Privilege Escalation

🗓️ 24 Mar 2024 12:13:55Reported by Veracode Vulnerability DatabaseType

veracode🔗 sca.analysiscenter.veracode.com👁 25 Views

Firefox privilege escalation vulnerability due to unauthorized event handler injection

Reporter	Title	Published	Views	Family All 143
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2024-023)	1 Apr 202400:00	–	nessus
Tenable Nessus	Amazon Linux 2 : firefox (ALASFIREFOX-2024-024)	30 Apr 202400:00	–	nessus
Tenable Nessus	CentOS 8 : firefox (CESA-2024:1484)	8 Apr 202400:00	–	nessus
Tenable Nessus	CentOS 7 : firefox (RHSA-2024:1486)	25 Mar 202400:00	–	nessus
Tenable Nessus	Debian dla-3775 : firefox-esr - security update	25 Mar 202400:00	–	nessus
Tenable Nessus	Debian dsa-5645 : firefox-esr - security update	23 Mar 202400:00	–	nessus
Tenable Nessus	Fedora 40 : firefox (2024-8b5bd4ad5f)	29 Apr 202400:00	–	nessus
Tenable Nessus	Fedora 39 : firefox (2024-c8549a8c75)	24 Mar 202400:00	–	nessus
Tenable Nessus	GLSA-202407-22 : Mozilla Firefox: Multiple Vulnerabilities	6 Jul 202400:00	–	nessus
Tenable Nessus	Mozilla Firefox ESR < 115.9.1	22 Mar 202400:00	–	nessus

Vulners

Node

firefox-esr firefox-esrMatch78.8.0esr-1debian

AND

firefox-esr firefox-esrMatch78.5.0esr-1debian

AND

debian debian_linuxMatch999

mozilla firefoxMatch82.0.3-1debian

AND

mozilla firefoxMatch83.0-1debian

AND

mozilla firefoxMatch81.0-2debian

AND

debian debian_linuxMatch999

firefox-esr firefox-esrMatch78.5.0esr-1debian

AND

debian debian_linuxMatch11

firefox-esr firefox-esrMatch78.5.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.7.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.11.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch78.8.0esr-1~deb10u1debian

AND

firefox-esr firefox-esrMatch68.12.0esr-1~deb10u1debian

AND

debian debian_linuxMatch10

firefox-esr firefox-esrMatch102.10.0-r5os

AND

firefox-esr firefox-esrMatch115.1.0-r0os

AND

firefox-esr firefox-esrMatch102.11.0-r1os

AND

firefox-esr firefox-esrMatch102.11.0-r0os

AND

firefox-esr firefox-esrMatch115.5.0-r0os

AND

firefox-esr firefox-esrMatch102.12.0-r0os

AND

firefox-esr firefox-esrMatch115.8.0-r0os

AND

firefox-esr firefox-esrMatch115.0.3-r0os

AND

firefox-esr firefox-esrMatch102.10.0-r2os

AND

firefox-esr firefox-esrMatch115.7.0-r0os

AND

firefox-esr firefox-esrMatch115.3.1-r0os

AND

firefox-esr firefox-esrMatch115.0-r0os

AND

firefox-esr firefox-esrMatch115.0.2-r0os

AND

alpinelinux alpine_linuxMatch3.18

firefox-esr firefox-esrMatch115.7.0-r0os

AND

firefox-esr firefox-esrMatch115.5.0-r0os

AND

firefox-esr firefox-esrMatch115.4.0-r1os

AND

firefox-esr firefox-esrMatch115.8.0-r0os

AND

alpinelinux alpine_linuxMatch3.19

mozjs115 mozjs115Match115.4.0-r2os

AND

mozjs115 mozjs115Match115.1.0-r0os

AND

mozjs115 mozjs115Match115.4.0-r0os

AND

mozjs115 mozjs115Match115.2.0-r0os

AND

mozjs115 mozjs115Match115.3.0-r0os

AND

mozjs115 mozjs115Match115.8.0-r0os

AND

mozjs115 mozjs115Match115.3.1-r0os

AND

mozjs115 mozjs115Match115.5.0-r0os

AND

mozjs115 mozjs115Match115.4.0-r1os

AND

mozjs115 mozjs115Match115.9.0-r0os

AND

mozjs115 mozjs115Match115.7.0-r0os

AND

mozjs115 mozjs115Match115.2.1-r0os

AND

alpinelinux alpine_linuxMatchedge

mozjs115 mozjs115Match115.9.0-r0os

AND

mozjs115 mozjs115Match115.3.1-r0os

AND

mozjs115 mozjs115Match115.8.0-r0os

AND

mozjs115 mozjs115Match115.5.0-r0os

AND

mozjs115 mozjs115Match115.7.0-r0os

AND

alpinelinux alpine_linuxMatch3.19

Source	Link
security-tracker	www.security-tracker.debian.org/tracker/CVE-2024-29944
bugzilla	www.bugzilla.mozilla.org/show_bug.cgi
lists	www.lists.debian.org/debian-lts-announce/2024/03/msg00028.html
mozilla	www.mozilla.org/security/advisories/mfsa2024-15/
mozilla	www.mozilla.org/security/advisories/mfsa2024-16/
openwall	www.openwall.com/lists/oss-security/2024/03/23/1

01 Apr 2025 18:53Current

6.8Medium risk

Vulners AI Score6.8

CVSS 3.18.4

EPSS0.01405

SSVC