mozilla Firefox ESR < 115.3
2023-09-26 00:00:00
openvas
openvas
Mozilla Firefox ESR Security Advisories (MFSA2023-41, MFSA2023-43)- Windows
2023-09-27 00:00:00
openSUSE: Security Advisory for MozillaFirefox (SUSE-SU-2023:3898-1)
2024-03-04 00:00:00
SUSE: Security Advisory (SUSE-SU-2023:3898-1)
2023-10-02 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Thunderbird 115.3 — Mozilla
2023-09-26 00:00:00
Security Vulnerabilities fixed in Firefox ESR 115.3 — Mozilla
2023-09-26 00:00:00
Security Vulnerabilities fixed in Firefox 118 — Mozilla
2023-09-26 00:00:00
slackware
slackware
[slackware-security] mozilla-firefox
2023-09-26 19:39:20
gentoo
gentoo
Mozilla Thunderbird: Multiple Vulnerabilities
2024-02-19 00:00:00
ibm
ibm