CVE-2024-7518

2024-08-0600:00:00

ubuntu.com

firefox

thunderbird

vulnerability

spoofing attack

fullscreen notification

AI Score

Confidence

Low

EPSS

0.001

Percentile

22.6%

JSON

Select options could obscure the fullscreen notification dialog. This could
be used by a malicious site to perform a spoofing attack. This
vulnerability affects Firefox < 129, Firefox ESR < 128.1, and Thunderbird <
128.1.

Notes

Author	Note
mdeslaur	mozjs* contain a copy of the SpiderMonkey JavaScript engine. It is not feasible to backport security fixes to the mozjs* packages, as such, marking them as ignored. starting with Ubuntu 22.04, the firefox package is just a script that installs the Firefox snap starting with Ubuntu 24.04, the thunderbird package is just a script that installs the Thunderbird snap

OSVersionArchitecturePackageVersionFilename
ubuntu20.04noarchfirefox< anyUNKNOWN
ubuntu18.04noarchmozjs38< anyUNKNOWN
ubuntu20.04noarchthunderbird< anyUNKNOWN
ubuntu22.04noarchthunderbird< anyUNKNOWN

OS	Version	Architecture	Package	Version	Filename
ubuntu	20.04	noarch	firefox	< any	UNKNOWN
ubuntu	18.04	noarch	mozjs38	< any	UNKNOWN
ubuntu	20.04	noarch	thunderbird	< any	UNKNOWN
ubuntu	22.04	noarch	thunderbird	< any	UNKNOWN