Lucene search
Ubuntu.comUB:CVE-2023-25736HistoryFeb 15, 2023 - 12:00 a.m.
CVE-2023-25736
2023-02-1500:00:00
ubuntu.com
ubuntu.com
10
cve-2023-25736
vulnerability
firefox
nshtmldocument
nsicontent
undefined behavior
spidermonkey
javascript
ubuntu 22.04
firefox snap
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
68.0%
An invalid downcast from nsHTMLDocument to nsIContent could have lead
to undefined behavior. This vulnerability affects Firefox < 110.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | firefox | < 110.0+build3-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | firefox | < 110.0+build3-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs38 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs68 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs78 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs91 | < any | UNKNOWN |
Related
cnvd
cnvd
Unspecified Vulnerability in Mozilla Firefox (CNVD-2023-68437)
2023-02-23 00:00:00
cvelist
cvelist
CVE-2023-25736
2023-06-19 10:22:11
debiancve
debiancve
CVE-2023-25736
2023-06-19 11:15:09
veracode
veracode
Invalid Downcast
2023-02-25 20:49:47
redhatcve
redhatcve
CVE-2023-25736
2023-02-16 09:30:48
prion
prion
Code injection
2023-06-19 11:15:00
cve
cve
CVE-2023-25736
2023-06-19 11:15:09
nvd
nvd
CVE-2023-25736
2023-06-19 11:15:09
ubuntu
ubuntu
Firefox vulnerabilities
2023-02-20 00:00:00
Firefox regressions
2023-03-01 00:00:00
openvas
openvas
Ubuntu: Security Advisory (USN-5880-1)
2023-02-20 00:00:00
Ubuntu: Security Advisory (USN-5880-2)
2023-03-02 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-04, MFSA2023-06) - Windows
2023-03-03 00:00:00
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-5880-1)
2023-02-20 00:00:00
Mozilla Firefox < 110.0
2023-02-14 00:00:00
Mozilla Firefox < 110.0
2023-02-14 00:00:00
osv
osv
firefox vulnerabilities
2023-02-20 03:14:08
firefox regressions
2023-03-01 07:00:04
MozillaFirefox-110.0.1-1.1 on GA media
2024-06-15 00:00:00
kaspersky
kaspersky
KLA20237 Multiple vulnerabilities in Mozilla Firefox
2023-02-14 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 110 — Mozilla
2023-02-14 00:00:00
photon
photon
Critical Photon OS Security Update - PHSA-2023-5.0-0035
2023-06-22 00:00:00
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
68.0%
Related for UB:CVE-2023-25736