Lucene search
Ubuntu.comUB:CVE-2023-32209HistoryMay 10, 2023 - 12:00 a.m.
CVE-2023-32209
2023-05-1000:00:00
ubuntu.com
ubuntu.com
13
cve-2023-32209
malicious favicon
out of memory
firefox
snap
ubuntu 22.04
vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
48.5%
A maliciously crafted favicon could have led to an out of memory crash.
This vulnerability affects Firefox < 113.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 18.04 | noarch | firefox | < 113.0+build2-0ubuntu0.18.04.1 | UNKNOWN |
| ubuntu | 20.04 | noarch | firefox | < 113.0+build2-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs38 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs68 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs78 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs91 | < any | UNKNOWN |
Related
cve
cve
CVE-2023-32209
2023-06-19 10:15:09
debiancve
debiancve
CVE-2023-32209
2023-06-19 10:15:09
veracode
veracode
Denial Of Service (DoS)
2023-08-06 09:35:16
prion
prion
Memory corruption
2023-06-19 10:15:00
cvelist
cvelist
CVE-2023-32209
2023-06-19 09:36:11
nvd
nvd
CVE-2023-32209
2023-06-19 10:15:09
nessus
nessus
Ubuntu 18.04 LTS / 20.04 LTS : Firefox vulnerabilities (USN-6074-1)
2023-05-15 00:00:00
Fedora 38 : firefox (2023-2a5256e2a3)
2023-11-07 00:00:00
Fedora 37 : firefox (2023-45b3c1d9ed)
2023-11-07 00:00:00
openvas
openvas
Mozilla Firefox Security Advisory (MFSA2023-16) - Linux
2023-05-10 00:00:00
Ubuntu: Security Advisory (USN-6074-3)
2023-05-25 00:00:00
Mozilla Firefox Security Advisories (MFSA2023-16, MFSA2023-17) - Mac OS X
2023-05-11 00:00:00
osv
osv
firefox vulnerabilities
2023-05-15 04:06:24
firefox regressions
2023-05-24 09:48:18
firefox regressions
2023-05-16 04:18:05
ubuntu
ubuntu
Firefox regressions
2023-05-16 00:00:00
Firefox vulnerabilities
2023-05-15 00:00:00
Firefox regressions
2023-05-24 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox 113 — Mozilla
2023-05-09 00:00:00
kaspersky
kaspersky
KLA49165 Multiple vulnerabilities in Mozilla Firefox
2023-05-09 00:00:00
gentoo
gentoo
Mozilla Firefox: Multiple Vulnerabilities
2024-01-07 00:00:00
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
0.001 Low
EPSS
Percentile
48.5%
Related for UB:CVE-2023-32209