Lucene search
Ubuntu.comUB:CVE-2024-4770HistoryMay 14, 2024 - 12:00 a.m.
CVE-2024-4770
2024-05-1400:00:00
ubuntu.com
ubuntu.com
6
cve-2024-4770
firefox
thunderbird
font styles
pdf
crash vulnerability
mozilla
ubuntu
thunderbird snap
firefox snap
javascript engine
security
When saving a page to PDF, certain font styles could have led to a
potential use-after-free crash. This vulnerability affects Firefox < 126,
Firefox ESR < 115.11, and Thunderbird < 115.11.
Notes
| Author | Note |
|---|---|
| tyhicks | mozjs contains a copy of the SpiderMonkey JavaScript engine |
| mdeslaur | starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap starting with Ubuntu 24.04, the thunderbird package is just a script that installs the Thunderbird snap |
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| ubuntu | 20.04 | noarch | firefox | < 126.0+build2-0ubuntu0.20.04.1 | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs102 | < any | UNKNOWN |
| ubuntu | 23.10 | noarch | mozjs102 | < any | UNKNOWN |
| ubuntu | 24.04 | noarch | mozjs102 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs38 | < any | UNKNOWN |
| ubuntu | 18.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs52 | < any | UNKNOWN |
| ubuntu | 20.04 | noarch | mozjs68 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs78 | < any | UNKNOWN |
| ubuntu | 22.04 | noarch | mozjs91 | < any | UNKNOWN |
References
bugzilla.mozilla.org/show_bug.cgi?id=1893270
launchpad.net/bugs/cve/CVE-2024-4770
nvd.nist.gov/vuln/detail/CVE-2024-4770
security-tracker.debian.org/tracker/CVE-2024-4770
ubuntu.com/security/notices/USN-6779-1
ubuntu.com/security/notices/USN-6782-1
www.cve.org/CVERecord?id=CVE-2024-4770
www.mozilla.org/en-US/security/advisories/mfsa2024-21/#CVE-2024-4770
www.mozilla.org/en-US/security/advisories/mfsa2024-22/#CVE-2024-4770
www.mozilla.org/en-US/security/advisories/mfsa2024-23/#CVE-2024-4769
www.mozilla.org/security/advisories/mfsa2024-21/
www.mozilla.org/security/advisories/mfsa2024-22/
www.mozilla.org/security/advisories/mfsa2024-23/
Related
redhatcve
redhatcve
CVE-2024-4770
2024-05-14 18:55:07
cvelist
cvelist
CVE-2024-4770
2024-05-14 17:21:24
cve
cve
CVE-2024-4770
2024-05-14 18:15:14
nvd
nvd
CVE-2024-4770
2024-05-14 18:15:14
debiancve
debiancve
CVE-2024-4770
2024-05-14 18:15:14
nessus
nessus
RHEL 8 : thunderbird (RHSA-2024:2912)
2024-05-20 00:00:00
AlmaLinux 9 : thunderbird (ALSA-2024:2888)
2024-05-21 00:00:00
RHEL 8 : firefox (RHSA-2024:2887)
2024-05-16 00:00:00
mageia
mageia
Updated nss & firefox packages fix security vulnerabilities
2024-05-22 02:17:20
Updated thunderbird packages fix security vulnerabilities
2024-05-22 02:38:02
rocky
rocky
thunderbird security update
2024-06-14 14:00:40
kaspersky
kaspersky
KLA67450 Multiple vulnerabilities in Mozilla Thunderbird
2024-05-15 00:00:00
KLA67587 Multiple vulnerabilities in Mozilla Firefox ESR
2024-05-14 00:00:00
KLA67588 Multiple vulnerabilities in Mozilla Firefox
2024-05-14 00:00:00
mozilla
mozilla
Security Vulnerabilities fixed in Firefox ESR 115.11 — Mozilla
2024-05-14 00:00:00
Security Vulnerabilities fixed in Thunderbird 115.11 — Mozilla
2024-05-15 00:00:00
Security Vulnerabilities fixed in Firefox 126 — Mozilla
2024-05-14 00:00:00
openvas
openvas
Slackware: Security Advisory (SSA:2024-135-01)
2024-05-15 00:00:00
Mozilla Firefox ESR Security Update (mfsa_2024-22) - Mac OS X
2024-05-17 00:00:00
Mozilla Thunderbird Security Update (mfsa_2024-23) - Windows
2024-05-17 00:00:00
redhat
redhat
(RHSA-2024:2886) Important: firefox security update
2024-05-16 11:24:44
(RHSA-2024:2885) Important: firefox security update
2024-05-16 11:24:38
(RHSA-2024:2905) Important: thunderbird security update
2024-05-20 01:02:21
debian
debian
[SECURITY] [DLA 3815-1] firefox-esr security update
2024-05-16 07:16:17
[SECURITY] [DSA 5693-1] thunderbird security update
2024-05-17 17:04:52
[SECURITY] [DSA 5691-1] firefox-esr security update
2024-05-15 17:48:47
osv
osv
thunderbird - security update
2024-05-17 00:00:00
Important: thunderbird security update
2024-05-16 00:00:00
thunderbird vulnerabilities
2024-05-22 05:06:43
oraclelinux
oraclelinux
firefox security update
2024-05-16 00:00:00
thunderbird security update
2024-05-20 00:00:00
thunderbird security update
2024-06-11 00:00:00
slackware
slackware
[slackware-security] mozilla-thunderbird
2024-06-12 21:36:48
[slackware-security] mozilla-firefox
2024-05-14 19:27:14
almalinux
almalinux
Moderate: thunderbird security update
2024-06-10 00:00:00
Important: thunderbird security update
2024-05-16 00:00:00
Moderate: firefox security update
2024-06-10 00:00:00
ubuntu
ubuntu
Thunderbird vulnerabilities
2024-05-22 00:00:00
Firefox vulnerabilities
2024-05-21 00:00:00
Firefox regressions
2024-05-29 00:00:00
amazon
amazon
Important: thunderbird
2024-06-06 20:17:00